Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: tCMuR+MX+qJ8wypvUoAzahdrf8dchoPZgc9CKS6bvtc=
Subject key identifier: 5D:BF:3C:F4:4F:E5:B1:C9:A3:26:DC:50:34:FC:28:D0:E5:CE:01:FA
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 019A7293B7FBBC375B054BD701D8C33E372C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 0F2E
Signing time: Tue 11 Nov 2025 11:01:14 +0000
Manifest this update: Tue 11 Nov 2025 11:01:14 +0000
Manifest next update: Wed 12 Nov 2025 11:01:14 +0000
Files and hashes: 1: TYH4Ce0-k-wvqgRH0i5li3BgriI.roa (hash: Q3Et9vzkH2i83UUu897K4DdPhoe5uvwQSHH8BVd+9Y4=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: 4Hh7gsr1G1sBgHHSvvfARu5v0xj2OsNyfrP7IFVYPgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b7:fb:bc:37:5b:05:4b:d7:01:d8:c3:3e:37:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Nov 11 11:01:14 2025 GMT
Not After : Nov 12 11:01:14 2025 GMT
Subject: CN=5dbf3cf44fe5b1c9a326dc5034fc28d0e5ce01fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:f1:6f:c5:42:29:e5:63:99:66:b6:4b:c3:
a1:1a:b7:a6:b2:b8:48:74:d9:81:3a:5d:3f:c0:f8:
b2:e6:bf:f1:9a:38:c0:32:18:93:09:c5:e8:c2:70:
23:a3:44:d4:37:5c:b3:67:a4:67:36:5c:f8:cb:f2:
2e:ad:5e:18:27:59:de:0c:82:84:8c:3b:ce:d9:2d:
b8:c8:7d:ac:cd:70:2c:73:79:6f:bb:ba:84:03:48:
69:f6:53:74:47:35:8c:37:ce:f3:68:3d:d9:53:d8:
64:8b:f3:02:2c:1d:92:6e:70:01:b3:72:e6:e0:71:
27:a3:e3:8f:3b:65:14:86:3d:69:cd:5d:05:0d:a6:
1b:48:f5:93:8e:11:be:c9:ca:80:4a:dc:4b:11:05:
eb:04:89:7c:26:23:a8:f7:a6:29:b4:7a:57:fe:7d:
4e:e0:0a:08:cb:6c:bd:e0:00:60:4e:26:06:a2:b9:
0a:50:cc:02:81:92:fd:ed:7d:01:cf:7e:dc:14:b9:
00:0c:3d:f3:0c:e4:ef:cb:0f:42:c3:21:78:ff:dd:
83:1d:62:7a:e0:76:e3:0f:81:6e:be:d6:c1:28:1a:
2d:12:28:35:a4:36:53:9a:4a:5a:bf:ca:ec:c1:e8:
91:77:eb:d3:4c:45:32:d9:2b:77:87:59:46:88:9a:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BF:3C:F4:4F:E5:B1:C9:A3:26:DC:50:34:FC:28:D0:E5:CE:01:FA
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:23:2b:3f:7a:5c:79:90:58:9d:eb:06:f7:ab:6f:bd:35:6b:
bc:d3:0f:f7:94:2e:26:b0:f5:81:d7:ce:3d:c8:f8:c7:55:72:
fb:10:d2:9d:7e:06:2f:72:1c:9f:71:2f:2a:0f:e9:2a:6d:1d:
e0:89:d6:06:5d:d3:0c:10:6a:c0:00:86:e6:f9:7e:d7:2d:12:
bf:76:45:40:9b:48:ff:ba:3a:c6:4b:e6:a8:22:f7:c8:d6:f2:
be:58:e7:10:b5:9b:9b:df:1c:0f:fa:53:ae:d4:1e:02:9d:98:
32:c9:f9:1c:d2:75:fc:6e:fc:42:16:3c:68:1e:bc:74:47:72:
19:8f:d9:bc:45:ec:79:65:c6:4c:0e:15:ee:9e:54:86:27:26:
6e:40:8b:ee:24:fe:d7:26:95:ca:ef:f4:2a:06:22:76:90:3b:
5e:84:74:f7:81:4b:5e:b2:26:ab:f5:1e:1e:8f:81:b7:d8:0f:
45:c3:f4:a6:9f:c0:2d:5f:7e:5f:fe:30:08:27:8d:3a:da:35:
62:ce:52:f7:66:bd:51:93:4a:c6:3f:34:02:67:24:69:5d:ef:
e1:8b:93:37:35:a1:b5:48:4d:c8:d0:40:5a:2d:88:88:c2:53:
db:d6:1e:8a:64:c4:00:ae:fe:f9:80:b4:7c:cf:70:b8:ad:fb:
50:67:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:21 2025 by rpki-client