Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: tUBSHDxboO4pX1awI2vgpHqypfjpY3Z+60YrCJAYcg8=
Subject key identifier: 98:E3:40:F4:43:4B:1C:37:A8:6B:36:2F:E9:5A:07:B4:BE:8F:ED:D9
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 019A725CD6A14C87AB7860CFA92501B6819A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:01:18 +0000
Manifest this update: Tue 11 Nov 2025 10:01:18 +0000
Manifest next update: Wed 12 Nov 2025 10:01:18 +0000
Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: n4JD+c6h0Pv7VFgzzAt37XpL0st6n7I6mAQmkD+NHVk=)
2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d6:a1:4c:87:ab:78:60:cf:a9:25:01:b6:81:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Nov 11 10:01:18 2025 GMT
Not After : Nov 12 10:01:18 2025 GMT
Subject: CN=98e340f4434b1c37a86b362fe95a07b4be8fedd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:61:9f:6f:3a:68:4d:34:7a:d5:76:f3:e0:
55:73:7e:d8:fc:37:52:86:f2:9a:f6:a4:a6:9c:e6:
2f:4e:08:db:d0:5a:3b:f1:8c:a1:17:bd:3b:6d:a5:
0d:8d:81:f7:5f:de:67:c0:7e:74:b2:b9:1b:f0:c6:
25:80:3d:1b:a5:60:9f:c7:04:5c:94:eb:35:9d:99:
11:13:c2:43:7d:5c:de:87:93:95:aa:0a:97:14:3e:
57:9c:28:20:51:5d:6d:b7:03:e1:4e:d4:78:36:58:
a5:44:7c:df:dc:4a:68:8b:f4:15:89:6b:be:91:a9:
f8:05:32:f9:73:f3:2a:58:da:26:b6:30:9e:b6:d5:
a4:38:8b:4e:d2:db:95:c2:90:f1:e1:9e:df:02:8a:
bd:7e:64:b8:a8:7c:85:31:33:c4:72:93:b6:19:66:
e2:7c:d9:3d:52:d8:12:d4:73:c4:f9:d1:8b:b5:e5:
99:9c:90:71:c1:5c:03:f3:a5:d0:58:fb:0f:61:90:
38:95:da:6b:72:f0:c8:1b:03:17:0e:79:35:1f:6d:
2e:33:cd:7f:67:dd:62:67:df:bc:26:e7:26:d7:71:
ad:8a:c5:7c:e2:7c:9a:83:c5:73:02:b6:75:24:03:
ee:65:29:c2:44:2a:f8:ee:8a:8b:82:82:07:08:a2:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E3:40:F4:43:4B:1C:37:A8:6B:36:2F:E9:5A:07:B4:BE:8F:ED:D9
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f9:00:8f:7d:8c:73:13:ec:ff:95:43:3f:e2:62:1e:72:73:
c3:9c:b0:67:27:c4:c3:c8:17:58:23:75:df:37:95:03:9a:04:
94:db:a0:cc:02:4c:41:59:8a:f4:4e:dc:5c:d5:5d:8f:86:e4:
c4:ef:00:05:ae:50:c3:0a:49:68:2d:9e:ad:d9:4b:93:93:bd:
97:22:81:4f:a2:96:4c:4e:8d:ab:26:7d:bf:9f:25:d9:fc:e4:
ff:6e:fe:04:de:0a:17:e4:ce:94:a9:97:48:d3:d9:15:80:5e:
b7:e1:72:93:e2:2c:db:ad:8b:76:8e:b6:a8:7e:44:49:96:94:
d3:f4:2c:24:2f:92:73:0c:0c:ad:27:0a:b0:7a:eb:3d:02:ee:
73:ad:60:ea:74:1a:64:8a:c8:24:8c:06:d1:bc:d4:9d:97:32:
3b:68:2b:8b:b1:bc:82:21:86:d7:56:65:a2:56:e6:30:72:18:
31:59:d8:12:b0:1c:63:18:b8:d6:2f:0c:9f:64:e1:d6:1d:ab:
93:f9:49:a4:4a:49:cf:f8:a8:14:b7:dd:cc:d3:5f:b1:1d:af:
3c:13:44:df:06:45:50:e2:19:7e:4f:9d:d7:5c:98:eb:7a:d8:
a6:e1:6a:b8:a2:53:b8:ca:79:81:7b:a6:78:22:97:ab:ca:40:
34:95:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:25 2025 by rpki-client