Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
File: KgV9tw5HTrSgd_oT875N17Y4C1Q.mft (raw, json)
Hash identifier: VmraS0yx8/oJD7sYyOYJGZntSp9Kx4d95ctPOR4Nekw=
Subject key identifier: F0:2C:B1:EE:F5:69:E6:2E:AD:2C:A1:8D:C4:B1:B1:5F:EE:51:E9:6E
Authority key identifier: 2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
Certificate issuer: /CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Certificate serial: 019A4EBD5699341FA4F2DFD1EA771368FE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
Manifest number: 1105
Signing time: Tue 04 Nov 2025 12:00:22 +0000
Manifest this update: Tue 04 Nov 2025 12:00:22 +0000
Manifest next update: Wed 05 Nov 2025 12:00:22 +0000
Files and hashes: 1: KgV9tw5HTrSgd_oT875N17Y4C1Q.crl (hash: VUpalSagEE88aV3zubYoK7YwbhBoeuMskeUgYkKF+6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:56:99:34:1f:a4:f2:df:d1:ea:77:13:68:fe:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Validity
Not Before: Nov 4 12:00:22 2025 GMT
Not After : Nov 5 12:00:22 2025 GMT
Subject: CN=f02cb1eef569e62ead2ca18dc4b1b15fee51e96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:7c:9a:58:f3:d8:7b:93:d6:1b:0f:1a:0c:
d3:d9:55:ad:75:a5:92:65:19:79:5e:b9:c3:68:b4:
ea:f7:bb:28:01:c5:80:2c:f2:a1:c2:ca:7a:84:5a:
9d:9b:08:60:75:17:17:8e:54:47:e9:83:d1:c8:f2:
08:28:92:7b:bf:e1:07:31:fc:dc:dc:5c:86:b9:c1:
71:ea:c0:bf:fb:80:4c:8d:27:49:cc:a5:38:ae:19:
27:3c:73:57:27:b7:8b:df:2c:e2:e9:a0:d8:90:c5:
85:db:7a:c7:ed:4b:de:6a:30:99:71:44:2a:d4:99:
30:40:11:a7:89:32:59:8e:6a:8f:7d:08:7f:b2:b3:
b6:f5:96:6f:5d:56:00:6b:e8:ea:bb:1e:b9:04:42:
b2:0b:d0:30:42:ea:04:c1:92:07:a4:c9:93:33:60:
66:08:b7:6e:35:d5:14:d7:d0:16:0a:59:e5:b0:ca:
e7:b9:da:9f:26:46:83:3c:dd:29:a3:b8:c8:15:ba:
cb:3e:c7:05:0c:95:4c:6b:b8:7a:0e:96:11:99:60:
9a:08:ab:12:ca:dd:43:90:09:2b:00:91:5e:18:51:
21:e8:aa:49:d7:f7:da:3d:61:95:f5:4c:f5:21:eb:
2b:a7:02:60:27:ea:e5:17:08:f4:fa:55:7a:12:26:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2C:B1:EE:F5:69:E6:2E:AD:2C:A1:8D:C4:B1:B1:5F:EE:51:E9:6E
X509v3 Authority Key Identifier:
keyid:2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2f:5d:02:85:e9:de:28:fe:b6:7c:64:29:95:cf:0a:ff:da:
19:59:93:d2:b2:03:6c:9c:1d:35:f6:d4:3a:cb:7b:c8:aa:92:
62:83:ba:ac:34:53:7b:3c:dc:d2:23:7a:a2:12:f2:73:6c:a5:
8e:65:59:29:e6:9c:47:cc:fa:9b:42:d9:3b:cd:ab:a9:86:e0:
9b:de:44:ac:ae:c8:2a:fb:78:49:13:aa:eb:76:f3:51:c2:2f:
a7:f4:16:d0:4f:e0:5e:6d:9a:7f:d6:2b:0a:0f:4b:58:f1:4b:
2d:fc:ae:7e:d6:59:0a:5a:a3:2e:1f:f4:db:27:05:bd:14:84:
35:c3:fb:a6:53:37:20:4e:13:ba:fd:01:28:bb:01:99:3d:2a:
83:5a:5f:01:eb:3c:81:13:5a:96:45:85:27:4e:c7:2b:51:e9:
a4:54:60:b3:89:0d:cd:f5:fd:04:45:59:e4:d2:b6:2e:1f:13:
35:75:29:66:d7:f1:28:11:23:58:36:ad:5c:93:ec:8a:32:02:
8a:8a:6a:b3:18:63:ee:c0:6e:a7:01:2d:51:7e:20:bf:26:66:
86:28:b0:9a:c4:95:95:e6:ee:f7:72:f0:c8:59:c4:59:c1:16:
07:d9:2a:6a:dc:ee:f9:5d:90:b8:68:d4:93:43:89:4d:89:e1:
8f:31:c9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:49 2025 by rpki-client