Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
File: kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json)
Hash identifier: r+5mhFiM9yNcCU3sQ97TCz749XFo+2HRgeOawymf4gI=
Subject key identifier: 69:F1:A4:BD:FC:FC:0E:E1:4E:60:37:CD:0A:18:7B:43:27:FD:B4:56
Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Certificate issuer: /CN=9155641a07b1e455b7892b92d80d60912391b20d
Certificate serial: 019A70A576A98CA389C2F93CA41C9D9C0921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
Manifest number: 072B
Signing time: Tue 11 Nov 2025 02:01:23 +0000
Manifest this update: Tue 11 Nov 2025 02:01:23 +0000
Manifest next update: Wed 12 Nov 2025 02:01:23 +0000
Files and hashes: 1: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: QEu5aaso6b01sjcS5OaWsf+qZgyPRWXP5Tr7Lx6vSfY=)
2: ynCtEcXqVCBeEil-xI3WvK_dPRE.roa (hash: 0SptmV2vPd6kYrXF10jAqlyhF9V/f+S3u2RzwXs1PmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:76:a9:8c:a3:89:c2:f9:3c:a4:1c:9d:9c:09:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d
Validity
Not Before: Nov 11 02:01:23 2025 GMT
Not After : Nov 12 02:01:23 2025 GMT
Subject: CN=69f1a4bdfcfc0ee14e6037cd0a187b4327fdb456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:79:6b:c8:e5:8c:47:fa:25:20:62:ea:2c:
28:e8:ff:a4:98:12:e4:e6:7b:cf:c4:92:40:27:03:
c7:d5:a5:5e:7c:4c:44:ac:a6:fe:b3:d6:22:be:cd:
57:eb:78:5c:e7:ad:26:86:ad:e5:52:42:0a:f2:1c:
3e:87:51:29:f8:f9:6f:d1:80:37:30:4f:f7:71:be:
39:9c:b1:49:c0:2f:ec:ad:7c:60:50:de:4b:a0:96:
3b:7d:b8:95:32:90:ba:bd:0c:00:11:27:98:af:ea:
6b:bf:ef:b8:4c:4c:50:46:3a:3a:33:fd:6b:bb:4c:
cb:a4:78:89:0a:a9:7d:7c:24:0f:1d:57:48:58:75:
71:5e:0c:c3:2e:8d:a5:fc:98:21:68:35:b0:3c:49:
bf:68:ad:f6:af:0d:9e:d8:86:df:ba:74:b5:ab:d5:
a9:22:51:99:9a:f0:6b:b3:1f:89:55:ed:48:1d:23:
95:d1:3e:d9:60:0a:5f:30:40:e7:2f:fa:ac:a8:37:
fa:c8:83:bd:18:85:17:31:24:ae:c2:36:76:66:5d:
7f:67:93:a4:c6:22:94:bf:22:39:c5:f7:46:8f:8e:
5d:cc:d8:88:09:36:6b:5a:67:bd:4a:d3:53:83:02:
64:85:3c:eb:89:61:6c:16:96:31:e1:0b:93:67:4a:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F1:A4:BD:FC:FC:0E:E1:4E:60:37:CD:0A:18:7B:43:27:FD:B4:56
X509v3 Authority Key Identifier:
keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:76:f0:12:8b:bd:6c:17:ef:4f:f0:ee:4f:1f:57:20:09:3f:
88:80:78:27:58:14:cb:b0:dd:e9:16:f7:4c:c3:b2:41:92:40:
96:4c:72:40:94:66:d1:f6:fe:a4:92:55:d9:67:65:fe:7c:59:
5b:fb:34:13:81:3a:1e:60:10:86:22:d1:c4:19:2b:2c:c4:7b:
55:d6:87:db:4d:bb:f6:12:8b:4d:2a:59:ca:e2:4b:31:36:09:
6c:db:d2:1c:7f:a4:d4:be:4f:9c:e5:6e:ec:cd:14:df:b5:07:
cb:30:43:6d:76:e6:8e:e7:e8:02:52:e2:da:bc:cf:7f:e0:c7:
3f:c4:e0:c3:f8:68:93:1d:7a:50:ef:04:24:08:61:6f:8f:e5:
49:d2:47:65:e4:cd:f9:89:40:cf:f7:97:5f:e8:5e:f6:a5:a7:
2e:27:26:32:d7:cc:24:7e:a4:f3:7c:43:b6:4e:27:01:ae:1e:
a4:66:e7:2b:84:5f:7d:86:8b:12:a5:fb:0a:cb:08:36:e8:a6:
a3:68:8a:54:c4:66:34:24:ec:9a:a2:58:a2:96:e1:78:27:71:
be:2a:5a:87:12:a1:49:be:c0:e9:d8:8c:eb:79:b8:a9:32:4a:
8e:46:30:0c:ab:ab:1b:da:68:89:fa:15:72:ed:6f:97:96:5e:
f4:ad:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:20 2025 by rpki-client