Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier: gJbCsdHYEfH6/tcRa/SNZ8iuT9KEq/l2SkopSKsYmkc=
Subject key identifier: B1:FE:5C:0E:A8:94:CB:BA:98:E3:D2:42:5D:FE:6E:18:20:A6:D3:41
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 019A71B86554CA95AC1D6C25C4A64024F2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number: 012A
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: 1HqQBJhpRaROMHOezXr8-gOHJ-E.roa (hash: qIvuj3HHmRwp3qhT9RCCOv4MPrrW/PDxkYPz1nz2Hdc=)
2: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: FMaqGp1jKgvF1DQiqbpncUMQfP5zSq4DQVAMPbtS9eI=)
3: PNqLkZolFE-nbQkO_6muHe9SeaA.roa (hash: Gal/fe+4IR2MPMSFBjUaz/ftVvLiPlkLRd02XNWJeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:65:54:ca:95:ac:1d:6c:25:c4:a6:40:24:f2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=b1fe5c0ea894cbba98e3d2425dfe6e1820a6d341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:c9:05:3a:7c:14:73:4d:30:52:3b:90:4b:
ca:99:3d:b5:1f:24:94:34:fe:73:77:0b:df:1d:e7:
ba:c9:0c:6d:92:1f:40:66:8d:66:dd:6a:f9:bb:63:
94:4c:aa:74:52:92:6c:df:9b:8f:a6:eb:02:5f:f9:
38:2d:a4:9e:59:91:2c:23:dc:cc:33:bf:e1:f6:53:
30:c9:0e:a2:25:a9:11:90:07:a5:4b:48:84:8f:1b:
65:8e:f9:4f:c9:08:5d:fa:cd:9b:82:7c:18:4b:b4:
89:80:6d:2f:9a:32:a9:8b:29:45:8f:c7:94:6c:0d:
c8:a0:97:c5:5f:d6:99:12:10:07:ed:af:4d:8d:d0:
2b:38:8f:29:58:9a:41:1f:2c:2b:75:64:e6:c8:08:
88:5e:48:1f:63:42:8f:8c:c5:14:d1:1f:f3:6c:9e:
16:79:5c:a4:a8:2d:b0:db:8f:ba:f9:74:e8:93:ce:
cc:5b:1a:bf:f5:1a:11:d4:e2:eb:17:23:b9:ee:40:
1f:7c:87:68:b1:5c:10:fa:f4:30:b9:0b:bd:de:41:
bc:6d:46:d4:2f:29:bb:a1:94:48:62:d9:10:e7:a5:
5e:17:38:d1:2f:2f:04:3c:e3:ab:a0:28:eb:89:62:
c0:08:fd:cf:3c:3c:d9:f8:cd:99:72:d0:81:d1:34:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FE:5C:0E:A8:94:CB:BA:98:E3:D2:42:5D:FE:6E:18:20:A6:D3:41
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bb:6a:97:b9:11:76:b3:8c:fe:51:a6:ac:fa:e6:73:8b:3d:
0e:4a:10:95:08:5c:a2:7d:db:ad:eb:ad:57:c9:9a:10:fe:70:
0a:ba:61:3a:9a:08:c1:aa:e1:bf:a1:d6:29:63:51:51:95:9a:
a2:5f:b0:0d:08:6c:f2:ff:ec:d5:d4:c9:68:f8:7a:ab:c6:f5:
63:a3:fc:ba:f6:37:0f:db:b8:93:67:ec:95:9b:ac:43:d4:e1:
86:57:2c:a6:42:4d:c0:03:3e:53:c6:93:7c:b3:8d:a2:11:3c:
11:c6:25:4e:1c:3b:fe:31:a5:05:f6:2d:1d:8e:ae:b5:6f:8c:
2d:99:79:dc:62:36:69:57:15:5f:84:74:9f:72:35:ef:4d:e2:
2f:b9:e2:35:d3:36:41:c6:7d:17:87:b5:02:db:9e:e7:de:b3:
6e:ae:13:ae:56:73:8f:c1:0a:1f:69:30:80:7a:92:3d:df:58:
5b:d3:39:8e:d6:51:49:f1:42:04:98:8c:55:e4:e0:7c:ef:33:
9e:a6:02:d9:cb:61:04:34:e8:19:51:5b:ae:03:19:5a:16:25:
75:06:36:ad:6f:1f:87:22:0e:da:69:1f:66:01:0d:89:aa:91:
1e:8b:47:81:b2:1c:74:32:02:7a:f0:b9:87:da:af:8f:d4:89:
da:d0:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:18:26 2025 by rpki-client