Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: 26OAJEl+Ywb92o/XCn/WH9C1f067kSwtIyFTDBZNKz0=
Subject key identifier: AE:2D:15:7F:1B:33:F8:AC:42:BF:75:3A:34:AC:FA:05:2C:F2:FB:A8
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 019A7226472B4BABFBE5F20BB2FBB4D18842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 07CB
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: 0ew3GDGdcko8IEl72SU1gGU7W_k.roa (hash: 9xx5BwMCjSrUJr+68yVrM18oEIPDjZ9uwovBe4fuSRQ=)
2: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: +tfY5QVZH6Rx6xczxEPqAL0PII9YOm3zVf6yF6R9mqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:47:2b:4b:ab:fb:e5:f2:0b:b2:fb:b4:d1:88:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=ae2d157f1b33f8ac42bf753a34acfa052cf2fba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:c8:8a:a9:b1:db:a3:22:0f:83:1b:aa:c2:
89:49:c3:68:ac:a9:56:ac:58:8f:4e:ef:a2:95:d9:
1a:9c:b0:bf:df:f1:d2:14:2f:86:c4:21:40:85:a2:
bb:b3:bb:bc:8d:13:0b:28:9b:e4:05:96:16:02:75:
ae:7c:96:70:21:a8:c7:20:32:b0:69:bd:ee:57:26:
09:3a:4b:cc:16:e3:10:45:72:6e:47:aa:00:a2:f5:
d0:44:b2:d9:5b:a6:0c:56:62:34:34:8c:bb:23:e4:
f9:75:71:9a:53:cd:18:a3:65:30:9c:d6:b9:4a:21:
48:ee:42:61:0a:96:72:73:7b:9e:ad:a0:3c:7e:14:
9d:99:dd:ea:e6:50:f2:c7:e1:ca:31:13:56:ee:b3:
7e:f1:b4:e8:ba:8e:08:27:3d:71:f1:a4:f7:1f:8b:
3b:56:00:e3:ad:ac:75:b5:5f:ea:d6:92:7e:d9:b2:
39:1a:99:ce:3f:dd:8a:18:8e:8f:98:5d:d0:2e:ad:
5b:e3:37:08:33:bf:5f:8c:1f:98:16:eb:28:81:5e:
5e:13:60:7a:c6:55:f6:40:0c:f9:70:3c:75:74:1b:
2c:d5:9f:2f:69:3e:cb:02:1c:f3:e1:f7:2c:f3:6a:
25:e6:c4:03:b9:04:33:51:a6:99:07:20:2a:f8:d2:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2D:15:7F:1B:33:F8:AC:42:BF:75:3A:34:AC:FA:05:2C:F2:FB:A8
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:36:79:99:d0:a5:b7:8f:55:67:ad:4f:85:a4:cc:57:d2:2d:
0e:cc:77:40:a2:32:12:ab:e9:4f:b2:63:87:ec:71:9e:f1:ae:
9f:e0:fe:e5:a8:db:0f:31:9d:93:39:79:d3:b5:fc:94:0a:52:
6e:34:ac:a8:85:8f:ec:d0:6a:73:40:5b:fd:28:09:15:7e:40:
7a:cb:4c:ff:7b:58:c3:b5:45:ea:d1:e9:71:cc:79:6d:29:2e:
6e:16:e4:3f:b9:8b:88:84:fd:45:15:f5:46:c8:6a:3e:bb:5a:
22:44:f4:b1:3a:20:4d:71:56:9b:1d:4a:86:ec:04:1e:a6:27:
83:b9:d4:25:50:31:e2:98:f8:0e:ce:bc:4d:25:d7:95:ee:1c:
4d:50:6f:5a:3d:04:f4:8c:d0:c3:25:24:da:f6:b7:fa:71:0f:
45:c8:d8:30:5b:cc:7b:53:89:2f:13:3b:f0:19:23:56:d7:26:
67:e5:27:e7:98:58:be:3f:b0:56:de:7b:bb:cc:4e:2d:26:55:
69:f1:a4:b9:c5:fa:c6:f7:dc:ea:61:4c:3d:a5:98:9b:b6:c4:
a8:d1:85:46:ac:84:46:19:47:72:f6:36:05:b5:9e:8e:80:a3:
58:e6:f0:4b:4a:de:c4:6b:c1:f9:08:24:ae:5f:11:11:8e:cc:
74:2c:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:29 2025 by rpki-client