Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: 3aHVXDvTS3BUDNgjXO+AhCS/soMF3YqlwkfpcbCMDqc=
Subject key identifier: 60:6E:72:A8:AF:69:36:AF:27:7F:47:52:BA:7B:8B:0D:3C:48:58:1E
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 019A71B86C3DDF2D3BB2167DB47AEE1C61E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 1645
Signing time: Tue 11 Nov 2025 07:01:42 +0000
Manifest this update: Tue 11 Nov 2025 07:01:42 +0000
Manifest next update: Wed 12 Nov 2025 07:01:42 +0000
Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=)
2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: 0D8drX/O67J3i3W/qvPjY84H4jvY/tIQ7apCKe4QkPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6c:3d:df:2d:3b:b2:16:7d:b4:7a:ee:1c:61:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Nov 11 07:01:42 2025 GMT
Not After : Nov 12 07:01:42 2025 GMT
Subject: CN=606e72a8af6936af277f4752ba7b8b0d3c48581e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:8c:d2:48:8c:30:13:57:71:1c:8b:5f:54:
a1:79:68:e1:ae:cc:86:f0:7f:2f:2d:cf:b5:da:2c:
ab:14:dd:bd:d4:60:92:b9:8c:86:0e:30:cb:7b:21:
e6:c2:7a:f5:b3:24:45:52:99:b3:cc:35:3d:fa:f3:
c6:be:1f:4f:e2:46:1e:5a:b4:32:6e:0b:5d:c2:28:
5f:fb:78:6b:d9:4a:38:ed:4c:b9:90:ea:b7:fe:a3:
3e:dd:5b:da:08:5e:a3:77:47:10:27:0e:9f:ef:54:
96:8a:cf:66:54:34:94:30:4a:e8:aa:06:3e:28:30:
e4:45:9f:5b:ef:da:90:f0:af:61:ad:99:86:79:ab:
fc:31:a8:30:26:e0:9f:92:8e:6d:a1:62:bd:99:d1:
51:57:45:33:64:81:54:0f:ac:b9:87:6a:d7:e9:8d:
23:ec:2e:b2:65:29:11:82:84:87:43:ab:a6:e4:82:
68:70:85:bb:b8:77:19:fa:1d:a8:4e:5f:f9:23:c5:
e5:f3:05:d2:32:e1:e9:05:9b:d6:60:a5:4b:2e:42:
52:c5:05:70:4b:2b:ad:53:d9:95:84:ef:04:19:71:
e7:c9:e0:b3:c9:89:88:7f:f5:2e:5c:02:89:4e:68:
4a:ea:c6:ff:92:83:e4:63:36:32:da:dd:db:19:97:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6E:72:A8:AF:69:36:AF:27:7F:47:52:BA:7B:8B:0D:3C:48:58:1E
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f3:9d:f5:dd:de:4e:e7:bf:09:82:cf:59:68:fb:e1:4f:d7:
ba:22:3e:ed:62:36:15:84:41:42:d5:a8:ce:31:ed:c0:73:9a:
a7:96:c6:f5:b6:7b:2a:b9:67:eb:8c:1d:90:e5:d8:c2:d6:a3:
73:04:e0:82:30:2f:10:5d:47:80:63:7f:af:5f:2d:65:95:11:
9a:96:cd:ae:5d:f9:c5:b7:71:78:69:bd:14:b5:5e:1b:8d:d8:
c2:e3:1e:a9:56:6a:fa:7d:df:34:bc:99:09:d9:c8:4a:14:19:
60:ab:0c:37:34:ac:c1:6f:0d:29:22:05:2f:bd:21:5b:8b:f9:
4d:21:b9:b1:36:ec:d2:c3:02:5a:24:ee:57:5d:2b:7e:3e:cf:
ad:90:76:e0:2b:e5:89:aa:52:85:82:2f:44:84:a2:17:e6:c1:
05:d9:b0:72:17:79:68:ff:cd:37:f1:4c:5e:c9:0d:f3:95:d1:
8f:71:fd:e5:2a:18:19:4a:cc:31:9c:ba:3c:38:26:bc:91:5c:
07:03:92:09:b7:ca:5a:e0:0b:66:7f:a1:65:e1:33:17:af:8b:
84:2d:42:a1:7e:48:57:2d:5a:74:4b:27:c5:0c:30:8a:da:25:
b9:59:16:5d:d7:ed:99:fd:ec:ef:fa:31:39:7f:25:c3:14:5a:
1c:9b:fb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:32:28 2025 by rpki-client