Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier: 4kaZFp43GIHUugaYVFnh4qeG5vyppIMg7yC5+RIv0wI=
Subject key identifier: 8D:B2:2A:1C:06:07:04:23:78:2D:0A:7A:67:14:CF:A8:91:16:EC:06
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial: 019A71B917970B197107502A166AD1D27E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number: 0F1C
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: gKg8hFr7VOBW7yDvvDoeJTveFVphESQXrhCRi9azMJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:17:97:0b:19:71:07:50:2a:16:6a:d1:d2:7e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=8db22a1c06070423782d0a7a6714cfa89116ec06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:07:e6:15:cf:d8:63:24:1f:d0:92:f7:74:6a:
f2:9a:8d:bf:56:63:0b:f4:8a:12:ab:c0:05:bd:d7:
0e:64:df:f5:02:3e:16:8e:d6:df:0e:bc:cb:16:32:
34:54:13:b7:2b:17:98:0e:8c:e7:08:6e:e1:66:3a:
ce:ad:b9:92:42:09:05:89:d6:59:6e:2c:87:5f:ef:
c0:b7:7e:a2:16:38:61:36:5c:5e:2b:4c:f2:00:4d:
70:01:bf:0c:b0:19:57:e4:64:e4:71:a4:dc:57:87:
52:a0:c3:c6:98:1c:fd:a8:d1:08:43:20:ff:5c:9f:
62:ef:0e:92:c9:3e:10:c4:67:65:92:8d:44:09:f8:
31:4f:d2:20:75:b7:57:fb:3f:35:ce:d5:2c:cd:6f:
cd:b5:54:6a:4d:fc:09:8c:65:cd:51:91:ce:23:93:
49:3f:15:cd:41:7b:c2:a7:d1:7e:43:d6:03:65:b8:
45:1f:e5:6c:ce:e2:49:2b:50:96:e0:e1:53:d2:33:
07:7f:00:77:23:4f:3a:c7:32:a7:fb:2e:74:44:a7:
fb:99:6e:0b:b5:2a:e1:9e:14:98:98:d5:51:54:92:
72:46:35:76:7b:e1:4b:d4:a5:db:38:ea:bf:5c:df:
78:e6:07:3c:9d:98:29:e6:95:b7:67:60:91:20:4d:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B2:2A:1C:06:07:04:23:78:2D:0A:7A:67:14:CF:A8:91:16:EC:06
X509v3 Authority Key Identifier:
keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8d:0f:df:3d:e6:f0:5c:15:fd:97:e9:ba:37:5e:cf:6b:00:
8f:d2:a1:cb:9e:fd:e8:91:6e:7e:34:d8:9d:f1:f8:97:53:f7:
67:85:32:a9:00:57:83:d7:14:83:8b:31:ef:26:3a:e9:c1:27:
b0:b9:ff:1e:75:51:1d:9d:a6:18:09:05:04:5e:08:13:90:7d:
2c:9b:cb:3e:75:30:f4:a6:b1:ad:2d:5f:2d:bd:32:83:99:85:
53:12:de:72:5f:dc:8c:22:b0:e5:da:9c:59:f6:2f:82:99:fd:
e4:d7:03:da:71:df:90:83:3a:6f:fd:f2:f9:f3:c0:8a:67:3a:
b7:42:e3:3a:93:06:c2:e2:e6:25:e0:50:67:b4:28:f6:26:8e:
fa:b7:b4:8d:db:6b:0a:3f:cf:f4:72:2e:76:62:ed:1f:82:71:
8e:ce:15:f1:46:21:25:b6:79:19:c5:6e:b6:f5:23:cd:d9:5a:
b2:b4:7c:d4:95:0f:d3:04:56:7b:d2:4c:59:f1:b8:31:0e:5b:
26:77:ef:62:4c:54:fe:87:c9:af:3c:20:dc:9b:d7:98:36:de:
af:7c:c4:05:45:78:29:b8:cb:2a:3c:c7:bb:34:13:01:44:5b:
7e:e6:70:41:42:06:bd:29:83:2a:bc:eb:1e:58:5d:91:94:2e:
17:91:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:34 2025 by rpki-client