Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: j1PpUaHmZsNuQusxbbvPXTQdGE6T6m8WdnRKyMGPYJ8=
Subject key identifier: 2A:2A:31:7F:60:25:0A:BF:0C:5D:62:C1:39:FF:8B:3D:37:2F:F8:79
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 019A72933AC227A59C96E6B4FB563C35FE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 11:00:42 +0000
Manifest this update: Tue 11 Nov 2025 11:00:42 +0000
Manifest next update: Wed 12 Nov 2025 11:00:42 +0000
Files and hashes: 1: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: C1IPuxScEGydQbi2PxasKDS+fM5My/clVg8DTwKq0qw=)
2: NdfWSMRABwv2F_yFFl7X4UZH0vA.roa (hash: cuV8z/cxgYl0ffX7fgAA/EzOTZZ9e9S+JYGHmQ2nzxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:3a:c2:27:a5:9c:96:e6:b4:fb:56:3c:35:fe:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Nov 11 11:00:42 2025 GMT
Not After : Nov 12 11:00:42 2025 GMT
Subject: CN=2a2a317f60250abf0c5d62c139ff8b3d372ff879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:8f:5a:91:6e:ce:35:25:7e:6c:6b:6c:cf:
b4:6f:fd:e2:45:45:57:8f:ce:13:e3:83:7a:66:d1:
42:8a:bb:9a:94:bf:c9:f9:5c:56:3b:5d:fa:9b:ac:
c2:ab:2b:bc:73:c6:2c:0e:ac:11:59:05:37:15:73:
39:0f:78:91:7a:47:23:92:84:97:ae:f7:29:4a:30:
67:38:32:18:dc:d8:79:d6:a7:7a:52:ad:13:b6:ce:
cb:27:5a:ca:63:f3:10:20:7a:7b:0c:66:5e:dc:7b:
77:5c:1d:a9:65:0e:70:e5:60:5e:9b:a6:dd:ed:a3:
b5:07:6e:9d:8b:36:05:3f:1f:0c:c5:66:24:39:bb:
27:49:b2:b1:d8:dc:b3:7d:71:4e:ba:83:27:c1:44:
e6:ff:8a:e1:18:be:de:e8:43:6e:0a:70:42:2b:3e:
37:88:01:9d:43:b0:9c:78:5b:88:17:40:0e:05:5b:
4d:b8:43:be:9d:03:f0:fd:a3:2e:ff:ac:e8:64:c0:
c9:fc:9f:12:71:69:8f:c9:11:e2:ce:79:01:34:39:
6c:bd:85:43:d7:e1:49:e5:c2:38:f3:4d:e2:c4:c0:
01:c3:d9:cf:46:91:08:b4:2d:3c:62:55:52:31:2c:
fe:57:cb:3b:3b:0a:4e:6c:bd:90:55:c5:76:11:f8:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2A:31:7F:60:25:0A:BF:0C:5D:62:C1:39:FF:8B:3D:37:2F:F8:79
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:87:64:5a:9a:38:75:aa:fe:c1:a9:52:d1:54:34:f1:d0:e7:
cb:6a:18:ef:61:c3:87:70:34:50:61:3c:5f:93:ff:5a:2e:77:
29:c1:1c:a0:5e:a7:77:5b:2d:6a:97:44:a1:07:62:33:3b:86:
3d:32:88:05:97:1e:dd:a4:3f:0c:5a:e3:77:08:0d:d5:60:eb:
58:6e:c0:44:c1:19:fe:98:77:40:3d:22:f6:0d:45:b9:35:b0:
b5:cf:cd:8b:88:5f:ef:a3:7a:80:26:bc:82:4d:ba:63:f8:45:
0e:41:42:71:ac:38:c3:40:b2:c9:b2:5c:a1:2c:0c:2f:14:34:
59:f9:14:f1:eb:de:28:7e:4d:d8:e5:88:3d:22:c2:13:39:dc:
c7:31:6c:a2:a1:13:2b:85:de:45:70:3f:63:b8:cc:fd:56:94:
a9:7f:05:12:6c:e7:a4:7c:37:bb:c7:1f:16:a5:04:1a:cf:69:
3d:2f:a2:af:a5:3f:d9:a4:24:f3:19:08:3e:77:0f:f6:0d:e1:
2f:83:e6:62:ee:e0:79:14:93:e1:07:c3:e9:d7:07:57:35:f9:
16:e6:a7:70:42:22:a3:57:81:24:57:58:c9:8e:f7:e3:de:d2:
a8:3c:a8:9b:6b:07:7c:1c:2f:bc:13:20:60:20:76:d8:71:eb:
b7:c3:94:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:14 2025 by rpki-client