Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
File: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft (raw, json)
Hash identifier: o0zH23PourIBPcgQe2GMg5falj+mOv1TMasQiYeRBVU=
Subject key identifier: AD:59:C4:D4:1D:79:E6:3D:79:4F:E0:8B:36:6F:4E:3F:F0:B2:1D:C5
Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Certificate serial: 019A72CA477FDDE28651E40FDCB1EAB0918E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 12:00:50 +0000
Manifest this update: Tue 11 Nov 2025 12:00:50 +0000
Manifest next update: Wed 12 Nov 2025 12:00:50 +0000
Files and hashes: 1: Et82Ox-YoPWswPFqxd1JmT5HiVY.roa (hash: dKjp2M/qEJfQktMuqf3U3untvmBMHbGfy5ZX8hyRWlU=)
2: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl (hash: wnkURuXJwebHTQ6M4vzPdljz8vbe5DfMCdZaWqrrDk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:47:7f:dd:e2:86:51:e4:0f:dc:b1:ea:b0:91:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Validity
Not Before: Nov 11 12:00:50 2025 GMT
Not After : Nov 12 12:00:50 2025 GMT
Subject: CN=ad59c4d41d79e63d794fe08b366f4e3ff0b21dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:7f:2d:c9:32:59:b4:d7:64:3f:59:b7:b8:
9f:68:3b:5e:50:db:d9:2d:f8:78:19:91:97:24:6f:
47:dd:d7:e2:31:88:09:9a:24:f2:18:78:a5:08:f4:
d3:dc:5f:20:de:71:78:c4:e9:8b:ba:72:2d:a2:7f:
9d:51:f4:08:42:b7:e5:81:65:a4:3f:3c:3c:2e:2f:
75:6b:c0:52:f3:ca:60:6f:1e:d4:fe:97:4b:35:38:
01:2f:67:9c:b7:f2:9b:3e:7a:c6:e1:af:82:4b:54:
64:1b:c6:4b:38:8a:aa:d3:a7:3d:cc:5d:f1:10:a5:
18:65:48:e2:0d:40:ed:41:7b:c9:79:58:9e:d8:eb:
9a:5f:a5:67:7e:1b:d4:d1:c8:59:5f:45:86:e7:7b:
23:77:04:9c:39:86:2b:56:52:de:78:42:7d:28:65:
a0:a2:5d:db:c5:14:a6:5c:ad:03:fd:63:30:01:85:
c3:e0:21:06:89:6e:26:1e:35:50:32:46:40:7a:87:
81:bf:fc:cd:9a:1e:05:bf:6f:9a:b3:f3:7c:24:03:
5e:f1:e6:16:94:db:a6:96:45:1c:b5:34:b0:ea:6f:
f3:b2:c3:68:16:f2:7c:f6:6f:56:32:4d:66:4c:f5:
99:55:fe:d8:9a:b1:f7:30:b8:9b:cc:d3:ed:ae:66:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:59:C4:D4:1D:79:E6:3D:79:4F:E0:8B:36:6F:4E:3F:F0:B2:1D:C5
X509v3 Authority Key Identifier:
keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5d:d4:29:ca:da:62:5b:15:c6:e2:6a:24:5b:dc:80:6c:1d:
a1:4d:55:fd:a6:55:42:3d:87:b6:6e:56:a1:cc:8d:63:c6:a0:
a1:54:18:1e:fd:00:55:32:da:6d:d3:6d:60:13:0c:10:5e:08:
a2:16:41:8b:b2:b0:80:72:6f:36:72:05:d3:09:43:1a:fc:b0:
12:7b:d7:ab:63:5e:4d:bb:24:dd:57:02:cd:75:87:a2:95:49:
b1:d8:c8:2c:78:99:62:2a:18:40:ae:b3:d7:01:3c:09:e8:1c:
82:e5:93:25:3e:5b:cd:6d:b1:12:4e:2b:29:28:22:aa:dc:54:
f6:50:eb:16:69:93:16:00:98:6d:0b:c0:cd:cd:2d:0e:dd:74:
a7:55:ea:f5:af:9c:82:49:a3:97:c9:26:3b:64:9d:e8:ef:7b:
c8:e9:1b:59:15:59:09:bd:5a:65:43:26:32:59:71:81:d1:f3:
58:1d:1f:64:7a:58:10:84:e8:f9:fa:33:02:90:50:1b:14:fc:
f9:5f:01:3c:40:d0:81:78:5e:5d:b0:6d:34:a9:90:24:84:30:
48:be:71:47:c8:f8:25:1a:45:09:a1:9a:19:4d:53:7f:ed:9d:
1c:f1:5e:41:54:b5:a6:0a:f7:43:13:bb:63:38:bc:64:e9:c8:
25:d5:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:06 2025 by rpki-client