Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File: kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier: 4Zu2RM5XGETHrnxizk0rURSTCdxxQpD0/gFLjbnQOpc=
Subject key identifier: 94:8C:DA:2B:05:BE:08:37:AF:11:8C:96:3B:A2:29:14:24:05:B4:DF
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 019A714991B3B3C12906B328A2F052BBC241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number: 1682
Signing time: Tue 11 Nov 2025 05:00:37 +0000
Manifest this update: Tue 11 Nov 2025 05:00:37 +0000
Manifest next update: Wed 12 Nov 2025 05:00:37 +0000
Files and hashes: 1: 1-6txeQs5g_33zuSjTCgOD4iIjGM.roa (hash: 0QhFC81+fO/ZdvCBfNNwnivS3ThqNHOEWwldyX4zRQQ=)
2: i9rF_vMQKJ6Idr0l2zV9fG7JsI4.roa (hash: Ym+D0lV82GzeaN5WC17D6hleAFitEdQ3vLzucr/5Qp0=)
3: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: k8c/7xIqRkRwyx5k43zH1uksS5xj2fMGGKKXc+9e8VE=)
4: yCaHWvL_AiksDwFoCiFxm6bABT8.roa (hash: 5pG/4JjPAr+yjin6VDP+CajWtJLqJ6Va//r9XfV+zU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:91:b3:b3:c1:29:06:b3:28:a2:f0:52:bb:c2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Nov 11 05:00:37 2025 GMT
Not After : Nov 12 05:00:37 2025 GMT
Subject: CN=948cda2b05be0837af118c963ba229142405b4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:89:78:c0:50:2c:cd:0c:84:9d:e8:1a:6a:
33:4e:3c:ec:fd:5f:84:22:53:7a:64:d9:59:8c:29:
ce:a2:78:b4:03:c5:4d:5d:02:61:5f:e1:42:a6:26:
1b:02:2a:6c:b0:03:82:26:df:e6:01:27:d2:ca:07:
37:94:ed:b1:ca:cc:8d:c4:5f:8b:94:0f:4e:b3:76:
ee:8d:c9:b3:9e:b9:b3:62:f8:6a:5b:c2:4e:13:58:
0d:61:6c:7d:b7:90:c7:ce:df:3d:12:29:49:6d:8c:
4c:47:c3:81:d4:cb:c9:92:1f:db:b0:e1:52:41:29:
90:42:3a:d3:8d:bb:29:4e:ef:3c:e9:da:ee:33:96:
ea:ad:e2:7b:63:98:65:29:9a:a1:15:d2:60:31:4c:
41:b0:b5:2c:e4:d4:96:21:02:c8:ef:5e:4b:d9:53:
ff:ad:f9:4e:8b:b7:8b:ce:43:17:d5:b2:c3:50:10:
97:6f:07:ff:d8:11:e6:33:48:46:b6:61:0c:76:ce:
47:6a:d2:07:6f:eb:6f:f1:86:d8:08:ae:da:43:b7:
53:58:80:0f:6b:df:ad:54:34:ac:27:92:ab:c7:d4:
1b:65:52:84:42:18:69:84:d1:a8:0f:da:e9:cd:39:
1d:a0:d3:a7:9a:c0:0c:04:c8:de:6f:e3:45:2f:47:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:DA:2B:05:BE:08:37:AF:11:8C:96:3B:A2:29:14:24:05:B4:DF
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f4:21:d6:68:6d:19:37:90:4f:5d:1b:a1:11:ce:1b:fa:b5:
17:20:c4:8f:87:21:34:3f:c9:77:84:68:f2:61:bc:43:51:a2:
c1:cd:08:9a:1c:46:26:8c:ad:26:74:1b:d6:7e:b9:cc:15:78:
89:f6:86:22:82:36:80:0d:57:e6:92:43:91:e9:6d:13:52:d6:
f9:1e:4a:99:f4:67:3c:29:4a:90:5f:0c:6b:de:96:fb:2f:d4:
55:6b:d6:2e:56:ae:fb:32:23:cd:4c:92:32:7d:cf:1b:82:92:
26:1a:91:08:9e:74:6e:67:18:56:4e:4a:16:f1:0e:67:55:12:
22:94:30:16:2f:e1:88:23:94:2f:b0:c0:e5:49:1b:86:c4:83:
ba:10:ba:a0:3f:e5:86:f1:86:49:8c:0e:fa:08:49:f4:35:87:
75:b0:3e:37:63:49:e0:0a:5d:da:6d:97:1f:91:ef:76:d3:f4:
d7:73:a9:9f:d1:92:56:29:bc:27:7d:f6:5f:fe:3d:65:4e:5e:
ab:24:f6:0f:f2:55:2e:83:df:38:36:ae:9a:a3:35:73:87:f8:
6d:99:5d:83:b0:4f:c2:fa:ce:8e:09:af:ca:df:b0:67:b2:32:
52:61:c3:c5:0f:cb:04:49:88:ca:14:40:2f:af:72:f0:96:f1:
40:95:f5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:04 2025 by rpki-client