Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
File: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft (raw, json)
Hash identifier: 1RvVY5oBIxqSSmZAgolVBRORu2qqH+S1VSsiqBISFXw=
Subject key identifier: 23:4D:4C:3E:5F:43:97:64:78:D1:DF:30:87:55:CF:B8:BE:D6:77:C3
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Certificate issuer: /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial: 019A70A50065F828DA47E4D1518AEDEEFB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
Manifest number: 1682
Signing time: Tue 11 Nov 2025 02:00:52 +0000
Manifest this update: Tue 11 Nov 2025 02:00:52 +0000
Manifest next update: Wed 12 Nov 2025 02:00:52 +0000
Files and hashes: 1: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl (hash: M5U+gnkf4hgRdmE2xoYNEGUAi3VFplSGr522S0h4HOc=)
2: fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa (hash: XcBDg6SFO9es9ohuelGMBtP1Av1BLAYbIVQZ992NLeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:00:65:f8:28:da:47:e4:d1:51:8a:ed:ee:fb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Validity
Not Before: Nov 11 02:00:52 2025 GMT
Not After : Nov 12 02:00:52 2025 GMT
Subject: CN=234d4c3e5f43976478d1df308755cfb8bed677c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:39:c6:55:f4:43:1b:9e:23:df:ae:d7:30:
37:ec:d0:54:bf:d5:7c:0a:4b:64:40:d5:3a:8e:93:
ba:cb:e9:36:6b:e7:33:6f:35:30:8c:ac:67:f8:a3:
e2:df:0a:49:03:0d:a7:7d:9d:89:50:32:28:5c:0e:
43:58:77:32:8e:87:15:05:68:ec:b4:ac:9b:b6:ea:
bd:bc:9f:bc:04:32:1d:97:5e:f3:d2:55:fa:5a:d6:
01:91:f1:06:e3:8b:80:28:77:c2:b5:e5:56:ec:b1:
17:a3:66:52:d7:09:f3:b8:46:8c:4c:48:5a:9d:a5:
da:a9:fd:e9:e7:f6:94:6b:e8:2d:e0:c0:d4:80:44:
2e:50:8e:f4:f7:a1:ac:8b:0a:04:92:7d:e8:b5:50:
2e:9a:59:30:8f:ac:52:35:8b:6d:c6:60:d2:f8:d9:
f9:15:e7:d6:93:4c:fc:71:70:3d:f1:3c:de:9b:7d:
4a:3d:c7:ee:1e:ac:fd:a6:d7:88:0e:68:9b:44:35:
cc:29:75:5f:97:e8:27:98:ab:cc:3c:77:a7:d9:fd:
6b:02:01:ae:e2:7c:ea:0a:68:dc:6c:48:e6:fb:ef:
93:a4:0d:be:ad:61:f2:5a:2c:f1:f9:02:81:87:ab:
fa:81:d9:f5:0c:73:23:41:9b:d4:99:71:f3:23:6b:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4D:4C:3E:5F:43:97:64:78:D1:DF:30:87:55:CF:B8:BE:D6:77:C3
X509v3 Authority Key Identifier:
keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:12:c7:7c:51:a5:d6:a0:bc:cd:aa:f6:3b:c6:9d:9d:19:27:
27:bc:a8:63:5c:26:3c:98:88:f7:7f:c7:6c:7f:e1:78:95:90:
44:cb:2d:24:f3:79:e4:48:79:3e:4e:3d:cd:0b:75:61:f4:8d:
d9:3d:0b:fd:b1:86:92:63:ff:bc:19:f8:90:e8:5d:c9:b5:cd:
48:94:95:c0:bd:bd:8b:e3:97:c4:bf:2a:e2:e9:30:47:3f:b8:
34:ca:94:1a:f7:ed:ac:11:6a:00:45:f8:23:b5:ac:8c:ba:44:
66:ac:ec:a0:b1:ee:28:00:76:c4:bd:e2:42:52:36:cd:49:06:
14:6a:06:84:ad:eb:37:bb:e3:4d:e1:ad:d6:4d:18:b1:a7:02:
9f:29:22:ff:9e:31:9b:b2:66:cd:68:7a:7a:0b:fd:22:00:60:
a0:09:dc:c5:55:38:8e:e1:24:1f:68:05:25:31:ab:8d:1a:d4:
a6:6e:a1:71:9c:8f:e2:8a:10:c0:af:91:0c:73:10:7b:84:5d:
d5:cf:05:a3:5e:1e:19:00:63:1e:b8:00:cc:45:5d:e0:ee:e7:
a0:6a:19:cf:03:83:9f:c8:e5:58:23:a2:ab:e0:64:07:34:81:
0e:fe:92:1e:52:16:b1:85:14:9c:a8:66:b6:79:8b:b2:a3:38:
af:ed:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:58 2025 by rpki-client