Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier: M1s8/a3lRp1ioZyK0iqHFDSUd1uJFick502Jp7a0op4=
Subject key identifier: A6:A4:09:F0:87:E7:51:1A:E5:08:23:FE:08:05:9F:35:5F:DF:98:F7
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial: 019A4D73B444BC48B6BF296EEA071092E629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number: 0A01
Signing time: Tue 04 Nov 2025 06:00:19 +0000
Manifest this update: Tue 04 Nov 2025 06:00:19 +0000
Manifest next update: Wed 05 Nov 2025 06:00:19 +0000
Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: JZIdJ4WWMetXgk+A3wb7L0uu5gQ/uOWW1EA3pe9VmZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b4:44:bc:48:b6:bf:29:6e:ea:07:10:92:e6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Validity
Not Before: Nov 4 06:00:19 2025 GMT
Not After : Nov 5 06:00:19 2025 GMT
Subject: CN=a6a409f087e7511ae50823fe08059f355fdf98f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:6c:04:73:66:90:5b:6c:78:82:c7:59:f0:
6f:00:be:82:c1:4a:ab:e1:8a:08:92:8a:e5:c9:34:
6d:a9:60:d0:01:b3:08:80:7c:23:1a:eb:b5:7d:96:
47:db:5a:a6:e2:77:c7:41:fb:dd:2e:b9:a7:6b:72:
69:bb:a8:00:19:b3:2a:06:45:61:49:d6:1b:45:9f:
19:1a:76:08:01:06:17:cb:4e:8a:84:09:b0:d7:e2:
19:9b:56:c9:7b:07:a6:aa:a1:a0:62:88:5f:c8:15:
c3:58:3c:c4:7b:a1:32:8e:88:77:06:7c:81:1c:b3:
c7:4a:b7:82:11:bf:4c:6d:d5:97:8c:63:7b:99:ca:
ce:66:53:1a:49:b5:d2:5a:6c:35:7c:b6:29:ce:50:
fc:44:c5:6c:19:3c:91:04:ff:8e:a6:ef:e6:ea:7b:
e5:45:e6:ca:12:91:d0:82:b8:db:72:52:c0:ba:14:
49:f0:ad:2d:4d:04:bb:0c:8f:5a:e5:ad:d1:74:ec:
5f:52:96:0c:2a:76:e6:e6:aa:6a:63:e6:8e:2e:d4:
22:db:72:62:22:6f:61:d7:2a:11:df:fd:ec:c8:2a:
0f:58:a2:8b:94:8b:65:32:9a:c1:6f:14:2f:0c:02:
57:79:52:d9:c9:44:83:76:33:54:a1:17:ea:1e:4d:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A4:09:F0:87:E7:51:1A:E5:08:23:FE:08:05:9F:35:5F:DF:98:F7
X509v3 Authority Key Identifier:
keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:61:44:18:b1:c3:07:0a:96:38:66:21:99:87:9f:c1:62:a8:
05:9c:d4:c5:f4:76:28:56:bf:48:42:f6:7c:88:27:c4:e5:ad:
16:a5:cc:0d:72:18:44:fe:d1:24:22:31:dd:c1:46:41:3a:30:
fb:d4:33:5b:1c:c4:21:70:b0:72:1c:1c:a6:ba:49:9a:30:04:
ec:38:b1:7e:0e:4e:49:73:3d:7a:d5:35:b4:f9:cc:bc:7d:d3:
b3:bc:fe:77:53:be:87:f7:5b:5b:07:10:40:ad:c9:a9:d3:f1:
8e:33:9f:ea:ea:c8:14:b4:34:5a:ec:2a:7a:3d:20:38:26:c5:
d5:5b:3b:0f:9d:54:c8:a0:64:5d:de:dd:0e:84:0e:47:50:ac:
e6:7a:12:ff:80:d8:44:30:ac:a8:18:a3:35:24:4a:53:5a:cc:
1a:50:64:cd:a2:e6:8a:1e:2c:22:43:73:88:41:ad:c7:12:43:
e4:92:6c:b1:d2:56:e1:8a:a6:66:2d:e8:ca:20:42:3a:a2:3c:
9a:38:1b:96:6c:07:69:04:bf:87:95:98:d8:bc:8e:25:9f:fc:
45:e5:37:8a:b1:73:2b:0a:78:cf:af:bf:5e:51:6e:f0:3a:4c:
24:3d:dd:ac:3b:5b:9c:75:f1:a0:eb:b1:cc:c7:65:fc:4b:ce:
73:1e:ca:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:19 2025 by rpki-client