Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
File: KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json)
Hash identifier: DlkBSXoSIUGox9Yz9vA3I/LvHLmJDHtoa8Uz1/DKODA=
Subject key identifier: DE:B1:F0:AE:A3:10:CB:27:34:71:08:52:B2:B9:2D:A0:E0:95:CD:3A
Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Certificate serial: 019A7149D2121A98F74F32307ECC4241E40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 05:00:54 +0000
Manifest this update: Tue 11 Nov 2025 05:00:54 +0000
Manifest next update: Wed 12 Nov 2025 05:00:54 +0000
Files and hashes: 1: CWGhSuH7Prq7nBeXCwJSQ8R7MLY.roa (hash: kJD3A5DYARZjtb9aiv1WyX0nnGUXwOPoDx5EHff3F+I=)
2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: 2wjXwSSwQRv+CiCkN1/yKb4YvmFi90wC+Wyh2AtldTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d2:12:1a:98:f7:4f:32:30:7e:cc:42:41:e4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Validity
Not Before: Nov 11 05:00:54 2025 GMT
Not After : Nov 12 05:00:54 2025 GMT
Subject: CN=deb1f0aea310cb2734710852b2b92da0e095cd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:8f:ab:d6:d3:ed:51:bb:2d:f9:c4:30:1d:
af:da:42:4e:c8:bd:d5:8f:d1:db:ca:a0:e9:69:e2:
40:5d:b3:da:9f:f6:32:89:96:f5:5b:19:41:7a:ea:
48:f1:20:87:62:e8:e2:c7:82:2d:4b:94:e9:13:d3:
13:0a:63:e6:d7:67:a1:80:ea:fb:3e:f8:43:f8:a6:
13:e8:74:88:c9:2c:9e:45:1d:c8:b4:a4:41:18:ef:
fc:46:02:01:74:78:5e:62:1c:da:46:7c:53:52:a4:
76:e4:a0:ca:b2:c4:77:b1:2e:c7:06:a7:c2:a7:43:
36:14:1e:cd:82:63:c2:0e:10:0d:65:38:35:7e:06:
82:eb:9c:a5:a0:7f:6b:f4:20:d6:5f:74:1b:6d:17:
59:94:3b:3b:2d:fd:62:89:5e:8b:83:2a:f8:66:a2:
e6:6e:18:78:f9:fe:d5:c6:19:68:aa:21:86:36:d8:
6e:54:ae:0e:d2:07:6e:1c:f8:b6:d3:d5:79:79:56:
e2:ee:d9:12:de:28:91:6b:55:0c:6a:5d:ce:2f:2c:
8e:80:5f:f3:09:f6:9c:c7:d6:5b:5c:1a:51:95:52:
1a:2c:7a:c9:87:94:a3:a0:d4:32:0b:2b:ea:39:a2:
4c:67:c5:a0:d0:6d:4a:34:86:e1:7b:de:aa:ed:38:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B1:F0:AE:A3:10:CB:27:34:71:08:52:B2:B9:2D:A0:E0:95:CD:3A
X509v3 Authority Key Identifier:
keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:62:7c:b6:43:bd:86:e7:ef:7d:42:64:f6:fc:12:28:52:6b:
18:6b:89:c6:1e:58:9a:a8:15:e0:b6:de:36:4b:d8:a0:b2:91:
b8:94:02:fa:ab:bf:04:f2:86:96:b3:39:8e:b8:29:cf:27:a6:
6f:94:95:12:c4:da:bf:fb:9a:c3:57:88:2e:dd:42:e7:27:dc:
a2:e6:5e:7e:14:10:fc:f5:3b:f9:2a:03:f4:14:ff:4b:ae:a3:
4c:10:63:82:0d:df:88:3c:e7:6e:90:ef:24:5a:5d:4a:da:0e:
9a:00:3d:4c:52:86:22:0b:74:ce:03:0c:69:4f:2f:f9:fc:e9:
b9:50:5a:4b:16:4e:21:03:cf:1e:ac:0f:3a:8e:c3:38:18:8d:
0d:35:f2:57:20:70:bb:f1:35:f1:62:bb:4e:cd:e9:0b:aa:b5:
1d:d5:1f:5f:e1:c7:ed:17:60:2f:d1:2e:61:7e:47:a0:25:d0:
c9:53:d2:5b:d9:21:7b:88:64:f6:c8:37:e5:9a:b6:dd:a1:63:
57:29:d0:6c:e2:42:89:0c:27:90:08:b9:2f:00:c4:07:f7:74:
a5:10:7f:6a:ee:eb:e3:db:5b:ad:e2:a4:e3:62:68:b0:d8:d5:
0c:0e:7f:e1:9d:e0:3f:f0:b7:52:6f:32:5b:7c:c7:1e:ab:46:
01:52:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:31:08 2025 by rpki-client