Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
File: KAYV5gBqhh9mz3MH0w_JNQx2994.mft (raw, json)
Hash identifier: Vz7X+Ogt8efDiAC/CkFslU0sHZA/R3H7GJlG32MiYv8=
Subject key identifier: F9:B7:C5:9F:80:CE:05:FC:B0:7E:9A:34:80:32:B0:A6:36:F4:FB:72
Authority key identifier: 28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
Certificate issuer: /CN=280615e6006a861f66cf7307d30fc9350c76f7de
Certificate serial: 019A4F622E38F1FBF80F4A6B6A7CA372DEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 15:00:25 +0000
Manifest this update: Tue 04 Nov 2025 15:00:25 +0000
Manifest next update: Wed 05 Nov 2025 15:00:25 +0000
Files and hashes: 1: KAYV5gBqhh9mz3MH0w_JNQx2994.crl (hash: qzWIyI/NHnFtD4vcqw2VcA9sUpoM3WGxnOJH22XsiIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:2e:38:f1:fb:f8:0f:4a:6b:6a:7c:a3:72:de:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280615e6006a861f66cf7307d30fc9350c76f7de
Validity
Not Before: Nov 4 15:00:25 2025 GMT
Not After : Nov 5 15:00:25 2025 GMT
Subject: CN=f9b7c59f80ce05fcb07e9a348032b0a636f4fb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:70:dd:7c:7b:e9:03:4f:cb:58:d1:73:0a:
18:3e:47:57:b6:a6:84:a3:ad:cd:1b:dd:3e:bc:8a:
16:44:9e:1b:ef:b8:91:34:36:dc:7e:d9:a4:df:f8:
4b:5e:2d:67:32:65:5c:55:d3:ae:ae:bd:95:de:17:
be:ce:68:e9:aa:5a:12:bf:64:57:fd:17:ea:a5:9c:
6b:33:18:fa:4a:c1:69:d1:3f:df:08:f7:2b:e4:f0:
74:39:d7:2b:40:ed:1d:5a:b3:e4:48:9d:69:82:dd:
93:f8:ec:35:f1:25:bf:29:0e:60:85:35:25:86:97:
6c:83:af:00:9b:3c:52:a2:51:bc:d1:ff:9a:3e:d4:
45:4e:b7:4c:ca:e5:0b:b0:55:3e:ff:11:7e:f6:11:
64:fe:7f:ae:fb:2b:df:01:3f:67:1a:ff:61:79:d7:
68:26:57:4e:92:5d:cf:03:2b:a9:f0:cf:7f:1a:76:
36:9a:16:ec:e2:b5:4f:70:b0:9d:6c:9b:6a:38:58:
0a:4d:35:0d:ca:8b:89:ee:26:ee:96:a6:37:b4:84:
62:a2:a4:d5:58:51:2d:88:7b:39:1d:de:a9:8e:81:
ca:09:1c:c5:d4:9e:2a:8c:4d:4f:32:53:f6:fb:80:
a2:26:e4:fb:f9:05:c5:cc:cc:60:9c:04:b0:4f:bc:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B7:C5:9F:80:CE:05:FC:B0:7E:9A:34:80:32:B0:A6:36:F4:FB:72
X509v3 Authority Key Identifier:
keyid:28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fa:67:a5:d9:bc:00:d9:b3:7e:c4:76:37:8c:45:e2:2e:6c:
c8:23:41:ac:71:96:80:eb:28:98:c3:2d:2c:1c:3c:b1:ca:28:
a2:16:dc:7e:f6:de:21:52:c3:2a:44:1c:db:a6:7f:d5:37:ba:
a0:b1:17:b6:23:0d:b2:8a:ff:92:81:51:2a:1d:98:a2:e9:d7:
04:40:f4:6c:bb:76:f3:99:97:c4:9b:f2:9a:ab:80:0f:99:f6:
67:b0:bd:76:dc:f8:f7:25:62:91:a8:c1:47:21:2f:e0:8e:81:
29:ed:5c:8f:a6:fb:49:f0:86:ff:2f:a4:0a:77:25:7f:76:5d:
9f:f4:ff:d9:a1:2a:a8:f6:40:2e:fd:52:9e:fb:be:2a:07:96:
7c:29:e6:2a:7b:1a:91:bd:27:68:24:83:4e:1c:3a:08:6a:bf:
ba:59:44:a4:0c:84:c8:57:ef:77:3c:c8:6f:11:fe:9d:a5:17:
ce:4f:7f:1e:4a:93:0e:cc:bd:e6:71:07:83:f1:6a:bf:37:07:
24:ec:24:c3:37:fa:6e:0b:40:4c:d6:ff:32:22:86:90:d4:52:
f2:5e:2c:d9:a0:21:19:ea:b0:86:ea:27:a1:ed:e4:f3:b9:4d:
60:28:34:22:5a:28:de:48:b6:de:9d:d3:bd:53:89:ea:ee:47:
b2:50:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:53 2025 by rpki-client