Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File: _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier: TqXYsnPZNQJiRKGpLetCCL0Cr96UvcW7f/D/vrNDEh0=
Subject key identifier: B1:8F:F1:A5:39:1E:DA:D5:B9:F4:56:05:F4:C1:01:B7:90:E5:6E:47
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial: 019A706E6EABF6C2CA4C33A44903A4433642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number: 0644
Signing time: Tue 11 Nov 2025 01:01:16 +0000
Manifest this update: Tue 11 Nov 2025 01:01:16 +0000
Manifest next update: Wed 12 Nov 2025 01:01:16 +0000
Files and hashes: 1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: kNomhj7GxJ8jKtOsbJIRMCOnjikS+ZbSYvHdOx54oAQ=)
2: j0TrgD1mMe4SCFwW2zXApzSjMys.roa (hash: A16AXZA8TA0369WZ1QSUTK6vpWpKMrbFHrcl2YyzIA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:6e:ab:f6:c2:ca:4c:33:a4:49:03:a4:43:36:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
Validity
Not Before: Nov 11 01:01:16 2025 GMT
Not After : Nov 12 01:01:16 2025 GMT
Subject: CN=b18ff1a5391edad5b9f45605f4c101b790e56e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:42:29:fa:d1:b5:87:3f:a5:ed:b1:80:0a:
29:17:1f:51:fa:97:d3:d8:1c:55:a3:36:25:f3:ee:
06:3e:23:b1:80:a8:d0:5c:c9:61:54:3c:8b:92:7c:
b4:12:d2:91:57:43:90:93:5a:5a:28:9a:bd:21:6e:
f7:d8:48:aa:67:ab:9f:f3:23:1d:bd:6d:1f:cc:57:
ce:38:47:35:5a:a6:1c:e5:f4:01:25:92:4b:6f:f2:
6a:f1:e5:64:56:d2:2b:f5:04:be:29:da:41:69:7b:
6b:08:44:66:44:27:68:cf:c4:0b:30:3b:4d:a7:f6:
5c:74:ee:16:52:77:d3:af:d0:31:cb:46:f4:e5:8f:
1f:94:58:b4:72:da:44:9c:7b:19:62:3b:d2:f3:eb:
f6:67:85:29:e9:9b:bd:c0:8a:47:4b:df:9a:bb:23:
57:05:41:23:6e:9e:71:62:06:a1:1f:90:61:f5:58:
be:5d:be:aa:52:bf:3e:56:a9:a8:e0:32:39:d9:dc:
45:15:1b:fa:b2:00:3e:f4:d4:bd:c9:08:5e:b1:f7:
bb:84:64:f9:82:41:f4:74:69:0a:cf:87:2c:60:d6:
0c:08:4d:da:4b:05:53:4a:cf:d6:c6:8a:57:0d:cd:
3b:37:9f:99:1c:e5:d8:d4:af:7e:91:d2:44:1b:81:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8F:F1:A5:39:1E:DA:D5:B9:F4:56:05:F4:C1:01:B7:90:E5:6E:47
X509v3 Authority Key Identifier:
keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4f:af:70:11:9e:20:64:cf:71:b2:9d:7a:71:b6:64:24:1a:
93:81:0e:d2:71:e1:8d:3d:64:96:f0:99:a8:a8:f6:63:a8:6c:
b7:7b:78:b4:0e:ef:bb:7e:ab:4f:97:c3:bf:e8:af:b7:f3:38:
52:3b:78:1d:9b:46:6e:3d:e6:91:64:a4:9a:3c:30:77:cd:5a:
7b:1d:1c:d5:37:82:c1:d0:38:67:30:36:8b:b3:3a:ed:4c:df:
d6:33:d8:f6:28:c3:1e:9e:7d:a0:5a:a7:14:e6:2f:37:cf:68:
45:8a:a3:af:04:53:f0:45:ff:b7:8e:e9:62:d9:73:60:cc:bd:
10:f8:81:04:ad:90:f6:d6:4d:ec:de:0e:a5:a6:91:af:88:35:
f0:0f:20:6c:ff:d1:3e:88:e9:a6:cd:b3:3b:73:a4:68:d0:0d:
15:f6:b8:07:63:2e:b2:42:4a:10:61:0e:83:f8:db:19:59:28:
14:bf:24:ec:30:05:19:1c:7b:72:9b:ea:35:d7:e4:4e:d3:35:
79:d5:89:f2:9d:6d:36:6c:2a:ec:3a:84:12:e0:cc:9d:c2:2a:
90:2f:c2:df:ad:27:91:18:f8:37:71:6d:fb:bc:75:cd:c5:5d:
b8:c0:c9:ba:a0:97:bc:19:0b:49:fd:cf:f0:e6:f6:d7:88:f2:
94:b8:5e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:18 2025 by rpki-client