Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: BZqkJElphSGqdOnZ2Gc0S9LdUPqEX7Q1n2+8UN9SJ5M=
Subject key identifier: D1:D2:37:B4:79:7A:61:57:C3:5A:40:42:B6:6B:23:FE:F8:96:17:F9
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 019A71B79E69168A65BC9E2DECE326230910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 1119
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: 75qkVCY5XXIcFQQiW3dyFVzW6eQ.roa (hash: dXFNWNpycxDfWS4F1kZ68a/+XDX33UqEzrugZvo8DVg=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: 1lXz/XDUS84AgH8zHy0fBHeLAcm8ae7MLRbu0bHX6Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9e:69:16:8a:65:bc:9e:2d:ec:e3:26:23:09:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=d1d237b4797a6157c35a4042b66b23fef89617f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:b3:b5:67:d2:7a:8c:6d:73:b4:8f:bf:04:
45:f1:8f:b3:8b:b3:5c:0a:a7:25:0c:4d:2e:e6:1b:
2e:66:e7:c1:70:b1:d1:a5:d7:22:8e:f5:6f:a6:70:
15:61:06:21:a3:c8:5f:7f:47:e9:40:22:31:b3:46:
01:84:32:7e:03:06:b3:b4:c7:5b:3f:40:4f:78:5a:
91:9b:14:d4:80:a7:ef:a1:91:6c:f6:40:f6:14:fc:
0e:e8:9d:c7:54:1b:fa:53:1c:71:98:db:9b:0e:f3:
ba:08:24:34:ed:08:17:4a:ae:08:06:d1:dc:2f:75:
7d:2b:b8:9e:5a:7d:d1:cb:61:c6:1c:57:51:64:63:
d7:1e:84:64:f3:79:d1:d4:79:45:50:8f:5f:d2:f1:
6f:d1:0c:31:01:46:2c:08:10:47:01:9a:24:92:dd:
11:85:94:b3:c6:e6:bb:78:2e:33:df:ca:ea:ea:e8:
40:0e:28:a3:6c:8e:b4:8d:d9:28:29:e2:64:c2:a0:
e1:72:13:f4:46:cb:c5:40:28:6f:51:3a:b9:43:2d:
43:73:19:53:2d:de:c7:25:4d:64:a8:f2:95:c4:27:
8c:18:1a:02:8a:f1:5c:d7:20:ae:40:a2:83:f5:4b:
19:c5:fb:b8:56:c2:3f:de:57:78:69:d1:72:b0:81:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D2:37:B4:79:7A:61:57:C3:5A:40:42:B6:6B:23:FE:F8:96:17:F9
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:55:13:d0:1f:01:75:dc:99:45:eb:1b:a9:e4:c0:04:2d:67:
50:28:31:76:97:30:ac:6c:36:af:be:fc:f9:8d:cd:64:39:e5:
ed:4a:88:8a:a1:c0:ee:2b:6f:1a:1f:f7:6a:c3:39:af:f7:af:
88:75:cf:0a:ab:59:b4:1e:bf:15:1e:2f:40:f5:33:ab:f7:5a:
44:ee:4b:16:4f:05:0a:f6:32:d6:6f:39:1d:ed:01:ab:da:ef:
03:bf:2a:6a:45:1b:22:c8:05:d8:a5:65:7a:7e:80:7c:98:b3:
56:42:63:aa:48:cb:ee:e6:67:9a:08:c1:c0:56:7d:e1:f4:22:
b3:f8:91:69:fd:eb:f6:eb:71:00:97:ed:e3:ec:6a:fd:2b:5a:
5d:3d:01:21:31:3f:0d:3e:74:3a:09:21:9a:78:bc:d0:32:23:
59:8e:e2:05:67:e7:40:01:70:86:f3:a8:61:6c:ab:f9:8e:b6:
e9:13:8d:04:f8:af:34:6c:63:40:a2:a3:b7:e0:01:a7:51:0a:
98:45:92:20:fd:50:07:ce:5d:49:b0:71:ff:4a:13:da:48:2d:
f2:22:99:ee:dc:89:3d:c2:72:64:91:2f:89:4d:d2:1d:7a:a8:
d7:3c:3c:22:18:c2:08:5b:01:35:e5:ae:8c:9a:d6:e6:12:ff:
35:09:71:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:02 2025 by rpki-client