Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
File: kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json)
Hash identifier: QzXJB3O8KXdNxJDFWbc1KoNTbczBX5KWntdpFaw5f2w=
Subject key identifier: 99:EB:B8:21:91:46:ED:8E:3F:D4:FD:EB:6E:B3:51:6E:33:86:EB:37
Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
Certificate issuer: /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Certificate serial: 019A4DAADF15AA82101C59F0CB752EB88F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
Manifest number: 05D1
Signing time: Tue 04 Nov 2025 07:00:35 +0000
Manifest this update: Tue 04 Nov 2025 07:00:35 +0000
Manifest next update: Wed 05 Nov 2025 07:00:35 +0000
Files and hashes: 1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: OvX/KU/33/cxz6zRGGc6c0kTtQDQcpxZgewLWXjuiCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:df:15:aa:82:10:1c:59:f0:cb:75:2e:b8:8f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Validity
Not Before: Nov 4 07:00:35 2025 GMT
Not After : Nov 5 07:00:35 2025 GMT
Subject: CN=99ebb8219146ed8e3fd4fdeb6eb3516e3386eb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:4f:4c:5c:b9:4a:f2:f6:da:19:aa:92:33:
d7:af:92:10:05:65:d3:0d:34:b8:09:c0:d2:0c:1e:
9a:2b:8c:35:65:f8:6f:bd:e8:37:86:61:15:51:ed:
77:0c:18:31:0b:49:83:11:2b:ef:12:26:8e:79:77:
5e:34:25:11:c5:ea:f2:10:8e:71:96:91:5c:ee:13:
0e:ab:d5:93:dd:e6:11:6f:93:8f:67:91:1d:fb:c0:
55:8c:26:6b:bf:37:7a:48:bd:2c:4b:1b:0c:d8:2f:
2b:72:24:bf:6f:b8:2a:76:08:14:f1:1e:83:9f:33:
73:95:e8:4d:dd:a5:cb:f4:23:70:10:61:5f:f8:26:
32:6d:39:c6:01:3a:86:5e:e3:55:d4:9e:d6:ec:9f:
e5:ec:5b:89:3e:ed:2b:f3:8f:bf:68:bc:b1:c9:52:
6f:df:77:b9:67:b7:eb:ee:1d:41:45:92:0f:9c:f2:
1d:7e:1d:bd:56:bb:38:26:f3:5b:30:85:3c:14:2b:
a3:f9:2f:5c:ef:1f:0f:f4:9e:fe:b4:e9:b3:32:d2:
1e:86:11:83:74:9a:c0:ac:e2:d2:83:22:c5:7a:e1:
5a:0c:81:c9:d0:a3:1d:22:a0:2f:7d:be:97:7a:9f:
d6:59:bb:bf:26:7f:f1:0e:90:79:a1:a2:77:ed:dc:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EB:B8:21:91:46:ED:8E:3F:D4:FD:EB:6E:B3:51:6E:33:86:EB:37
X509v3 Authority Key Identifier:
keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cb:43:79:d2:0d:94:08:29:a8:42:17:0b:c4:05:4f:17:ae:
39:0a:53:d0:81:ab:8d:4d:a5:ed:46:8d:b7:a3:85:85:27:ac:
38:e8:20:f0:66:2d:67:00:67:44:37:5c:48:46:bd:8d:1d:a1:
c1:6e:eb:ca:34:53:75:68:eb:e9:9a:3c:94:44:49:d2:d4:c0:
ce:38:10:3d:48:5a:f0:fd:86:93:7c:05:06:96:bd:c4:4b:b0:
88:57:d7:02:87:d3:d7:c6:eb:6e:b4:23:65:36:dc:08:11:dd:
71:ec:2c:d9:5f:a9:6c:df:0d:dd:a1:11:5e:36:cf:88:ae:43:
cd:06:ee:ba:fb:fe:e3:53:43:ca:84:b0:44:e6:5b:e0:b4:d6:
f4:4e:7e:44:bb:4e:6e:d9:d7:68:64:8a:78:c3:71:65:2b:84:
a5:f3:ac:fe:7b:fc:69:61:4c:94:5a:e3:dc:06:a4:d1:72:1f:
79:89:00:75:e7:20:a7:c7:37:d8:e1:4b:a2:c0:87:11:59:69:
65:86:c2:08:0a:33:0c:db:98:6c:f0:ff:a4:1e:63:0b:d0:69:
65:e2:91:7e:09:e0:0d:1b:ba:d9:9a:51:88:31:b3:71:1a:7b:
b8:86:c0:91:47:e4:94:43:7a:ed:bb:1a:15:6d:90:8c:4d:d1:
46:47:5f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:46 2025 by rpki-client