Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
File: KeRudYZejUoIHktd2kbTyUADZ5s.mft (raw, json)
Hash identifier: K2AqrqFBR5r61QIlyqrMl8+9f5iJS7ApGrqG1ZGEbu8=
Subject key identifier: BC:C6:0F:2F:6C:0F:B0:C3:84:6D:F7:B7:AC:BF:53:74:1C:2D:9F:4C
Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
Certificate issuer: /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Certificate serial: 019A72939910A49E80678E7A62275F3C6A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
Manifest number: 15FE
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: KeRudYZejUoIHktd2kbTyUADZ5s.crl (hash: 0PUobziR1XayTr7iHO7fvXzWJMww3T+WLVerDdszri8=)
2: sYwqpJAH6xt25FV658_Z0b8PqQ4.roa (hash: nTc7YSWaucHsViUALBoDYtryVR1AkC4pCCvnaDdeVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:99:10:a4:9e:80:67:8e:7a:62:27:5f:3c:6a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=bcc60f2f6c0fb0c3846df7b7acbf53741c2d9f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:7f:3a:ba:8a:8f:c0:8b:32:8b:3b:8e:ba:
ab:62:32:bf:b6:28:02:74:7d:cc:7a:ad:e1:4d:5e:
1a:d6:de:e8:e3:4c:66:dd:11:ff:fa:ca:1a:e3:81:
a4:9f:1e:51:38:cd:8f:3b:18:de:2c:9d:95:db:3e:
57:30:ab:a6:a4:8c:48:3b:f3:98:fe:9d:53:37:e0:
8b:29:68:88:c2:28:ae:7f:59:31:9d:3d:93:5c:ed:
ec:fb:a1:88:68:03:e0:38:44:85:70:ed:d4:03:e5:
10:57:75:ae:93:59:ec:fc:e2:f4:4b:15:9f:b8:8a:
07:f0:90:8a:4e:fb:6c:77:01:50:bc:0d:84:12:8c:
4b:a1:6c:da:b9:8e:94:8f:39:ad:a6:4b:fe:7d:8a:
9c:70:7d:6b:63:99:c5:bb:c0:12:92:71:ac:e1:28:
cd:7c:df:cf:2b:c6:ca:eb:77:84:44:d6:92:f3:35:
cd:80:7c:2d:36:15:ca:18:a3:d9:c5:b1:bb:57:b3:
d8:e0:ab:45:ee:b8:69:bc:50:89:41:f6:09:9d:91:
fe:cd:41:96:01:e5:22:a8:9d:db:3d:47:b8:9c:7b:
29:df:0c:f1:c0:45:2f:a1:3f:1d:6e:76:1b:d6:37:
0f:bc:8a:25:14:6c:0a:d7:f0:5d:d4:56:88:39:fc:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C6:0F:2F:6C:0F:B0:C3:84:6D:F7:B7:AC:BF:53:74:1C:2D:9F:4C
X509v3 Authority Key Identifier:
keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:38:b5:08:82:30:84:d8:4d:78:18:1f:eb:0d:64:01:aa:38:
59:ac:6b:13:b1:a5:69:4a:1f:6e:ea:f9:04:9a:a8:2d:ad:3d:
97:d8:a8:a3:e2:90:d0:ec:12:ed:32:d0:74:72:d4:d6:9e:8e:
d3:97:2c:5c:a7:64:ca:56:06:52:d5:d0:df:e7:2a:56:93:17:
7a:aa:30:03:ed:79:84:14:44:2d:be:0b:e0:47:b9:10:45:1d:
c4:b3:9c:cb:d2:b2:31:17:a3:94:2e:99:18:c2:fb:73:3d:40:
d9:1f:37:53:e4:17:69:21:8f:4b:d8:e7:18:f5:59:04:2e:13:
3b:29:8b:a7:36:e1:c0:18:d6:f5:aa:35:ea:da:42:00:07:7c:
18:ec:03:3b:b0:dc:c3:95:c5:1d:86:ea:08:59:68:c6:9b:1d:
e8:ee:16:14:2b:d4:ba:da:ca:7e:de:20:a2:d0:b5:9d:d5:6a:
72:0a:c0:e2:54:0f:02:b0:a9:50:0c:6a:6f:63:50:32:0f:9a:
bf:a4:1d:2a:80:de:ec:7a:bd:b7:4e:59:08:53:c4:0a:49:f3:
42:83:78:aa:e4:d2:bb:55:30:73:45:73:38:e4:64:52:f5:ff:
a5:80:ff:93:c9:ce:92:15:24:e9:4b:ff:f7:5e:f2:09:c6:1f:
96:fc:3a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:48 2025 by rpki-client