Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: u5tgLhmgoXwmbOF3KMzYPbIfOvxIkFP6FX+YAN3vdO0=
Subject key identifier: F5:2C:7B:C0:A3:A7:FC:4A:C4:39:E3:A1:C6:19:3C:1B:05:83:EE:17
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 019A72CAA775C229C2E4503B360ECC7E9D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 12:01:14 +0000
Manifest this update: Tue 11 Nov 2025 12:01:14 +0000
Manifest next update: Wed 12 Nov 2025 12:01:14 +0000
Files and hashes: 1: Dmpy31ijG2f6hXZqP5vPJHMC7fc.roa (hash: a19ubK1sseKa07iYGs0SfWBGmOIfQnOOnA1DdC09cIs=)
2: E7yxjynkTDUFSV0KBoIMTHpUAPI.roa (hash: 9bhJ257wp5/WErvUFH4Spo9AhE0rTIMhiGRzFbkOnjk=)
3: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: PtIS3F/cxKJ16JThQiHRUa2Ql2XF1fdh3aQJ1kXrn20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a7:75:c2:29:c2:e4:50:3b:36:0e:cc:7e:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Nov 11 12:01:14 2025 GMT
Not After : Nov 12 12:01:14 2025 GMT
Subject: CN=f52c7bc0a3a7fc4ac439e3a1c6193c1b0583ee17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:22:8a:2f:3a:d6:97:c3:05:c9:2c:93:5c:
1e:fb:1d:0d:38:20:59:93:91:5a:0b:6e:54:c5:a6:
7d:1d:01:51:0e:42:a9:b3:5c:0a:c2:81:2d:70:9c:
d7:c9:8c:6a:a4:40:f7:63:67:4c:86:9c:6b:72:f5:
ed:af:62:1e:d8:ed:c2:3b:63:3b:5a:44:6a:fd:a1:
ec:69:da:0c:ca:c7:7c:56:6c:bb:4e:40:9b:f1:84:
79:02:d9:94:25:4b:f5:01:2b:bc:8e:79:62:99:ec:
23:cd:9a:3d:45:76:7b:54:ad:2a:c7:9e:4a:63:aa:
c2:b0:94:8d:8e:31:e2:77:fc:b3:b1:3a:07:74:cc:
73:66:77:5f:1a:ce:e6:e4:9d:1d:49:7b:ef:e0:ae:
f0:cc:88:65:e7:12:ad:87:8f:14:11:f2:1c:e5:90:
5d:a4:a9:27:8c:a3:13:aa:c7:75:c4:42:cf:eb:30:
ea:63:aa:6d:3f:fb:1d:15:67:a8:e9:56:71:a8:5c:
d4:33:12:83:d5:98:5d:c0:74:57:43:64:6d:08:6d:
97:51:e1:6c:f5:7e:9a:cf:22:d6:89:77:d3:37:7c:
cd:04:e7:7a:b0:55:50:be:0e:a2:6f:97:65:2d:00:
cd:6f:63:cb:90:15:a5:89:ae:29:6c:43:b9:b6:7d:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2C:7B:C0:A3:A7:FC:4A:C4:39:E3:A1:C6:19:3C:1B:05:83:EE:17
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:72:9b:06:c2:07:27:14:da:e8:8d:5c:ee:65:fe:e0:9f:8e:
51:c8:a7:a3:39:07:aa:7b:a4:52:12:24:45:62:a1:b5:79:29:
de:a2:a3:a3:5f:89:ae:40:1e:cb:cb:d5:32:16:c6:46:18:05:
ac:5f:0b:e5:aa:9e:21:01:51:39:ba:89:43:22:33:5c:25:01:
64:4e:ef:dd:21:11:f6:d3:f4:e8:0c:ea:53:83:42:83:fa:51:
89:5e:81:f6:8d:38:9b:a3:dc:4a:c7:76:01:3a:ca:b3:8d:3f:
1e:01:af:dc:1f:ac:f3:5e:16:0e:fb:65:2f:ed:f9:8a:28:ed:
73:8f:41:bb:8f:ac:c0:49:d2:77:d3:ab:d4:5e:ba:45:e3:b7:
c9:5a:ea:c6:f9:74:8d:9a:a7:28:96:98:50:05:35:28:1c:72:
f0:14:c5:0b:db:63:56:56:db:e9:62:96:fd:5f:0d:3b:ff:df:
f5:9a:13:37:3e:74:68:58:2e:1e:9b:98:ee:e5:a2:b0:f9:a2:
95:0c:5c:1f:b2:a4:3b:b0:3a:93:48:15:12:c0:58:e4:7f:50:
43:b0:69:2e:a7:80:70:42:89:0b:98:21:c8:79:07:48:23:54:
f6:a0:a2:5f:ce:b0:18:75:4f:c5:ad:93:cf:6a:41:8c:8b:62:
2d:7b:95:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:20 2025 by rpki-client