Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: 7x+Pxl3x6Lqd0XdEIrv8euka5rsMuXGor2jXJwnzohk=
Subject key identifier: F6:9E:0D:88:9E:7C:1F:45:46:B9:F5:50:28:88:EB:8A:E9:F6:BB:DB
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 019A70A543856305039A392250F72EE53A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 03F2
Signing time: Tue 11 Nov 2025 02:01:10 +0000
Manifest this update: Tue 11 Nov 2025 02:01:10 +0000
Manifest next update: Wed 12 Nov 2025 02:01:10 +0000
Files and hashes: 1: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (hash: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: h9qLcRD1hvKWuUO3+RezWgKKHVbrTNFuPoWt1vUD54M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:43:85:63:05:03:9a:39:22:50:f7:2e:e5:3a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Nov 11 02:01:10 2025 GMT
Not After : Nov 12 02:01:10 2025 GMT
Subject: CN=f69e0d889e7c1f4546b9f5502888eb8ae9f6bbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:10:ba:00:a5:2e:93:6a:bf:b3:6d:ab:8a:
08:a8:0c:b5:30:26:9d:c0:72:82:ef:6b:1b:f8:7f:
17:1f:78:16:38:41:bb:c4:89:18:b3:b1:18:22:6a:
0e:b5:54:1e:1a:7a:c2:20:bd:98:90:df:da:0f:ae:
44:6f:5a:95:73:61:ad:8c:73:fa:f8:ff:71:90:f1:
f7:5c:5a:92:2b:21:00:3f:8d:4e:64:ce:a7:33:49:
09:63:88:ce:0e:cd:4d:08:09:86:e2:9a:62:da:5f:
7f:e8:cf:d4:d2:30:47:da:34:0f:af:f1:46:7b:ee:
b0:bc:c5:1c:d8:78:e5:8a:88:9e:89:b9:d0:92:03:
1a:c6:b0:53:f4:ec:9c:e2:7d:90:84:11:f7:b9:a0:
28:5d:eb:21:cb:b4:dc:02:87:d8:ab:70:18:60:15:
d4:a3:61:7e:cf:b3:ac:25:36:b6:36:4d:a5:bb:4a:
3a:3f:74:5c:20:0c:e9:05:f6:fe:35:17:d7:54:b1:
ef:98:0b:5a:7b:d6:57:67:9c:a4:7e:16:2e:c0:4e:
c0:3b:da:c4:a4:dd:17:a3:e1:41:74:76:0b:df:b7:
ab:ec:32:d3:f6:e0:73:97:db:d7:56:62:b6:11:64:
0f:a3:b9:a4:e0:4a:5d:79:31:2d:23:e4:3b:29:d4:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9E:0D:88:9E:7C:1F:45:46:B9:F5:50:28:88:EB:8A:E9:F6:BB:DB
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2e:f4:d5:ea:0b:70:b3:41:7f:7e:b7:45:86:3b:8b:f8:47:
02:51:24:08:06:85:2c:0c:33:fe:cf:05:7b:5f:c8:55:2b:70:
c5:d9:17:97:c4:3e:62:00:ef:4e:2c:2f:a9:87:42:c1:bd:fc:
3f:bb:fb:94:62:3c:c9:11:04:69:5c:f0:be:72:5d:52:9b:01:
bb:50:69:1e:45:e7:22:50:f3:c9:06:15:5c:72:63:60:69:30:
32:7e:b2:59:ae:2d:73:d6:e6:f0:0d:8d:93:30:62:71:74:8b:
3c:10:33:65:2d:15:1b:e0:22:c3:4b:1f:35:d0:d9:56:c9:ee:
1b:fc:f0:10:86:bd:de:24:c7:8d:62:d4:e3:f2:91:c5:6b:b3:
b2:96:0f:ff:30:ca:ed:e9:c7:4c:a3:6d:64:b0:cc:28:d7:dc:
ff:ba:e9:b9:e4:c8:2c:80:b3:dc:9f:e9:3c:f0:d1:e3:20:7f:
2c:d5:97:ab:5d:05:33:1a:c4:5a:5b:a4:d8:60:40:2c:9d:d5:
a9:fd:61:0a:5c:3a:f2:90:12:4d:66:25:ae:24:88:2a:8e:76:
16:12:6e:c3:65:5d:95:aa:ed:21:01:e5:9b:a6:36:04:f3:a4:
c1:28:21:eb:0f:b2:5d:56:db:a2:7d:60:5e:ef:f0:84:9e:52:
9e:24:14:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:46 2025 by rpki-client