Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: nOBcnuPfGSnf3YJ5zo/azKbcQdeSsftAzdua7gqZaCY=
Subject key identifier: 1D:DD:87:35:11:23:35:72:88:F9:55:75:5A:10:5F:7D:3A:9F:F2:35
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 019A7112BBFE0A8B15004264EFD0A18D4EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 1119
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: Mzwg9sXE4IbMTL56aibJ8wR3CQXxBnFHcKFPKFwU2o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bb:fe:0a:8b:15:00:42:64:ef:d0:a1:8d:4e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=1ddd87351123357288f955755a105f7d3a9ff235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:10:56:b5:73:61:ea:e6:c1:95:83:3e:f6:
5d:7a:76:25:17:2a:37:68:e0:f7:4c:f0:b9:a6:5d:
7e:4d:bf:96:6b:64:55:d5:34:90:a3:62:34:49:c7:
c7:2f:22:c3:d1:61:5c:4b:88:39:4a:ae:bb:2a:56:
20:cb:99:8c:d4:f2:67:41:b7:ac:e2:ec:04:6c:cd:
f4:86:b4:8b:21:a3:a6:71:5c:ca:f5:0f:ec:66:d8:
09:4b:bf:dc:97:80:79:b7:10:8b:de:85:4f:87:31:
af:97:66:f0:7c:7c:85:3a:87:3c:70:77:ac:3c:46:
92:a3:99:85:47:10:b4:6e:c6:cf:ea:06:06:e1:fc:
10:82:0d:51:69:87:ab:f5:4c:c5:5c:1a:7a:a0:95:
d8:83:49:dd:0c:6e:5a:2c:12:5a:a2:40:ad:9a:54:
d9:39:4a:15:86:92:9e:fa:12:51:23:a0:01:c2:7f:
20:e5:cc:b5:3e:68:91:ae:e2:9e:f0:4b:11:de:fc:
90:6d:e0:57:a3:93:ed:82:e9:0c:3a:dd:c4:9f:9b:
65:0f:7f:01:22:18:6b:91:b6:a8:05:22:4a:98:b1:
9e:18:f7:c8:fd:d7:2d:52:d8:8e:2e:1b:15:30:0e:
a7:c1:09:f7:ba:5a:47:91:c0:28:76:19:5d:e7:15:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DD:87:35:11:23:35:72:88:F9:55:75:5A:10:5F:7D:3A:9F:F2:35
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f5:92:ac:c7:ed:47:1c:77:57:1d:3d:5a:23:41:32:51:6b:
ff:af:2c:86:10:9a:08:45:ea:8a:ee:a3:19:fc:79:08:0a:1b:
c5:21:bc:d6:11:0a:83:9f:48:4c:66:e7:61:31:54:9d:da:c4:
43:93:c0:52:9b:82:81:52:72:ff:76:2d:bf:fe:05:19:6b:27:
bd:b3:af:ec:0d:77:17:b4:01:4e:68:51:d9:1c:da:e6:d3:9d:
92:43:69:23:96:72:91:09:a5:7f:2a:7c:d1:61:63:d1:f7:84:
5f:23:38:21:6c:87:ee:24:83:d0:1a:b5:1f:0f:0a:5f:7b:c7:
b8:c8:2a:9e:02:6b:19:0f:d9:6c:d4:04:49:55:ee:a5:c9:2e:
97:14:8b:36:0f:87:f1:dd:a9:c2:28:68:14:e0:44:fb:c6:25:
40:ca:3a:ae:13:8a:8e:05:a6:a9:24:69:fc:58:d0:f9:13:8b:
cb:55:5a:a0:7e:41:f0:05:62:92:b4:66:70:be:37:2a:a9:22:
ad:19:fb:96:b0:2a:3b:1a:87:e6:82:b2:6a:e6:39:d3:4a:e4:
80:ff:2b:04:91:27:0e:6c:3a:9f:d5:b7:3b:0b:ff:cd:46:82:
e2:fd:c6:ef:95:00:09:d0:24:42:02:4e:62:99:58:c7:89:af:
4e:1f:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:08 2025 by rpki-client