Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: qEepIPE92y718Xj1HGvaf+RJwqcE1dMC0sQ8k5/Yxh8=
Subject key identifier: A3:49:2B:9E:EF:91:D2:23:A4:5C:AD:1A:46:65:2B:00:27:AE:21:89
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 019A0F3AD97362589C1DBE1579160D5CE076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 1177
Signing time: Thu 23 Oct 2025 04:01:46 +0000
Manifest this update: Thu 23 Oct 2025 04:01:46 +0000
Manifest next update: Fri 24 Oct 2025 04:01:46 +0000
Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=)
2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: EN6UWB2ilgC5PCJs+ipetmrvfBmBzDobBlqtktaRRhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:3a:d9:73:62:58:9c:1d:be:15:79:16:0d:5c:e0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Oct 23 04:01:46 2025 GMT
Not After : Oct 24 04:01:46 2025 GMT
Subject: CN=a3492b9eef91d223a45cad1a46652b0027ae2189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:86:b7:36:2b:01:26:44:d9:53:9c:a7:1f:
a2:36:38:7e:ae:64:43:60:a6:c4:9c:a6:0e:d6:b1:
f4:92:c7:26:52:51:d1:68:2e:79:04:df:11:fe:24:
ef:0c:c1:83:8a:23:2d:63:63:4c:09:21:33:74:01:
b2:d3:0a:3c:36:d9:be:f9:5e:56:d3:5e:bd:38:0f:
56:0e:1e:57:5c:6e:31:1e:a2:bb:6a:1b:57:75:92:
a0:bb:d3:ae:71:70:67:e6:33:d3:ba:56:fd:75:d8:
87:13:78:87:12:8c:63:bc:cd:45:72:74:c9:ad:c0:
97:5d:02:be:37:9b:9f:aa:a1:23:13:9f:e5:a3:7a:
15:8c:61:5c:eb:ce:a5:4d:90:5e:ec:46:3c:ef:70:
a7:3d:f2:8f:6a:cd:64:01:57:da:36:4c:69:3c:54:
80:ab:41:fd:da:af:08:d8:45:98:02:65:60:6a:d8:
9d:35:50:63:56:f7:4e:2f:1e:56:10:c5:a0:ff:63:
11:e5:8c:84:0f:37:c1:83:f4:1c:98:4a:20:0e:f2:
ba:c7:e2:ce:c7:0c:02:cd:06:e8:3f:b0:5b:6c:fc:
a4:9d:13:4c:d1:b2:91:29:9b:ae:65:e8:3a:88:25:
16:9b:80:ec:75:39:3d:e2:fa:db:b7:c9:26:7c:13:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:49:2B:9E:EF:91:D2:23:A4:5C:AD:1A:46:65:2B:00:27:AE:21:89
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c1:68:0d:60:a9:79:58:fd:6b:41:c5:1c:2f:56:4b:e9:f2:
0d:4a:53:0f:ec:29:13:90:27:43:95:fe:78:a7:03:4d:5d:87:
0b:79:af:5a:29:25:aa:cb:1e:50:11:23:e3:93:b0:39:44:61:
cd:38:70:1b:83:51:9e:02:67:d7:31:2c:5f:7e:3c:d5:da:43:
1d:16:18:ac:cd:55:01:71:c2:7a:d0:50:e6:9a:3c:83:10:c1:
19:b9:68:fd:8c:0b:dc:a9:eb:38:81:d2:36:b5:9c:47:8c:9b:
ac:e1:cf:42:a8:be:90:b1:d9:c2:f8:f9:48:37:8f:d2:1e:74:
44:c1:bf:a1:7e:39:95:f3:d2:ef:2c:54:2f:c7:e6:a6:b7:6e:
19:7d:a7:6d:04:b5:20:a0:07:44:c9:ee:76:6f:0b:14:84:b9:
6c:e3:b1:4f:3f:d6:c0:bf:ba:7d:06:e7:46:b6:b4:97:b9:1d:
87:a7:f7:36:0f:82:f0:39:7d:10:ff:0f:f6:b0:fa:18:10:3a:
f4:7c:c9:08:7f:c5:23:1d:58:aa:ed:db:bf:70:5f:4e:a5:df:
b0:12:e9:9c:50:5b:f1:fa:ac:66:56:c3:c5:b2:4d:48:58:46:
cb:ae:48:6e:55:43:6b:98:34:ee:99:4a:92:37:a2:bc:20:ee:
06:3c:0a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 06:58:57 2025 by rpki-client