Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: sBwKBRmFdp4YixvrgWYAAhf+KZAdnqz7cfl+H5dpiNA=
Subject key identifier: BE:D9:E5:A7:E8:D5:9A:25:78:02:DD:8B:A4:A9:8A:56:53:A4:1A:7D
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 019A72CA549978B1AF0214B0B1620A15C34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: 03B6
Signing time: Tue 11 Nov 2025 12:00:53 +0000
Manifest this update: Tue 11 Nov 2025 12:00:53 +0000
Manifest next update: Wed 12 Nov 2025 12:00:53 +0000
Files and hashes: 1: I0tfv2mZoSq2ysFvBwfbBYWY0JA.roa (hash: yceQ2f4xBd7/pbAxmzYNJmFayAdTupB1EL529XI3SK8=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: AeX6fZs5nKmsVfG5fjOC3Lxa8rPL9qn9M/hfJni/gqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:54:99:78:b1:af:02:14:b0:b1:62:0a:15:c3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Nov 11 12:00:53 2025 GMT
Not After : Nov 12 12:00:53 2025 GMT
Subject: CN=bed9e5a7e8d59a257802dd8ba4a98a5653a41a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:6f:50:6c:38:1a:64:b1:94:49:cb:33:f6:
8c:6f:65:64:3c:73:85:06:66:8b:7a:a1:6d:89:7c:
20:1f:e5:1a:e0:dc:49:68:8d:ba:53:74:de:54:78:
a2:b5:95:d8:ce:fb:de:8d:f3:cc:c3:55:33:cd:93:
93:cd:69:01:74:31:ba:e0:d3:3d:7f:2b:6b:4c:15:
62:55:b9:95:a3:0a:15:75:86:d3:40:d6:e2:14:f8:
c1:3c:eb:27:03:42:70:00:82:d0:36:9c:98:a8:40:
e5:c0:b7:99:b2:2d:be:73:a0:4d:51:24:32:29:07:
22:2c:cb:a6:71:27:76:5f:9d:18:fd:a3:59:81:98:
54:13:a5:fe:29:1b:a1:1c:1d:9f:18:87:fb:38:58:
d7:fe:3a:db:20:4d:5e:1c:8f:f9:ef:52:16:b6:a9:
e1:06:f6:f5:2c:85:b4:23:50:b6:34:31:35:9c:4c:
a4:c0:38:a5:8e:40:da:3b:96:89:b4:eb:d0:9e:d4:
8b:12:6f:49:9e:9c:ed:49:cd:24:73:38:50:65:1b:
ed:20:13:8b:ca:7a:c1:49:50:42:8c:e5:5c:dd:b6:
8a:4d:7f:9e:7f:ac:52:f1:7e:26:a7:b4:a5:a1:02:
6f:d2:8f:be:6e:d1:af:73:fc:d4:8a:a7:e3:b0:3e:
2a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D9:E5:A7:E8:D5:9A:25:78:02:DD:8B:A4:A9:8A:56:53:A4:1A:7D
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d7:0c:31:ea:6c:6f:bd:1f:d4:d8:92:d6:e9:1c:e7:a6:66:
3d:c3:1a:d1:59:f2:6b:27:a3:64:5a:16:2f:8d:fb:4f:71:66:
24:c3:89:a6:23:72:83:79:98:b0:a6:2d:f9:4e:f3:30:7f:be:
cc:ec:78:f2:30:f6:22:56:a9:4a:9e:14:a0:9f:5b:34:0d:f7:
b5:04:ed:03:b9:68:12:11:ce:6e:ed:10:53:9f:62:a7:8a:0f:
3c:6b:8d:4b:fe:38:0b:f5:f9:e6:be:da:e6:9d:55:a4:a3:9a:
6f:bd:91:85:86:41:ff:ce:b9:a3:fd:1f:94:87:ac:f9:24:c9:
e7:d9:f1:ec:8f:fa:95:91:49:a0:f5:99:0e:da:3a:96:f1:25:
48:13:09:b2:81:f4:91:18:0e:5a:b6:2e:57:4e:ae:51:a4:56:
f9:95:3a:86:34:54:e0:a4:81:5d:9b:4c:14:b0:d8:70:b2:8a:
b5:a0:2b:7d:07:51:c8:74:85:b0:5b:32:b8:10:64:a7:f5:3a:
96:05:81:f0:dc:49:11:c7:f6:d1:9d:44:71:f7:db:03:3e:77:
34:ea:fa:9c:79:13:13:9a:5c:3b:0a:50:c4:22:ec:cd:b9:68:
2c:a7:b2:43:c0:52:ba:22:16:b2:f7:99:bd:e8:41:30:77:74:
61:6a:18:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:41 2025 by rpki-client