Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
File: KjbWeMS7ysJK5r6pokyZXEjVk_A.mft (raw, json)
Hash identifier: DyfAbCbI0ndeNkS1OxPdqHjyCUZFXkfX1uFiIeEkmmw=
Subject key identifier: C6:DB:8E:F8:0D:87:74:8A:E1:90:66:32:D0:C0:C1:42:B1:C4:42:D5
Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Certificate serial: 019A7149AEF9519AC30338AE41E9465D8CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:00:45 +0000
Manifest this update: Tue 11 Nov 2025 05:00:45 +0000
Manifest next update: Wed 12 Nov 2025 05:00:45 +0000
Files and hashes: 1: KjbWeMS7ysJK5r6pokyZXEjVk_A.crl (hash: XsXOvtYJht6tuY38ZLX7n3w7WY3QnmKUaYquOx8AsVw=)
2: zK1LIZGeSSnaNXNW0qcn6w1MLCU.roa (hash: e8RwpvlrpxWqEOoeavX1Cyz9aTwhsZ8GdJGcHGa5+Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ae:f9:51:9a:c3:03:38:ae:41:e9:46:5d:8c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Validity
Not Before: Nov 11 05:00:45 2025 GMT
Not After : Nov 12 05:00:45 2025 GMT
Subject: CN=c6db8ef80d87748ae1906632d0c0c142b1c442d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:a9:c2:a8:a3:67:ad:49:64:ef:df:66:3d:
73:bd:14:8a:7a:f8:9f:61:4a:ad:af:79:27:c1:08:
aa:f6:56:ab:1e:8c:88:a4:55:17:3e:7c:c7:b0:e6:
23:40:f1:d6:6c:c2:01:c9:a5:be:4c:a3:07:40:71:
d7:46:0d:0f:f1:ae:88:9c:d6:fd:ca:e6:7d:dc:b0:
74:57:ae:8e:1d:1c:69:d3:dc:ce:d1:63:2c:51:c4:
f3:c6:8f:8f:48:81:33:7e:f6:e2:0e:7d:db:fe:a2:
bd:28:cb:94:4c:94:93:7c:2f:3c:6b:2f:45:b5:c1:
5f:e3:82:83:3f:d1:a1:4b:74:76:eb:c6:97:19:dd:
86:21:0a:2e:b6:a4:09:b5:60:cd:76:cc:9a:b1:c9:
4e:a4:fc:62:4d:7a:b1:94:98:87:94:7b:a1:bb:a3:
63:b2:ec:66:92:22:9b:33:c7:cb:54:1f:89:2c:75:
c3:24:d7:85:52:ca:da:ec:7e:cf:b3:4c:36:68:e4:
1a:85:da:56:28:7a:34:3d:02:b2:c3:7e:f9:44:65:
b0:f0:17:de:89:f3:cb:7f:6d:40:fe:58:43:da:f9:
54:71:80:43:f6:56:23:f6:19:99:80:fb:f1:5d:e2:
ab:de:9c:28:14:ea:a1:e1:ae:7a:9d:d7:07:2e:64:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DB:8E:F8:0D:87:74:8A:E1:90:66:32:D0:C0:C1:42:B1:C4:42:D5
X509v3 Authority Key Identifier:
keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:55:ac:39:75:08:6e:e7:54:97:4a:ba:3b:98:0b:bf:21:2f:
19:17:6e:d1:d2:96:d2:b1:26:9d:fd:93:60:26:32:2c:c2:d2:
31:bc:34:ec:f2:fb:46:ae:db:40:a7:7b:73:a0:9d:61:f7:39:
e9:bf:4a:94:97:00:cb:89:9e:88:23:a2:c1:bb:66:0a:5b:67:
ca:55:8d:ae:e1:44:c5:97:05:bf:0a:2a:4b:c6:44:7b:c8:52:
60:79:31:a7:9e:94:5f:ea:1d:4e:de:de:2e:51:5e:87:2f:4f:
e5:93:91:31:bb:39:2e:57:0e:1a:a2:3d:86:26:bc:0f:a4:3a:
78:e0:fe:d0:d3:4b:19:57:10:28:fb:6c:e1:db:57:1b:af:50:
16:3a:1d:e0:a5:72:ae:f8:d8:98:20:af:81:ca:69:f6:46:3a:
19:0c:15:54:f2:fe:fa:01:36:a2:d3:60:3a:6f:2f:1a:98:c2:
41:f2:eb:a6:e1:d1:2f:d8:ae:4a:18:9d:52:71:0d:81:b5:19:
c3:36:0e:b3:73:8a:94:f1:cc:e7:b7:81:ac:19:51:42:58:bf:
49:ce:d0:5c:c1:cf:1b:38:d3:f7:9e:c2:15:ef:ed:15:b8:32:
53:58:45:95:13:d7:cb:6c:e8:2d:7e:6c:6b:b6:da:49:27:f3:
1d:b0:f0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:53 2025 by rpki-client