Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
File: Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json)
Hash identifier: Dv78Xsh0QaDI8x+PAPvL9OFXnyuTGeDXb8LTQPvzmTU=
Subject key identifier: 33:89:39:99:F9:05:FB:B0:CC:67:82:6D:88:C6:8B:34:75:A5:37:50
Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Certificate issuer: /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Certificate serial: 019A50E2FD3A33A4F10BA8623C134EC32DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
Manifest number: 06F2
Signing time: Tue 04 Nov 2025 22:00:44 +0000
Manifest this update: Tue 04 Nov 2025 22:00:44 +0000
Manifest next update: Wed 05 Nov 2025 22:00:44 +0000
Files and hashes: 1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: 31Zq7cQinWn6Yi87Q4/3hlzQgnCkn8ixFogxygICZIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:fd:3a:33:a4:f1:0b:a8:62:3c:13:4e:c3:2d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Validity
Not Before: Nov 4 22:00:44 2025 GMT
Not After : Nov 5 22:00:44 2025 GMT
Subject: CN=33893999f905fbb0cc67826d88c68b3475a53750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:a6:45:8f:21:43:18:df:ce:5a:52:a3:80:
7b:f4:5e:5f:90:20:c0:1d:2a:19:b0:74:6d:e4:80:
73:a7:d7:36:b7:f4:77:89:14:a0:59:63:b3:a0:c0:
54:b6:51:65:06:98:ca:a8:ac:7d:a6:33:38:5b:f5:
3f:00:0d:44:57:ba:34:db:66:f7:54:9a:a6:e4:d9:
ae:8b:58:e8:95:a0:cd:98:65:d7:86:a0:42:26:49:
50:3c:54:b3:8a:a2:e3:45:22:22:8f:d3:4f:9c:87:
48:58:fd:30:e0:b9:0a:99:7f:9f:52:07:88:67:f1:
8b:c1:26:03:1d:e1:d6:ab:99:2e:1c:4d:6c:25:79:
3d:31:e0:eb:36:68:8e:cc:b6:3b:d3:c3:44:b2:70:
95:79:59:3e:9a:3f:5a:7b:4a:9f:20:8c:bc:f6:77:
97:41:a9:eb:39:18:00:91:20:2b:51:ec:05:a8:64:
47:03:98:99:8d:a7:55:33:f4:1c:d1:d4:73:66:0b:
8d:d6:18:06:5d:90:3c:58:01:ab:62:eb:f6:bd:09:
34:75:df:2d:e1:81:55:41:0c:e7:3d:c0:cf:85:f2:
71:09:f9:85:23:f7:13:69:59:b4:ce:0a:c1:d2:b6:
5d:e4:76:dc:65:e6:35:22:a7:4a:65:9a:a7:6e:cf:
b1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:89:39:99:F9:05:FB:B0:CC:67:82:6D:88:C6:8B:34:75:A5:37:50
X509v3 Authority Key Identifier:
keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:93:22:9d:67:60:47:a2:10:be:36:1d:0d:d7:7c:8b:fe:5f:
77:5f:c0:33:ab:5f:eb:b7:78:21:99:8d:8a:13:81:65:19:63:
96:dc:b6:f7:46:4d:9c:11:de:ab:e2:61:7e:63:e9:8e:2c:d9:
85:16:81:fd:b9:91:19:4d:a0:e1:b1:b9:1e:38:63:94:c4:81:
dd:ed:5f:80:3c:9c:1b:1d:77:d7:d3:17:6c:66:0c:cb:37:13:
ae:ad:2a:40:7a:ea:21:a6:39:66:44:e0:65:a0:0b:4c:a1:a0:
a2:50:74:6d:20:5b:7f:2f:36:9b:d5:26:6c:4e:ef:b0:ac:4f:
95:fd:79:8a:5e:48:66:51:fc:9e:1d:a4:29:85:9a:64:3f:1e:
21:6f:f0:fd:3f:0f:41:2b:80:f9:05:0a:87:cb:3a:10:a1:ed:
ce:12:49:3c:6c:67:bc:c3:4f:66:15:60:6b:4c:41:d8:4d:33:
9c:6d:42:86:61:26:65:f0:2c:80:b2:6f:29:63:97:cc:45:f7:
62:32:4f:86:7e:fb:94:e7:68:b5:ce:f6:ca:d7:94:53:bd:ab:
9c:57:8e:08:9f:c4:b9:0f:14:87:15:80:61:ab:19:8a:80:ec:
cc:c7:4c:15:44:3e:fd:f2:4e:71:03:c3:00:f5:59:e6:5c:1b:
8c:52:f7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:40:11 2025 by rpki-client