Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: hL9QqU49ipu48vtCFjgUM0FP/iBlY/3RCsr+GotwJCY=
Subject key identifier: B2:B8:EA:E1:5F:B7:C6:B8:8B:23:0F:07:EB:76:D5:1E:62:0D:47:76
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019A7112C816FAE3BBE8736F0C80E38D16F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: fIAvAHpKszhocFbNkczPyy2CR8Xahynw3W/WvAfx7x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c8:16:fa:e3:bb:e8:73:6f:0c:80:e3:8d:16:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=b2b8eae15fb7c6b88b230f07eb76d51e620d4776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:1c:ef:3a:a6:35:0c:d8:be:6b:e2:a6:12:
0d:e3:63:94:53:8e:48:4a:c6:1c:ad:b6:40:32:20:
f8:8d:e7:ee:9d:5e:d2:61:80:07:9a:0c:c6:5a:10:
d9:78:19:f9:ac:d2:78:49:e4:2b:09:d4:f0:ce:f7:
aa:19:11:33:1e:8b:2a:44:5b:ec:cb:ab:41:98:6a:
91:fc:2b:a5:89:10:ef:30:2d:08:33:07:21:2f:8d:
5a:62:43:aa:ec:6c:22:ed:34:09:eb:a7:d6:04:73:
8c:fc:37:71:a8:61:83:5d:46:c1:d3:d3:12:66:80:
d9:73:af:4c:e0:33:49:e2:a2:6e:0a:f0:66:28:21:
57:86:17:bf:68:48:9d:6e:f6:c3:94:b9:03:33:1e:
e7:7c:3f:1a:44:30:d7:65:30:f8:a7:9c:6f:e1:a4:
f8:4c:a6:a1:4d:2d:af:29:32:f7:2d:3e:9e:e3:59:
01:1f:45:53:02:dd:a8:13:ce:e6:b1:49:f8:d5:f0:
d4:46:d2:aa:28:c2:5c:8c:4d:5f:71:38:5b:f9:52:
0b:17:33:19:54:cd:26:3a:05:46:f0:f2:76:0b:0a:
03:6d:91:5a:17:71:56:a5:f6:a0:c9:ac:d4:a5:e8:
22:fb:f3:f6:ae:81:7f:8d:12:19:78:62:c6:4a:c0:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B8:EA:E1:5F:B7:C6:B8:8B:23:0F:07:EB:76:D5:1E:62:0D:47:76
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:dd:a5:69:4b:4e:99:78:57:ea:86:4a:69:c6:0e:95:8a:65:
bf:9a:82:00:70:87:93:e7:9e:85:3b:cb:e3:50:26:90:d7:95:
c8:4d:a7:9b:bf:17:23:13:1e:33:76:b9:d0:af:d7:39:30:26:
1a:82:b4:8c:ed:23:9a:89:1c:91:84:59:cc:54:e1:fe:b4:a9:
fb:d9:d4:d9:09:66:88:e0:b7:42:91:61:37:e2:a7:88:55:37:
f4:a3:83:42:4a:e7:63:1f:28:94:bd:75:fb:8e:bb:34:a2:91:
12:0e:4e:aa:9b:34:51:fc:58:69:f4:ea:d3:3c:3f:36:19:2a:
12:34:45:b5:4c:51:0e:93:a3:52:b3:01:d2:5e:e3:84:54:76:
9d:11:68:13:ab:07:df:be:2f:64:d5:43:22:45:15:80:b2:7b:
c3:9a:ad:4b:eb:30:bc:8f:3a:87:cc:ba:34:d8:26:a2:ac:52:
24:23:16:47:a7:b1:59:99:89:66:bc:09:3c:2a:b5:0c:18:95:
15:66:9c:f3:3c:2d:ff:7b:e6:62:13:82:45:5f:00:23:6b:99:
a1:4f:b3:41:a6:6d:75:f9:fb:3f:22:6d:57:44:e8:fe:60:c5:
0e:94:8b:7c:70:16:15:36:14:d1:c2:f4:c3:e1:43:81:bb:45:
c9:6b:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:46 2025 by rpki-client