Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier: q4vJNeq38T66M8CjKN0rGIjdFs2pDYost8BFfuwPggw=
Subject key identifier: 1D:84:9E:73:09:52:72:A2:4A:47:FB:DE:4A:D9:56:02:B8:6C:F3:48
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial: 019A5151541AB073D8846086DA534AEAC7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 00:01:15 +0000
Manifest this update: Wed 05 Nov 2025 00:01:15 +0000
Manifest next update: Thu 06 Nov 2025 00:01:15 +0000
Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: M7jmr26/+1tYdqirJJvmYiCJ589AaTU0lVpDHb9D0B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:54:1a:b0:73:d8:84:60:86:da:53:4a:ea:c7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
Validity
Not Before: Nov 5 00:01:15 2025 GMT
Not After : Nov 6 00:01:15 2025 GMT
Subject: CN=1d849e73095272a24a47fbde4ad95602b86cf348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:e6:f2:c8:0e:1d:22:31:36:3b:bd:b7:33:
81:a5:01:0f:61:27:18:1c:78:a3:26:8d:16:71:eb:
34:e7:a9:bb:60:df:50:63:bd:77:ca:fc:b1:46:b7:
e3:62:cc:b5:8c:7c:06:90:a9:c4:16:ec:55:e3:8d:
cc:70:cc:10:60:86:51:c3:ac:12:62:bc:2a:bc:b7:
62:a8:de:c9:07:67:06:08:ba:1d:3b:7d:06:5b:6b:
19:24:a6:b9:43:4f:07:ac:a5:8c:bf:58:6b:2b:c6:
2f:90:06:1f:38:25:a9:51:7a:da:69:6b:f3:9a:e8:
a7:b0:99:b4:a9:dd:a7:56:6e:79:99:42:10:76:4c:
7a:81:c3:0e:d9:2c:a0:e0:ee:44:7b:99:bf:a4:0e:
3b:1f:95:6d:52:1b:0e:3e:cd:13:a8:de:0a:77:13:
91:41:02:89:38:52:de:1b:b6:03:77:05:fd:3b:33:
49:75:16:0f:6f:05:3f:98:2b:f1:83:54:7e:65:5c:
18:2c:82:27:6e:73:af:27:04:c5:74:b7:7d:35:28:
bd:4e:ff:6d:20:9d:91:f9:ba:24:33:69:51:65:94:
33:f8:c2:b5:23:20:57:ac:8d:35:9e:ac:a9:8f:1b:
25:c1:8c:e6:8b:23:1f:c2:22:53:6b:90:57:5c:e5:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:84:9E:73:09:52:72:A2:4A:47:FB:DE:4A:D9:56:02:B8:6C:F3:48
X509v3 Authority Key Identifier:
keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:10:39:cb:b9:93:f8:9c:7f:b2:84:66:e3:c4:a4:63:a0:9e:
a7:4c:9c:4d:79:f4:d0:65:ac:f7:72:88:11:41:82:80:5e:16:
88:54:5a:15:0d:02:d2:db:eb:84:2c:ae:02:fc:2d:67:f4:f4:
fc:07:b9:4d:f5:40:57:54:b1:02:cf:a9:ea:63:f8:d0:93:02:
1a:17:8a:19:63:62:b9:e9:2f:09:4f:11:c1:f1:27:f5:d7:9e:
b1:41:c5:11:f5:dd:c3:0a:2b:a3:91:49:9e:e3:c5:e8:1f:dd:
2f:91:66:24:85:49:3f:c7:bc:ef:02:64:5e:a3:5a:be:11:84:
8a:e4:4f:40:5c:07:ff:cb:28:83:57:69:40:76:fc:c8:79:3c:
47:e9:17:77:8d:cf:4b:cb:86:91:2a:40:b5:c9:f9:93:72:00:
32:24:75:6d:96:3e:52:5b:62:86:62:38:2c:6f:84:2a:0a:19:
aa:da:f3:56:01:08:3a:40:ef:9e:00:3d:80:21:9c:b2:fc:19:
0e:f9:95:03:7b:40:e3:0b:93:db:26:62:55:c4:5c:f0:3c:01:
2e:db:b8:6c:4b:13:26:46:2f:dd:11:12:7f:bb:90:fa:9a:51:
4e:de:f9:31:09:ff:8f:86:16:69:bd:c9:f0:0b:7c:e3:72:f6:
01:91:6c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:35 2025 by rpki-client