Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: J9aFbne8VpufvYyZ5b19meiG7G5SlInzIRWELiebK+w=
Subject key identifier: E1:9F:67:49:92:66:65:B6:05:3D:9B:0D:CF:A0:87:09:AE:67:03:EA
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 019A714A22C589CDBC398230CC4DFCC33E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 0EE7
Signing time: Tue 11 Nov 2025 05:01:15 +0000
Manifest this update: Tue 11 Nov 2025 05:01:15 +0000
Manifest next update: Wed 12 Nov 2025 05:01:15 +0000
Files and hashes: 1: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: 3qEUcEoXvHVKMr/hz7oBcWpqVAwXHiZ9mwecrgMIu9w=)
2: tT2MkC3bDAt-AG9rSFm6itBZmH0.roa (hash: ZIroNCPsL/l7JhsPE9mGE4anIRCcdf9s2wEC0oqqzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:22:c5:89:cd:bc:39:82:30:cc:4d:fc:c3:3e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Nov 11 05:01:15 2025 GMT
Not After : Nov 12 05:01:15 2025 GMT
Subject: CN=e19f6749926665b6053d9b0dcfa08709ae6703ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:fb:c2:32:38:81:67:1d:8a:0c:b2:03:58:
2c:e0:de:b4:d5:67:af:68:a5:db:b6:7a:49:7a:82:
5e:93:56:0a:95:70:1d:a7:51:fa:6f:4e:09:0e:94:
4c:a2:a5:dc:34:d4:77:62:68:09:51:9e:c6:b4:0f:
e7:7e:29:c3:e2:be:48:06:a8:24:09:64:31:76:ae:
6c:1e:50:78:6c:c7:a7:e6:11:fa:93:ba:65:bc:2a:
21:73:08:36:7b:8e:e3:a0:fd:2d:9d:8b:bb:c0:dd:
d6:34:9e:e6:16:0e:bb:34:2f:b3:88:2e:cc:35:0a:
03:ae:bd:3c:de:4f:a7:d6:de:2e:77:c7:6e:ee:8d:
58:8c:22:20:dd:a3:30:84:5d:1e:bd:23:b7:29:ff:
fb:03:6f:c2:78:88:16:a7:1e:ba:63:cb:ec:5d:9a:
5c:b7:06:da:e4:54:32:83:ca:2c:b2:1c:78:4f:bf:
d6:2e:72:01:0c:a1:2c:f7:bc:4f:7d:43:c4:eb:78:
3f:04:55:1f:99:a4:a4:cc:e2:70:1f:00:e1:35:4a:
bc:45:d7:62:ff:67:55:f0:a3:9a:17:e1:8e:b3:fe:
c2:74:43:29:06:97:09:e5:e8:37:40:6f:b1:fd:1a:
e8:b2:f0:53:31:14:7d:2e:aa:ce:8d:bf:54:01:78:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9F:67:49:92:66:65:B6:05:3D:9B:0D:CF:A0:87:09:AE:67:03:EA
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:73:99:2b:70:78:db:65:c3:f2:f3:99:4c:2a:a1:b0:f4:f2:
bd:dc:cd:c9:ea:41:46:8e:79:a2:9c:c9:c4:97:d3:83:99:f6:
3d:8d:2c:59:0f:31:9a:21:16:f9:4d:19:7a:cc:e0:3b:42:bf:
d3:e9:05:bc:6b:3a:aa:41:24:29:a7:30:ec:f8:1e:e6:7a:46:
93:f2:4e:ea:39:11:06:d6:3f:62:bc:3f:fc:82:2a:03:4e:86:
c6:fb:ac:a0:61:89:11:68:53:b8:ea:0f:81:db:bb:40:72:8b:
3b:ab:43:bd:13:ce:30:40:3b:66:83:b7:88:08:2d:0c:53:ed:
2d:6f:f5:64:84:6d:7d:75:01:e3:19:15:2c:fd:66:f8:75:50:
86:79:62:ac:ae:d1:06:18:cb:af:74:92:b3:f0:9c:97:08:c8:
f3:cf:69:de:56:11:63:09:cb:17:5c:6f:45:4b:f7:91:cc:c0:
03:5c:45:47:ac:ea:60:87:f6:3d:43:fb:df:2c:84:a1:0d:e1:
5f:83:5f:51:de:9d:22:0b:61:36:8e:4b:b4:a2:ea:0f:5a:79:
5b:d4:fd:78:d3:de:e5:81:04:ab:d9:c3:60:91:3f:d5:33:22:
cc:80:78:07:a1:f7:e6:8b:76:6d:22:1b:c8:e8:d0:2a:9f:65:
69:57:63:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:33 2025 by rpki-client