Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: 8ETJotZeCkn0uwBsrNHxvizWKPO7oc8xW4aKcjGg6UA=
Subject key identifier: 33:F9:D5:29:EC:BD:59:8A:7B:35:54:4A:B1:53:D3:D2:0B:7D:17:24
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 019A209B2BCA300234F4F7FC0B41878A093C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 1687
Signing time: Sun 26 Oct 2025 13:00:31 +0000
Manifest this update: Sun 26 Oct 2025 13:00:31 +0000
Manifest next update: Mon 27 Oct 2025 13:00:31 +0000
Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: cq97bgMM6JpXvknU1n5dAYKnMxRQeju161gSvtOw9CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:2b:ca:30:02:34:f4:f7:fc:0b:41:87:8a:09:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Oct 26 13:00:31 2025 GMT
Not After : Oct 27 13:00:31 2025 GMT
Subject: CN=33f9d529ecbd598a7b35544ab153d3d20b7d1724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:3e:83:96:0c:c1:c5:b9:1d:79:d2:2d:74:
8f:8d:b5:1c:9f:d0:8f:06:c6:b5:99:4c:d9:91:cd:
92:9d:ed:d3:fb:b0:f2:74:67:b6:dc:8d:14:a8:11:
b4:4d:42:3a:9b:41:48:e8:7f:46:b1:fa:6e:49:b2:
0c:ba:f9:92:ec:84:a0:5c:a3:60:24:72:00:1f:6b:
46:ee:34:ed:64:a0:b0:f9:30:f5:76:c1:10:3d:22:
ae:51:1e:80:e6:76:17:21:f5:ac:d2:b6:5f:45:d3:
06:2c:4e:ab:8e:42:4f:25:1b:88:78:ed:19:0b:7d:
3e:f1:32:a2:b3:15:41:73:85:b8:fb:f3:b9:41:f2:
12:84:58:dd:15:27:4c:de:69:10:d1:63:20:05:2d:
d3:ca:33:68:0e:49:8a:c3:3d:c1:63:c5:93:c4:ef:
14:1e:64:1b:6e:45:ab:7e:10:80:03:fc:fd:1a:9b:
2b:65:09:0e:b9:b4:0e:87:4c:b8:d9:1d:c0:37:82:
1a:7f:1c:8d:4b:78:22:8e:fe:cb:64:32:9f:6f:b1:
ee:6f:e6:f6:17:42:04:c9:06:66:c4:26:82:79:98:
5f:e4:c2:fa:11:1e:24:32:b8:35:65:87:95:e6:41:
cd:09:d3:ee:e2:bb:24:29:ac:0c:3e:38:b1:7c:b1:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F9:D5:29:EC:BD:59:8A:7B:35:54:4A:B1:53:D3:D2:0B:7D:17:24
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3d:18:14:74:54:e0:ab:5d:50:ef:06:95:98:98:05:53:30:
78:d5:dc:33:71:f4:c6:a9:75:51:6a:3b:e9:9f:2e:57:2c:f8:
e3:c0:74:31:ed:96:77:02:4e:0c:6b:3a:3f:b1:91:5d:a8:0d:
00:49:f8:81:1a:b1:29:96:2b:31:86:bd:34:50:94:e4:05:78:
2e:ed:c6:07:61:21:b2:9d:40:b2:ea:b0:d5:d3:04:9c:72:5b:
03:1c:5d:ac:6e:fe:2f:c5:e2:0f:2b:a1:6a:fb:36:38:bd:14:
a6:32:bf:f2:fb:c8:33:7b:b9:35:17:a8:f8:91:a4:b5:78:36:
58:b4:95:7c:7c:c8:8d:f6:a1:8d:6c:05:d6:89:29:48:fd:12:
bc:f6:bb:e1:bc:2d:48:c2:f0:3a:57:63:b3:52:24:17:70:27:
15:68:6f:c0:b5:7a:4a:79:0d:64:28:60:a7:4e:4d:d6:44:e6:
7e:19:3a:cd:5f:b1:90:46:c3:27:ea:b8:c9:f0:92:0a:86:f4:
47:b0:95:44:70:54:40:e7:d1:e3:14:19:e3:a6:2a:b5:dd:09:
af:b0:82:63:91:a0:fa:f2:a1:66:20:b2:12:73:0e:96:b8:ef:
cb:12:0c:ed:a5:fa:03:9e:d1:62:6d:62:83:f1:45:2a:22:54:
6b:29:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:43:32 2025 by rpki-client