Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: PIvVjrxwT1e3BYOcaPp3RCDZ9OwENCM8LNMs2HMWvmE=
Subject key identifier: 0D:AC:6D:D1:9F:58:6B:F4:3E:D0:B4:BE:9F:7F:37:46:0D:83:CF:50
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 019A59E61111D3CA3AB674C2A59124171462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 0DE9
Signing time: Thu 06 Nov 2025 16:00:41 +0000
Manifest this update: Thu 06 Nov 2025 16:00:41 +0000
Manifest next update: Fri 07 Nov 2025 16:00:41 +0000
Files and hashes: 1: ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa (hash: poFgPveu8J3ZCztPp1XhAex84n6Kit4aGgJE9uzT+QM=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: 82jzxMNBm5gZNqxW8Om3Y3/sL7IesWypGlcyTCHgV90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:e6:11:11:d3:ca:3a:b6:74:c2:a5:91:24:17:14:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Nov 6 16:00:41 2025 GMT
Not After : Nov 7 16:00:41 2025 GMT
Subject: CN=0dac6dd19f586bf43ed0b4be9f7f37460d83cf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:fc:b1:84:08:56:33:83:25:8a:1c:90:ca:
7a:e2:00:21:f1:44:57:b8:24:8d:6d:a8:be:7c:eb:
10:55:90:38:b9:46:62:1f:f1:6b:c1:57:17:13:b1:
16:00:57:28:b0:84:bd:a2:d0:9c:df:66:97:0c:02:
3e:76:9a:a6:86:db:4b:21:b3:5f:45:42:83:c7:9b:
27:d8:42:76:7e:f0:e1:9b:59:bd:51:a5:c6:42:b0:
c2:ae:27:d1:69:20:a1:e0:b0:5d:c6:7b:2a:4a:be:
f6:20:5a:56:89:43:6b:4a:e5:a7:a8:67:3f:fd:45:
0a:b9:0f:d0:27:bf:b1:da:d7:14:22:2e:d9:5e:66:
3a:b2:27:d8:9b:c7:85:33:0b:3b:c6:16:4f:ad:75:
fe:ad:89:49:c9:e6:e0:2f:3d:d6:13:e9:fd:f7:4c:
dc:2a:f4:b1:79:c2:97:5b:97:02:90:9d:10:33:ce:
71:60:83:7b:2b:7f:df:84:8a:18:1e:5e:2d:64:7d:
79:da:c2:d3:7a:12:2c:54:52:bc:ec:c0:74:ba:26:
92:e7:da:ee:2b:bd:63:57:43:8e:eb:69:35:ce:59:
8d:fd:51:cf:65:8c:b7:4c:99:47:73:d9:a4:0d:cf:
43:17:b6:a4:cc:13:8e:55:9b:0b:3f:1c:57:9d:0b:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:6D:D1:9F:58:6B:F4:3E:D0:B4:BE:9F:7F:37:46:0D:83:CF:50
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5d:8d:ed:5b:7d:5b:05:f1:b2:61:0b:b3:b9:ef:ba:65:c5:
2a:b2:ce:db:c0:eb:c8:b9:01:d5:1e:5d:5b:76:cd:73:55:03:
cd:fa:0f:20:95:39:cc:78:51:ab:69:00:66:6e:e9:df:26:6f:
9c:d5:68:53:ba:38:46:3f:36:de:08:25:bb:60:eb:62:3b:27:
b7:85:5f:8d:7a:71:e6:12:51:cc:26:18:08:ab:91:63:08:1e:
10:48:05:f9:34:17:78:9d:64:4a:4d:50:e1:dc:7f:d5:91:b7:
6e:26:d7:ee:10:50:33:7c:2d:2d:90:84:61:65:e5:9a:77:9a:
c7:1c:1c:c3:f7:53:1f:d5:f5:a6:3a:61:29:14:83:fe:c7:5c:
e4:27:84:ee:6a:75:b3:9d:f9:e0:ae:3b:16:52:b7:2d:84:18:
fb:7a:e6:b7:31:d4:53:4e:c8:6d:f9:1e:f5:f4:e6:c5:45:92:
be:8a:57:7f:8d:84:5c:2c:f8:6c:1c:dd:d1:f9:58:9a:3e:2e:
70:7e:32:1e:46:18:81:36:2b:50:48:93:53:a5:f9:f6:ec:8a:
41:42:0e:b0:a2:8a:bb:83:79:07:ba:26:8c:a5:16:73:7f:f3:
f3:ec:6e:d0:4a:09:32:bf:d9:d4:b3:1d:f0:24:a6:44:84:9d:
b0:ab:ec:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 00:43:37 2025 by rpki-client