Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: 5D/kFvAbUJ5rZvkMMQ7R9k4PLvNz/bLo+uHI3G6cfh4=
Subject key identifier: 4A:D3:1C:3A:00:37:BF:D7:3E:22:F2:A7:09:99:08:36:CD:CE:9D:BC
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 019A71136C2765C1331D443AACA11539269B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 12AD
Signing time: Tue 11 Nov 2025 04:01:29 +0000
Manifest this update: Tue 11 Nov 2025 04:01:29 +0000
Manifest next update: Wed 12 Nov 2025 04:01:29 +0000
Files and hashes: 1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=)
2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=)
3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: z/fwzjh1I9sKqfMM/IYaih+1upR1rTWahJovzuxC7iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6c:27:65:c1:33:1d:44:3a:ac:a1:15:39:26:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Nov 11 04:01:29 2025 GMT
Not After : Nov 12 04:01:29 2025 GMT
Subject: CN=4ad31c3a0037bfd73e22f2a709990836cdce9dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:93:3e:94:71:81:27:f4:7c:62:1e:92:c1:
0a:3c:58:0c:c1:04:dd:a5:db:57:d8:93:59:34:18:
37:bc:65:a5:40:ad:f6:59:49:2b:58:03:93:18:9c:
a6:03:da:15:22:8a:d7:3b:86:d7:10:e3:aa:59:f3:
2d:3a:88:b2:57:22:fe:77:b8:35:87:fd:f5:75:e8:
09:9b:80:04:24:0e:30:62:5b:fa:dd:87:ac:7b:49:
25:f9:31:3d:26:9f:16:6d:50:9a:58:cf:51:c7:f4:
98:6a:0a:5c:6c:27:d7:12:c1:c7:37:bf:f2:cb:5a:
2c:f6:76:af:26:ba:b8:28:cb:de:32:ea:79:2a:7c:
93:b4:84:6a:9f:07:67:4a:91:3f:7b:29:d1:04:91:
1b:90:47:98:95:93:1a:a3:16:55:58:e6:e3:c9:9c:
c2:c5:fc:c1:06:a3:dc:09:df:22:9d:3d:7d:dc:b9:
ac:ae:9c:38:5c:b9:1f:3d:db:ea:ad:a5:7d:88:25:
ab:11:16:a3:41:ae:30:a0:1a:3e:dd:5e:ea:83:ab:
7b:23:65:27:a3:a6:47:bd:54:35:37:a7:dd:63:cd:
31:fb:6d:b1:25:25:c0:a2:ca:80:1b:cf:85:ce:ab:
04:66:fb:02:64:26:a9:cf:fc:8f:da:c6:76:a1:84:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D3:1C:3A:00:37:BF:D7:3E:22:F2:A7:09:99:08:36:CD:CE:9D:BC
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fa:f7:6b:a2:a4:26:4b:48:f6:40:35:ed:2e:e3:ea:e0:7f:
fa:6e:e4:2e:7c:4b:9b:4e:01:2a:c0:09:57:38:4d:4c:55:c4:
00:28:22:ff:92:64:05:6a:5f:a5:5e:5f:4f:36:d6:d1:96:f1:
2c:8e:82:df:09:db:c6:e0:e2:15:5c:31:2c:c6:7c:9b:8f:21:
53:54:2a:90:78:8e:8a:bf:50:42:71:cf:28:58:4c:bf:59:c1:
bf:38:a8:ff:01:51:1d:d3:bf:1e:74:47:32:ca:08:8a:68:d3:
c6:8c:e8:e0:a4:4d:2a:65:13:e4:2e:3d:ec:06:ac:b7:10:e5:
3e:a1:02:28:85:84:21:a0:77:78:4c:33:5e:b9:c5:27:0f:94:
f0:c8:17:0b:6f:23:07:c1:14:e0:49:cb:73:42:73:ac:c9:b4:
9e:27:79:3f:b0:b6:ea:e8:ce:9a:3c:28:5b:0d:5c:3e:7d:a1:
1d:d1:48:c4:3f:74:d8:c1:ad:3d:09:37:4a:70:d3:50:cf:fd:
42:30:83:be:a2:39:fa:8a:a7:16:e9:dc:8f:9c:c8:8f:d3:50:
78:16:bb:d4:7c:17:b5:0a:98:63:96:6a:97:dc:73:b8:ea:77:
b5:26:ac:5b:20:38:15:f5:7a:24:f6:0a:b1:a5:4e:04:5e:3b:
b4:c2:aa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:57 2025 by rpki-client