Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
File: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft (raw, json)
Hash identifier: Js9Y2EK3LoFXGP/fcw2568URr4lUVKY6mF98SEouD+Y=
Subject key identifier: A4:B5:9C:33:76:36:41:90:7D:BE:9F:9C:44:E5:C8:60:72:BA:7D:62
Authority key identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
Certificate issuer: /CN=9309372464c59a3dd8ecd63215b01819706558a6
Certificate serial: 019A4F6249FB2CFD573FFA9F77837EF2E199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
Manifest number: 0737
Signing time: Tue 04 Nov 2025 15:00:32 +0000
Manifest this update: Tue 04 Nov 2025 15:00:32 +0000
Manifest next update: Wed 05 Nov 2025 15:00:32 +0000
Files and hashes: 1: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl (hash: mz9uQlHsbtAa7Cb8VUP3zomLpE3sUXBtTP/WoA0Ew8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:49:fb:2c:fd:57:3f:fa:9f:77:83:7e:f2:e1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9309372464c59a3dd8ecd63215b01819706558a6
Validity
Not Before: Nov 4 15:00:32 2025 GMT
Not After : Nov 5 15:00:32 2025 GMT
Subject: CN=a4b59c33763641907dbe9f9c44e5c86072ba7d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:ee:15:d7:b4:1a:36:4a:e2:e6:86:a5:4c:
dd:c3:a8:2a:c5:f2:42:54:04:0e:fc:0d:d4:27:f1:
bc:ef:b9:39:f8:09:6b:fc:67:2c:1e:cd:a3:4a:e3:
94:67:71:bc:39:e8:0a:21:f9:32:5e:ff:d4:39:c3:
33:96:0b:82:cd:fd:15:1a:bb:df:81:f7:d6:e7:c7:
31:bd:f2:9b:1e:3d:82:f5:bc:8f:ba:cf:19:8e:d4:
e0:d9:4c:5e:a3:55:71:71:1c:d4:93:34:0f:d5:e8:
6f:fb:ae:bb:fe:84:4e:78:e5:58:82:a7:0d:14:28:
68:75:09:26:2e:14:1e:aa:d0:8a:d8:95:56:f4:6f:
03:d1:3f:93:f3:62:43:73:93:5b:a3:08:cf:f3:85:
9e:b8:81:1e:ff:92:d7:8a:1c:3b:7d:bf:8e:86:1d:
8f:e4:0a:e8:79:bd:a7:e0:de:13:70:9b:6f:0a:37:
fc:3d:ce:84:3f:ef:41:0f:2a:2c:ec:94:a2:6f:bb:
43:da:44:31:6b:e5:52:aa:40:25:56:a5:c2:35:7c:
54:1a:af:cf:93:66:43:ce:8f:d9:7f:53:77:ea:96:
13:c9:70:0f:f3:99:41:88:4b:6d:a8:85:1e:89:2a:
9f:44:4a:f0:9d:d1:51:be:0a:64:b2:a3:cf:ce:61:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B5:9C:33:76:36:41:90:7D:BE:9F:9C:44:E5:C8:60:72:BA:7D:62
X509v3 Authority Key Identifier:
keyid:93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8f:2e:d0:df:4c:1b:9f:ec:b9:1d:20:c3:c5:03:14:ef:ff:
96:36:0a:90:0d:85:33:bd:c9:13:27:d7:db:4c:bd:d1:86:0e:
cf:e9:c0:b9:45:6d:aa:a2:64:6b:4e:c8:af:66:e2:a0:40:66:
75:41:3a:7e:d8:69:f7:4a:6c:8e:c2:ca:b1:54:4c:5c:bd:45:
f7:b6:34:13:7b:e6:18:82:5f:f0:91:01:a1:a5:9c:63:67:b1:
9e:4f:d7:4f:5d:c9:de:37:f2:1f:16:3c:c0:f1:54:72:4d:38:
6b:59:62:06:06:fd:b8:20:02:f0:f6:92:59:9a:68:a8:2e:29:
77:81:22:14:ff:54:f6:45:51:13:cd:01:dd:fb:62:89:3b:b9:
be:a0:48:5a:dd:09:bc:56:f7:70:9a:fc:e2:00:04:a8:ee:14:
3f:7e:8f:01:a9:72:55:03:f8:74:55:0d:44:a1:0b:48:84:f3:
36:8f:8b:83:aa:52:38:c1:d9:f9:8a:51:0a:b7:be:13:6e:ac:
97:fd:f7:82:44:d3:d0:34:7d:2d:57:72:08:8b:24:2c:e1:f7:
67:fc:7c:10:bb:76:a6:e0:4c:9b:ad:00:70:64:70:cd:cd:09:
27:5b:c7:14:70:5c:38:54:e7:bc:97:70:4f:15:26:8a:d4:12:
fe:23:66:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:48 2025 by rpki-client