Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
File: KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft (raw, json)
Hash identifier: HKrAG7HU1e6Z8+Wbp9AWq9PUU32OFw4klI5T36MJRW8=
Subject key identifier: 84:8F:F4:C5:FD:1A:94:1D:DF:84:E2:7C:88:49:DC:B5:62:96:05:87
Authority key identifier: 2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
Certificate issuer: /CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Certificate serial: 019A51F562463830E39992136BF9D3F8686D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
Manifest number: 089F
Signing time: Wed 05 Nov 2025 03:00:27 +0000
Manifest this update: Wed 05 Nov 2025 03:00:27 +0000
Manifest next update: Thu 06 Nov 2025 03:00:27 +0000
Files and hashes: 1: KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl (hash: Wv5L5Q65lp0tOZ7ICoRzlmZEhNnosCsyBFRoVMuTwRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:62:46:38:30:e3:99:92:13:6b:f9:d3:f8:68:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Validity
Not Before: Nov 5 03:00:27 2025 GMT
Not After : Nov 6 03:00:27 2025 GMT
Subject: CN=848ff4c5fd1a941ddf84e27c8849dcb562960587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:f7:a2:e0:e6:bd:ff:da:5e:f4:ea:b2:63:
5d:8a:ca:98:2c:2b:55:e4:07:2f:b3:20:51:fa:b2:
7c:00:83:e9:e2:c6:e5:ca:7b:13:10:66:4b:67:2f:
b8:f3:35:53:7a:43:e7:2f:0a:f3:31:a4:b6:a4:a6:
be:11:40:7d:86:b7:78:44:d7:47:79:e8:1f:4a:07:
2f:90:d1:90:c6:c6:5e:95:93:32:32:56:68:3c:8b:
e1:03:bd:0b:86:c1:3a:0a:e7:a0:ae:3e:af:06:73:
01:d3:d6:7c:c9:c6:a9:90:9b:56:2b:fb:d3:a6:8e:
fe:88:8a:d9:03:c9:5d:e6:48:3d:aa:d4:86:97:e1:
ee:04:bd:71:54:df:69:83:cf:9b:14:42:43:03:15:
0f:4b:a1:92:d9:0f:16:ed:90:55:f6:d4:5a:d5:c2:
89:e7:fb:fb:3c:dc:e9:42:31:8d:c5:e7:1e:81:80:
64:ed:91:f5:5b:16:6e:63:ec:8c:ef:0e:38:d8:4d:
b8:0b:b9:7e:8c:ec:48:b9:6d:79:bb:8c:75:9c:13:
a3:7b:ef:23:0f:da:b3:51:a6:6f:97:2d:aa:ad:d8:
5b:82:04:ce:91:48:03:68:84:44:8a:a4:b1:1d:f4:
7b:ce:34:7e:a7:83:a0:bb:be:b3:de:f7:82:40:0a:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8F:F4:C5:FD:1A:94:1D:DF:84:E2:7C:88:49:DC:B5:62:96:05:87
X509v3 Authority Key Identifier:
keyid:2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b3:65:c7:6e:78:a8:9f:00:a0:10:f3:89:73:9a:27:ef:21:
ff:ad:3c:d2:3a:70:4e:bd:c9:a2:91:fb:4a:cd:3f:ea:16:ee:
f2:a4:be:37:80:47:36:fa:22:b5:98:3a:1e:0c:b0:bc:d6:dd:
24:58:ed:d0:f8:cc:32:57:6d:75:59:cc:7d:22:8c:a8:d2:9f:
41:5e:3d:7b:ae:e2:ec:6d:85:36:6d:a5:7d:82:8a:1e:d5:c3:
cc:f1:5f:fc:5f:39:f0:f6:b4:ba:e1:73:ad:48:17:59:a4:31:
58:53:d4:72:cd:da:e0:fb:9c:d6:33:df:ba:8f:24:4c:47:71:
cb:4f:86:d4:ab:68:8b:6c:26:a0:65:9b:42:69:64:ae:98:80:
e4:dd:85:84:51:27:49:0f:fe:57:5e:58:d6:8b:b7:25:0d:f4:
49:69:27:30:f1:9a:26:dd:6b:7a:c4:56:5f:0d:52:53:02:87:
29:a5:30:08:d2:7e:e5:68:de:df:5e:21:82:d8:f7:b3:df:8e:
11:04:df:0c:d1:fa:bf:e6:ea:28:3c:b5:8d:b5:94:04:27:c0:
0a:85:68:bf:d3:c1:cf:da:f3:1b:ca:cc:12:2f:3b:b7:5e:66:
92:0e:1a:5a:91:9b:96:d1:99:b8:71:cc:f6:55:03:73:e9:f6:
42:95:24:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:02 2025 by rpki-client