Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: EbN1DyEWacSpoSwPfzKYCVfQjdpoci6/HOQ4/3K1zVE=
Subject key identifier: ED:C6:CD:7D:98:3D:5E:44:21:42:0E:6B:0E:EB:59:0F:92:E9:56:7C
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 019A7225F6CA1EA09DC3D7105F9EE80FCB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 07BA
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: BmrGcl/XGDMXYxz4wMyBdA5EK1Qcq+pketIDi+x5luo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f6:ca:1e:a0:9d:c3:d7:10:5f:9e:e8:0f:cb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=edc6cd7d983d5e4421420e6b0eeb590f92e9567c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:8a:90:0a:d0:06:c2:ba:58:df:aa:d7:1e:
0c:11:96:be:f5:1a:b4:f4:52:28:37:b7:68:3e:12:
34:bd:b3:27:97:1f:b9:b0:ba:30:8d:bc:e7:65:ba:
55:db:e2:5f:aa:68:11:07:76:ab:80:17:6f:9d:05:
79:db:3e:55:63:7a:56:df:2d:ec:29:ee:5e:66:8a:
1d:5a:92:f9:72:c7:87:9e:1b:30:24:f6:b6:67:2e:
f1:e6:90:52:b4:a2:48:2f:59:8e:bc:5b:56:53:e1:
02:15:12:48:40:03:65:bf:6e:68:b2:e9:b8:0b:eb:
00:aa:fe:35:ed:06:d3:2b:38:aa:9a:1b:55:aa:6e:
19:bb:8b:8d:75:d3:82:c9:12:b8:c8:e3:57:dc:15:
9e:96:d2:ab:4e:21:ad:ee:eb:b4:3c:2a:b1:30:b6:
49:69:eb:a9:f2:1f:d6:86:dd:f2:8a:ed:d5:22:47:
58:86:ab:ae:5a:03:87:cc:32:0c:fe:ce:53:23:2d:
5a:26:01:d1:e7:ce:44:3d:7d:72:01:c5:0b:ea:30:
5d:47:ed:f4:86:a1:d0:a8:aa:71:73:f3:58:0d:88:
b0:e2:a8:4d:87:57:6e:cd:92:c0:84:66:af:bb:91:
e9:12:71:7c:a2:82:2a:70:11:ee:70:fc:14:7f:51:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C6:CD:7D:98:3D:5E:44:21:42:0E:6B:0E:EB:59:0F:92:E9:56:7C
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9c:5e:f2:7e:53:e8:e4:04:72:e0:1b:3d:a5:61:bc:1c:d3:
b2:41:0c:33:a3:8c:c7:cd:0b:18:4c:67:a2:e7:d9:72:d0:a7:
74:e5:68:26:4a:75:7b:c0:ca:f7:51:e3:ea:af:c1:bf:cc:ab:
6e:7a:41:f1:fa:2b:b0:36:81:e1:ac:a1:6d:aa:eb:61:68:c1:
06:ca:98:66:64:1a:23:d6:f5:65:58:0c:c2:f1:5e:94:99:78:
1f:58:dd:73:8e:4c:c2:70:ee:0f:a8:29:b6:08:43:74:8d:08:
4b:61:ca:49:fb:44:47:b1:2b:ea:72:12:5c:79:a3:70:03:d1:
b8:54:35:73:c0:66:98:c3:ed:29:31:6d:9e:90:d7:ee:b2:9e:
62:cc:35:51:81:8a:20:8a:b9:f9:b6:e5:87:f0:bd:af:b5:43:
10:84:a7:52:ee:30:c6:34:e8:24:ce:05:7a:ab:6d:a2:38:4d:
3b:0a:a8:8c:f7:20:3d:0b:8f:ca:58:65:c6:4e:e8:58:1f:f7:
0a:81:e0:d4:a8:35:1f:81:de:8e:e1:01:ee:e0:d6:1b:75:28:
6d:c4:39:7d:d6:1b:9e:98:40:ab:8c:7e:9c:28:f2:7e:52:b5:
25:52:33:93:ab:56:b1:9d:59:13:38:dc:1a:37:42:ad:6d:ca:
61:f6:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:07 2025 by rpki-client