Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
File: KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft (raw, json)
Hash identifier: owg4l0aSa7c2oo51H7fV8fFUev0IqriGQDhMM16yZZ0=
Subject key identifier: FD:EA:5E:A6:99:26:C0:89:7E:3C:5B:B2:CA:2E:DF:8B:11:12:44:DC
Authority key identifier: 2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
Certificate issuer: /CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Certificate serial: 019A71B90343B5BB076BA4AFBB07772F925B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
Manifest number: 06EE
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: FN4mbfTwvi8Xhlnmnlqh5KIO2hw.roa (hash: Z0wCpt0sE7ChkFPlKeGXtBFCnXabrU9fj1GXtnw3GDg=)
2: KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl (hash: qAL9WhfSuqA+ELexLslFF+2rBjrRJclQhmzUdM5EVyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:03:43:b5:bb:07:6b:a4:af:bb:07:77:2f:92:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=fdea5ea69926c0897e3c5bb2ca2edf8b111244dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:cc:f4:f4:5f:d4:87:2a:bd:ef:db:a3:3f:
a8:50:49:09:7e:bb:99:e6:cd:c7:22:fd:5f:95:8a:
74:99:82:df:c8:dc:68:f2:d2:a4:1a:c4:64:d6:58:
d1:cd:2c:c3:54:05:05:b9:36:33:2a:a9:47:3e:d6:
42:db:14:c4:f7:66:ce:9e:12:e6:e4:dd:12:41:79:
9e:96:01:dd:fd:9d:f6:4a:f3:b0:27:50:b1:52:e1:
94:81:a2:13:6e:a8:db:5c:9a:5e:9c:76:e2:1b:e2:
44:07:25:47:14:fd:38:92:41:76:a7:2d:97:b8:ed:
5d:d3:0b:c2:14:0c:cd:7a:0f:36:e4:ea:e8:ce:f5:
bc:a4:d7:de:71:9b:04:16:3d:2e:85:b8:6b:77:7a:
a7:6e:c7:43:44:e9:4a:e8:7b:64:e6:89:01:21:91:
ee:97:09:8b:3f:a2:30:42:7b:aa:ea:28:4d:52:13:
e7:e5:bb:95:b6:f2:fc:de:66:15:87:41:e5:a1:75:
00:91:69:9b:fe:04:26:19:18:3e:d9:eb:ba:00:22:
6d:c1:6d:ca:7b:a7:01:1e:f1:a2:fc:19:52:df:e8:
2d:fb:e6:30:72:3f:7d:f9:c8:60:13:38:34:de:c5:
6e:fc:84:ac:25:9c:ba:fe:4d:57:f8:cf:20:b9:03:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EA:5E:A6:99:26:C0:89:7E:3C:5B:B2:CA:2E:DF:8B:11:12:44:DC
X509v3 Authority Key Identifier:
keyid:2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:98:8b:bd:1c:0f:29:d8:56:11:ce:5b:a5:b0:65:45:8f:c5:
bf:94:f4:84:bd:bc:d6:79:ba:7c:51:38:f6:2e:f0:9b:0f:91:
6f:1f:13:79:0f:05:7f:9e:b2:c2:7b:ac:49:fd:cc:c1:75:ff:
2a:54:c9:d4:a2:0f:e9:67:88:ee:5a:7c:e8:1a:f3:0d:40:47:
70:a2:01:ea:a7:61:b1:ba:18:ce:61:d9:da:f5:96:50:fa:ca:
03:cd:34:0c:de:a6:e7:e5:c3:2d:33:cf:d1:60:1b:2c:a9:53:
79:8c:76:ef:3a:40:cf:6e:ef:32:ce:9b:23:42:00:c7:cd:68:
30:87:e5:8a:bc:33:65:f1:6b:b5:c1:ac:62:f8:2f:89:ed:51:
2e:94:b3:43:73:52:ef:50:c3:7c:1e:cf:a7:e2:cb:9d:93:bf:
b2:ac:d8:5a:05:58:66:3a:b1:8e:b3:34:67:7d:bc:de:6b:1b:
f1:a2:29:b9:0c:e2:3c:1d:e3:c1:27:0a:4b:a3:93:bd:28:ec:
0c:70:51:7f:1f:37:54:3e:20:4a:74:76:98:f8:c9:d5:b0:a9:
35:55:11:3a:3f:72:51:45:2b:ad:dc:d9:b4:df:94:3f:77:c1:
37:78:2a:d7:87:fa:6b:34:cb:e3:1c:26:28:4e:ec:49:17:f1:
16:60:2f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:47 2025 by rpki-client