Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft
File: kMDxVcgmfsgeEIO337k_NOm5Aa4.mft (raw, json)
Hash identifier: 7LnjV2WugM/X7r4FKssXPQWrjtkRc+HIxziKG14ZuEQ=
Subject key identifier: BE:FB:F9:57:00:F6:3F:8E:73:2D:B1:65:57:93:95:5B:E0:46:C3:F2
Authority key identifier: 90:C0:F1:55:C8:26:7E:C8:1E:10:83:B7:DF:B9:3F:34:E9:B9:01:AE
Certificate issuer: /CN=90c0f155c8267ec81e1083b7dfb93f34e9b901ae
Certificate serial: 019A71809A1698143C6FBEAF8D81E847B8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft
Manifest number: 24
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: Bw1UT74k-dOGeuGPKO4Kh8QWil8.roa (hash: hfrkdnxNY3IQTF5ruyFfonVNss2RvXrobwb71f8Yp7U=)
2: kMDxVcgmfsgeEIO337k_NOm5Aa4.crl (hash: s0qeu0Oh/INlCCMWR7+nUDEwvJUYeOj+FoKwO/1/rVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9a:16:98:14:3c:6f:be:af:8d:81:e8:47:b8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c0f155c8267ec81e1083b7dfb93f34e9b901ae
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=befbf95700f63f8e732db1655793955be046c3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e0:27:6d:4c:b0:82:30:99:d9:01:91:26:39:
6d:34:78:00:b9:fb:13:55:f5:23:82:e2:8c:ba:06:
51:ad:62:1e:b3:3a:dd:8f:aa:0d:63:ba:93:cb:92:
18:d0:13:f6:3b:20:8d:da:e1:55:ca:53:02:d1:99:
a8:56:74:b8:f8:03:51:bd:c0:b3:d0:93:08:74:34:
72:f9:79:11:9e:34:72:a2:a1:77:2d:df:80:ae:43:
5f:51:82:81:a2:69:96:20:2a:ad:e4:66:c6:5d:ea:
84:72:70:bd:b2:db:ff:87:f6:c6:01:aa:96:c7:a9:
f2:b9:2d:6e:e4:29:81:5d:f4:58:4c:ed:9d:64:57:
f0:c3:30:c3:a5:d2:fb:9f:8e:84:3f:e3:6e:de:32:
98:29:90:1b:3e:dc:08:5c:eb:a9:57:e5:c7:f1:26:
5b:07:5f:1b:ab:b3:c5:da:d5:d9:62:0c:b8:0b:35:
01:fb:cd:b8:b2:00:a0:da:dc:d8:38:27:9b:18:3b:
9b:f7:51:4d:28:15:8d:55:33:b2:b7:ed:5c:97:36:
7b:6c:c0:31:c7:d9:76:77:d1:91:68:19:68:24:9f:
f9:21:56:74:8f:bf:4a:4f:f1:2a:15:67:ad:6b:38:
22:46:5a:ce:40:61:8a:7b:36:8a:47:84:ec:6a:64:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FB:F9:57:00:F6:3F:8E:73:2D:B1:65:57:93:95:5B:E0:46:C3:F2
X509v3 Authority Key Identifier:
keyid:90:C0:F1:55:C8:26:7E:C8:1E:10:83:B7:DF:B9:3F:34:E9:B9:01:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:22:c3:de:2c:34:da:eb:34:8a:fb:d5:56:8b:eb:a0:40:49:
08:04:19:6c:11:4e:32:b3:80:ca:c8:7b:5a:2b:5c:7c:2a:32:
c0:ca:83:e4:00:73:b9:ab:66:71:ed:55:ab:52:9b:a0:49:a4:
89:10:86:49:31:7b:9f:11:e2:8b:8a:2a:16:01:82:c0:88:25:
97:ba:4d:46:60:bb:83:07:9a:35:cd:de:f8:0c:ef:14:f9:b2:
68:04:ca:67:b8:b9:d5:53:dd:60:ce:08:0a:ab:52:69:e6:3e:
45:e9:57:85:cf:27:4b:87:37:71:73:63:b6:a4:a3:0a:15:fc:
15:65:d7:7d:58:e7:40:f1:e4:06:2a:26:0d:15:ed:39:cd:0e:
cb:6b:d9:aa:51:d1:a4:bc:e1:a1:b2:a8:7c:cc:1c:0b:e0:e5:
59:d4:78:00:ec:e9:57:4f:9c:cc:83:07:d5:3d:5a:d3:a8:d2:
26:fb:2c:b6:90:44:94:89:0f:47:b8:97:37:d5:e3:2e:30:e1:
ef:ba:1f:8f:3d:19:8f:15:48:b7:7a:8e:74:d3:13:77:67:95:
4c:f3:d9:03:dc:85:7e:bb:b2:f2:79:28:22:8f:e1:b7:41:c5:
66:bb:b7:91:11:b0:18:8c:8d:45:e4:e1:37:c3:b7:49:f2:ec:
19:59:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:16 2025 by rpki-client