Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json)
Hash identifier: 6fUA0ij60OayCelvI+FutrMvL0nqUrz8fTGrHN9ZiWY=
Subject key identifier: CC:9D:40:E7:3B:5A:CC:B8:69:C3:48:BD:3C:D0:F5:EC:BC:42:9B:98
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 019A7112CF71516DEC05B705C147080BD704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
Manifest number: 054D
Signing time: Tue 11 Nov 2025 04:00:49 +0000
Manifest this update: Tue 11 Nov 2025 04:00:49 +0000
Manifest next update: Wed 12 Nov 2025 04:00:49 +0000
Files and hashes: 1: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: b3AR3lyS+s/F0cBw62iC8bdRb2T3rmPpvX2SYPGwxx8=)
2: zXilNDKWsxIaUq_LEMDiwJqBNJI.roa (hash: Eo6IWAeJUaI2CdPXL2mpqljbcAx/G9eShos6ic97+nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:cf:71:51:6d:ec:05:b7:05:c1:47:08:0b:d7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Nov 11 04:00:49 2025 GMT
Not After : Nov 12 04:00:49 2025 GMT
Subject: CN=cc9d40e73b5accb869c348bd3cd0f5ecbc429b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:57:f5:60:01:c2:e4:e1:01:09:5e:99:22:
80:ae:a7:3a:35:78:e4:f6:a7:4d:39:89:97:6d:ac:
d6:a0:ff:d0:98:f8:81:88:62:5c:41:d5:9b:da:33:
62:a8:19:a7:22:d8:39:f8:d5:21:2b:48:24:cd:29:
32:48:d6:0e:d0:74:6f:5f:59:80:83:c3:a7:62:ff:
9b:9f:49:61:90:50:ba:0b:d9:c6:6b:9e:a6:fc:c3:
ff:91:34:86:6d:c2:ca:d2:3c:4b:8c:ce:77:e3:4c:
5e:94:84:b5:28:5e:bf:1a:b5:40:cd:48:d4:68:89:
2f:99:bd:b1:75:06:ed:a5:d1:a2:c6:52:f6:73:bd:
4c:82:08:dc:2c:40:71:b8:aa:04:2b:e4:20:7b:41:
5b:a1:be:de:2e:62:76:87:13:8a:93:d0:fa:4e:6e:
5b:47:49:e9:de:f0:7a:f2:72:ba:72:7f:ff:ad:5f:
e9:5f:c3:6e:4a:00:d6:72:e7:11:43:cc:40:31:f4:
22:d4:bb:f4:d5:38:98:77:b2:4c:8e:ac:b3:08:c8:
4a:8f:9d:82:a9:51:81:e5:73:81:5c:b9:b0:50:e9:
7e:25:85:65:76:ee:d5:11:07:89:4b:c8:db:1c:66:
50:74:c5:ed:30:79:45:3a:33:66:40:86:59:de:a5:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9D:40:E7:3B:5A:CC:B8:69:C3:48:BD:3C:D0:F5:EC:BC:42:9B:98
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cf:6f:92:f8:78:05:6f:2f:e3:c6:06:4a:15:81:26:db:c9:
72:94:df:4c:c6:5c:c7:f4:54:22:79:7e:81:a6:68:38:fb:f5:
ee:1f:23:b2:5c:c7:43:04:8e:0e:00:d6:e0:9c:ec:ff:fa:fe:
d2:5d:e4:6c:44:99:4e:58:6c:b4:47:38:d0:d2:6f:8f:48:24:
27:b6:b2:f4:40:26:f4:e3:a7:11:2b:15:d6:3c:91:aa:4b:7d:
5e:76:e1:0e:0b:32:0b:7c:9c:c4:3f:58:35:d1:1d:45:63:37:
82:dd:b4:c4:ce:32:74:23:81:4e:92:39:89:74:81:22:5e:f6:
17:5e:22:42:87:3a:0e:b0:b1:7a:8b:80:da:d2:58:78:fa:ab:
20:74:25:ad:95:8a:43:2b:e7:74:9d:2a:d1:8c:20:95:50:a7:
85:1f:17:8a:74:9b:9d:cc:a5:0a:64:da:d8:b3:79:d6:bf:8a:
63:31:86:e8:f6:f5:5d:60:1b:ba:23:ff:92:82:6c:d4:57:de:
67:af:25:4e:9f:56:42:0c:2f:0d:19:78:50:b1:cf:90:c3:65:
d4:d7:2a:34:ab:44:e6:30:7e:4f:1e:78:3f:09:be:cb:a0:a7:
55:97:cc:39:fc:27:51:fa:83:d5:b3:ab:10:c9:48:7a:bb:95:
c8:c7:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:18 2025 by rpki-client