Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: 8lvnaNHob0Ie108jkFJqNck373bj+PKtjc1II8LYo0k=
Subject key identifier: 54:9F:2A:1A:B4:AA:CF:25:9F:B9:1A:B5:25:F4:0E:F0:C7:A4:05:F8
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 019A72266E85D16E86FBA58F9BE7557ED5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: ZEGSCOq9mqgkyVX+DlYA0PKvRF+CUl2OUURrGNUNa9c=)
2: wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa (hash: 1/0ldOLBPILSR69hThfIMtpZUKnlBM4vs1kLEHBC5Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6e:85:d1:6e:86:fb:a5:8f:9b:e7:55:7e:d5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=549f2a1ab4aacf259fb91ab525f40ef0c7a405f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:4c:27:f0:34:99:47:97:da:00:98:0d:4d:
bf:a8:12:9d:95:07:97:e5:1d:f3:22:81:cc:73:8d:
11:2b:f9:08:91:bc:cf:69:7e:c3:d0:e4:1c:77:6b:
ee:ff:92:09:d1:bc:d3:4e:cf:56:96:90:f4:51:45:
aa:56:ab:6c:13:d6:5f:6b:9d:7f:65:c2:d1:5d:01:
18:8b:f5:ea:8d:35:7c:5a:51:f6:02:4a:a3:7f:45:
f0:5c:af:7a:ab:fb:52:48:cb:1f:1b:b5:80:42:b8:
a1:da:e2:69:80:26:97:b4:6c:1b:cf:6d:39:da:40:
11:43:7f:90:0b:a9:3c:a4:e4:1c:0b:b4:c9:ac:cc:
ae:1d:4b:0c:9c:c2:94:c8:4b:7e:2d:b9:c5:a7:78:
3e:7e:60:02:9e:f8:a3:0c:94:84:c3:0c:33:01:06:
2c:66:75:aa:b9:a9:22:ae:31:e6:31:41:7a:24:41:
d2:bc:4d:4e:51:96:0e:aa:24:ea:74:6f:e1:3b:89:
70:04:47:f9:fb:48:d2:60:ec:88:d8:f9:e4:95:79:
88:66:46:46:13:32:23:d8:3c:6f:c7:40:90:ea:c5:
8f:3b:05:85:e8:e1:fd:35:16:31:99:ac:be:d6:41:
fd:90:68:13:78:9f:5c:ce:5a:78:28:fc:fa:e0:46:
bf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9F:2A:1A:B4:AA:CF:25:9F:B9:1A:B5:25:F4:0E:F0:C7:A4:05:F8
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7e:c8:14:07:c3:3f:74:4d:91:f5:07:01:11:d1:8b:5b:23:
fa:5a:04:dc:0b:cb:fc:cf:4f:f5:c5:d3:1e:26:b3:bb:ee:25:
cb:74:66:ef:4f:8c:e6:87:70:47:3c:83:37:f6:16:05:10:bb:
f1:73:d7:85:0c:9c:3b:fb:1c:01:30:36:98:0c:18:a3:0c:5b:
c7:9c:f8:31:69:e1:a7:a6:2d:44:40:e8:98:59:d2:ef:5d:cb:
b6:86:0b:4f:69:f6:94:14:b6:54:af:43:e4:00:4f:fb:80:29:
b0:94:27:f4:9e:ea:0b:9d:a9:74:3d:2e:df:25:a9:87:9b:59:
ca:e0:fe:00:01:1e:a4:7f:79:3d:95:a7:06:c2:32:d2:e4:b0:
d7:11:91:60:a5:da:0b:c6:3c:62:46:fe:cf:47:40:03:af:db:
59:df:10:6e:a9:9c:39:18:7c:b5:0e:e1:95:2f:90:61:4e:93:
e4:59:f0:cd:07:15:58:84:0c:0a:cd:d4:e1:82:77:3e:15:8b:
16:e2:d9:5a:f4:ca:6b:83:9f:b4:cd:70:6e:2c:0b:dd:4c:67:
cb:d9:ba:af:eb:6f:bc:25:68:6e:ff:24:0f:d1:7d:3c:3c:97:
cd:22:6c:9c:b7:35:8b:dd:b4:82:81:dd:8d:b0:3a:6c:59:b5:
1b:e9:5d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:58 2025 by rpki-client