Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: haw6+AnIJSpOJZRKUcn7A7ClyA1a9tomDM44Ij7wQrc=
Subject key identifier: 25:F9:C6:C7:05:C5:02:69:DB:E9:D3:58:83:13:6A:A5:3E:A9:9C:CB
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 019A7225F4DD998049583254DA852F8CF488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: Xa6fFTHJfgjuqNoBn7C053nNvhErzqszMPG7rCXbuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f4:dd:99:80:49:58:32:54:da:85:2f:8c:f4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=25f9c6c705c50269dbe9d35883136aa53ea99ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:f7:06:9a:67:b8:1e:a4:92:96:7b:35:c9:
ea:ff:06:96:e2:0e:25:aa:5e:dc:ba:b0:7f:6e:5c:
15:fe:c4:0f:15:ea:ef:05:fc:a5:9a:4a:3d:aa:97:
c3:5c:b3:49:02:4b:e2:66:79:2b:bd:40:c8:d7:7d:
08:f8:bc:c1:8b:60:e0:99:47:37:40:39:4d:33:db:
67:f9:7a:92:59:f2:1e:a3:ce:ca:28:3f:fb:50:f6:
d4:c0:69:92:d8:21:0d:4b:4e:3b:c5:65:b0:d4:eb:
83:31:0b:9b:7b:de:dc:9d:4a:1d:f4:d6:88:60:8f:
5d:e0:b0:78:8f:ff:cb:ff:da:de:57:16:13:a6:ea:
5f:c1:34:5f:c5:d3:a2:dc:b8:b0:57:b5:4d:99:0f:
7e:c8:a2:31:c7:57:78:38:7e:33:7a:c3:ac:99:38:
3c:90:3a:77:f3:e0:dd:a9:80:93:98:93:3a:eb:84:
55:f4:51:6f:3d:ed:45:8b:a6:47:a4:37:ea:b6:2e:
40:80:56:07:66:fc:09:f5:b5:83:1e:16:63:c6:60:
87:3f:49:92:1c:02:3b:a6:d8:61:d5:79:a7:55:b2:
46:78:a9:84:8d:2d:2b:7c:0d:af:80:35:36:b3:dd:
d8:04:ee:e9:67:a2:43:7d:31:0c:b5:58:5f:96:f7:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F9:C6:C7:05:C5:02:69:DB:E9:D3:58:83:13:6A:A5:3E:A9:9C:CB
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:70:10:ce:ad:77:06:c5:f0:39:23:68:55:af:71:58:e7:4f:
c5:c4:e5:e4:ce:49:ef:2c:68:ef:01:fa:45:99:ee:71:2f:e7:
78:3a:46:32:49:7e:e0:24:ea:5b:99:85:a1:8b:e7:83:32:c4:
75:92:0f:2b:61:7a:72:12:9e:fc:85:b2:6a:54:02:6c:e1:dc:
0d:84:ba:0a:06:d8:86:a9:7f:05:a1:41:ee:bb:8f:24:46:63:
31:67:90:b0:78:ec:81:a3:3c:24:9d:bb:39:cc:bc:db:71:d4:
7e:e4:8b:22:72:53:06:a9:01:4a:9e:a5:4e:fc:e0:09:1c:73:
46:0f:9e:31:80:cd:b8:ff:a2:34:64:c9:5d:a4:88:b2:cc:a4:
a9:08:bb:34:9e:1b:4e:49:c5:11:54:a2:57:34:23:34:0f:58:
c1:d4:75:a4:89:03:b0:cf:7b:0f:51:15:06:10:83:ed:e0:1d:
ac:b6:c9:46:2e:35:87:11:88:20:cc:b8:5e:2c:c1:5e:51:58:
cc:6e:5d:ee:e4:ae:61:fd:33:1f:d9:b5:93:d6:da:28:28:a7:
3a:f7:2d:95:e2:b0:bc:79:a0:d8:a7:c8:09:c8:b0:42:c6:93:
9f:4f:c0:0c:fa:da:f5:05:5e:88:c4:63:18:ba:ca:ee:40:bf:
3f:3e:38:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:25 2025 by rpki-client