Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier: uz6ZgOY7xT7NsDHPa5+tuQ4VafwIuAp2uh+89PaKqGA=
Subject key identifier: 2B:B4:4A:C5:DA:EE:02:E4:3F:B1:66:CA:74:0D:8C:C0:85:39:3A:5E
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial: 019A50E35CC39C13466A4B494CF84EC3E4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number: 06A6
Signing time: Tue 04 Nov 2025 22:01:08 +0000
Manifest this update: Tue 04 Nov 2025 22:01:08 +0000
Manifest next update: Wed 05 Nov 2025 22:01:08 +0000
Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: 54kZcBdu5lIuWi2zWcNkBwmgaSsRcgGlmQS9IKbkTE4=)
2: SSf6jkDtZNnbxOBRunTsvPqgvfA.roa (hash: 5IZEhx43JWWVyUng521teCJJCgxsPSwTh1bUksl7+e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:5c:c3:9c:13:46:6a:4b:49:4c:f8:4e:c3:e4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
Validity
Not Before: Nov 4 22:01:08 2025 GMT
Not After : Nov 5 22:01:08 2025 GMT
Subject: CN=2bb44ac5daee02e43fb166ca740d8cc085393a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:65:21:7e:78:c8:7b:6d:c1:69:c5:4d:8d:
e9:ff:35:42:86:37:11:5f:57:be:71:18:1e:a7:01:
6f:5d:0a:ac:c5:51:e5:44:ac:7b:ce:48:80:53:a1:
7b:ef:08:81:49:7e:cf:e7:e4:a4:57:15:ed:ae:af:
32:99:ec:04:21:d5:58:52:df:1d:16:65:a7:3f:94:
c4:5c:49:d4:71:fa:e7:2e:9e:37:31:e7:25:b0:70:
a6:28:87:18:be:09:b2:b8:ef:6c:19:eb:1e:d6:b6:
e6:fb:89:57:2c:af:6e:6b:8b:43:4a:ec:ae:3a:b6:
0b:07:31:76:2d:3b:8d:b9:8a:ab:13:74:e2:35:80:
be:6e:f7:cd:b1:71:4d:23:69:c7:ed:01:fe:41:2f:
2a:57:70:58:73:f4:43:06:5c:6d:b4:6b:30:8a:9f:
78:55:73:f1:a4:ac:0e:19:20:38:62:bc:ad:14:50:
1b:93:90:30:50:fa:b0:3d:05:85:74:11:e9:e3:41:
17:ea:e8:e2:1f:81:fe:d5:50:85:a9:43:99:21:86:
50:39:01:5d:66:12:70:3e:24:2a:01:14:64:a0:c2:
ea:c0:58:9d:9b:2f:c1:6e:66:b1:f2:5a:f0:d0:0b:
3c:c1:d9:3d:c6:d6:93:ab:3f:32:85:3d:47:51:ec:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:4A:C5:DA:EE:02:E4:3F:B1:66:CA:74:0D:8C:C0:85:39:3A:5E
X509v3 Authority Key Identifier:
keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b6:a6:e8:16:91:61:ed:3f:01:1f:c9:ea:d0:db:cd:4b:03:
66:c6:b8:e3:5e:64:56:1f:b1:45:1e:9a:89:29:57:c2:9c:a3:
1e:f9:88:14:90:6f:e1:41:0a:9d:9e:0c:97:6d:ca:a1:6c:22:
57:11:aa:d5:b5:6e:fc:d9:ca:ac:06:6c:24:0e:c0:5b:e8:a7:
87:34:3c:43:fa:83:9f:fb:c2:e1:84:bb:3e:99:27:8c:ce:7a:
1e:37:e5:ec:7b:cc:6f:9e:d0:5c:9e:d2:21:58:65:b1:d8:bf:
16:fa:75:7b:f9:90:7f:f9:fc:1e:4f:1b:04:0f:db:55:ee:6c:
d8:02:19:14:7b:83:ef:f3:c6:1e:e5:2c:f5:7e:eb:bd:d8:c4:
91:b4:29:15:1e:c0:1a:48:f2:b1:71:f6:33:45:60:02:ef:3f:
92:b7:64:cf:e4:5b:27:c9:b5:b7:e7:7a:ce:02:0d:15:0a:ec:
79:af:2c:18:79:a3:9d:dd:9c:2a:85:ea:1c:84:77:d7:85:ec:
c6:d8:bd:6b:19:9c:c5:c9:d0:f7:ac:16:25:c7:3c:91:2b:5a:
44:45:25:4c:06:3a:93:e4:12:30:ca:c2:fd:16:cb:89:c0:0f:
7f:36:31:3b:e5:46:40:a3:61:39:73:a9:bd:3a:96:75:97:8c:
c0:0c:33:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:00 2025 by rpki-client