Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File: kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier: 2sG1RhNSu3sZ9/GiYdCVuxHjZr9sp0O0moNh6zxxk98=
Subject key identifier: 92:89:B0:5E:3E:95:85:BB:22:AC:45:D3:0E:D3:4D:8D:16:26:1F:07
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 019A72261F3A3D26A521A1F4589E1C346CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number: 0ABD
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: 1-nmX1WTJ49yJbme7KYE3jeC7q4Y.roa (hash: zAEWgizXd30YPkGAc5Kl/PvBR6kbJd2FV8oWGwFvE/I=)
2: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: CYzplaZM6rszw3oO+byJCCwvHPeW0e8fIDKAxjP2AdI=)
3: qJnDw_Xmq2bfel2_89lbdiftBRQ.roa (hash: O4ff3v5t1d6BKPF64qTARMkRfucrOU0EI+MHTwPLMTc=)
4: yyVSocue_VD1x2HepimmN6bExsc.roa (hash: 6+QKFhEGkikap65WiEFQ9q79rIkGnFuCa6iQx/4KnWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1f:3a:3d:26:a5:21:a1:f4:58:9e:1c:34:6c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=9289b05e3e9585bb22ac45d30ed34d8d16261f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:da:89:2e:51:13:48:a6:1b:ce:c6:5c:d6:
af:9b:6c:56:9e:cc:88:57:fe:d2:59:eb:df:7d:b6:
d6:28:68:c9:97:7d:19:ae:0f:08:85:1e:21:04:fa:
c6:65:22:2b:84:aa:4f:4c:2e:36:fc:88:81:2c:3e:
39:4a:b0:3c:7b:cf:27:0e:63:29:36:3b:16:f4:3d:
b7:bf:eb:90:b7:aa:96:2e:7a:d2:9d:f0:58:9d:1a:
82:e9:2e:42:18:c1:62:49:5b:c0:d7:c8:07:6d:5b:
f0:1b:d4:34:77:47:ee:63:ad:5a:e6:4c:1b:40:94:
2f:09:69:1f:ba:83:2e:59:f5:56:43:b7:df:3d:3c:
4e:4b:ac:8a:0c:9f:c0:70:ea:2d:f1:6c:f7:1e:20:
2c:a2:62:4b:74:eb:46:56:04:3c:a1:dc:b6:7f:3c:
dd:5a:56:41:d7:de:da:e3:63:66:30:9e:66:62:07:
6c:8a:2a:e1:87:3c:f3:37:8d:14:29:ac:f5:a3:8c:
a3:9b:c0:21:ec:d0:b5:ef:95:eb:06:e4:a5:30:9c:
9b:da:f2:36:91:77:42:fd:a6:76:0d:50:ee:06:58:
0b:f8:85:6c:ad:98:70:7c:23:31:73:69:9c:f1:f5:
c3:e1:a7:40:a3:db:b8:5a:d3:b7:f7:f5:79:d5:cd:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:89:B0:5E:3E:95:85:BB:22:AC:45:D3:0E:D3:4D:8D:16:26:1F:07
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:08:22:62:2a:ad:cc:d0:28:e5:9d:7f:8c:88:fb:ad:fd:ce:
d0:c7:2e:18:72:ca:6d:ba:2a:b3:f6:1a:34:d1:c4:b6:39:d0:
a7:c0:83:32:2f:eb:1d:58:9f:dd:f0:87:53:f2:d2:03:06:5b:
37:b4:4a:87:2a:2a:fa:86:b8:8f:fb:67:9b:3d:0a:e2:f4:af:
6d:69:a8:ee:de:c0:3f:72:1a:70:ff:d8:71:cd:98:39:1c:18:
e6:09:b2:38:71:6b:79:25:ee:62:16:7d:ce:e4:82:f4:16:af:
02:44:0b:a2:2c:5c:3c:e0:db:92:85:57:1d:6d:90:0a:2e:2d:
8e:8a:cb:a4:17:a1:3c:88:ac:d5:2a:90:f5:75:55:18:98:33:
03:57:2c:70:24:c7:9a:77:5c:b5:f2:72:7f:7b:a5:4e:22:f9:
82:4a:9a:75:38:95:f6:b8:32:b4:2d:7d:fd:06:17:36:e2:e3:
ad:15:83:46:54:82:71:52:11:3c:07:27:79:b8:3e:f3:7b:af:
d0:33:47:43:c3:12:50:5e:2a:50:91:b9:88:d6:3a:94:8b:fb:
71:c2:5b:94:4b:53:00:88:d3:01:a4:e5:71:4c:98:26:75:22:
9d:dc:57:f1:ea:0a:10:e7:22:7d:93:5b:51:2e:b6:e3:57:51:
eb:79:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:09 2025 by rpki-client