Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File: kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier: fhLWibihVIDJGu7ReDi3KKdc4CERd5gVeYW5vNnO7Cs=
Subject key identifier: 56:09:C8:F9:D4:D2:66:8F:15:A6:71:F3:91:28:D6:1E:8B:71:63:AE
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial: 019A70A4CDF2051E1078545D369365FDEC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 02:00:40 +0000
Manifest this update: Tue 11 Nov 2025 02:00:40 +0000
Manifest next update: Wed 12 Nov 2025 02:00:40 +0000
Files and hashes: 1: Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa (hash: DDlUT5t8UxzIl4tHxig5obNkFIGRkEa/vbQ9YVdOq/o=)
2: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: Djr/vjL9GobPLdH2a3dIm0FvIwFCwq2RimN925D7J9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:cd:f2:05:1e:10:78:54:5d:36:93:65:fd:ec:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Validity
Not Before: Nov 11 02:00:40 2025 GMT
Not After : Nov 12 02:00:40 2025 GMT
Subject: CN=5609c8f9d4d2668f15a671f39128d61e8b7163ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:35:24:66:af:3c:aa:2f:19:7e:2c:92:f7:
b2:26:75:07:5b:e3:8c:15:c4:74:93:8f:51:70:19:
f0:63:e6:19:b0:4e:2c:9a:8b:c7:f6:04:9e:e6:ab:
de:61:ad:83:d8:18:ed:85:99:cc:be:c9:27:63:ae:
5b:89:25:ca:11:fa:ab:8e:1c:99:81:b4:33:a5:2b:
67:7e:81:af:af:9f:16:60:21:4f:44:a8:31:4f:18:
28:d8:68:01:af:a1:dc:89:d7:43:40:ae:71:ee:a3:
b3:fe:77:f2:2e:b0:c3:af:b3:ae:e0:79:8b:e7:64:
d9:34:46:66:1c:ab:14:a7:fc:11:a6:3b:48:bd:2c:
49:71:24:79:83:4c:ed:0f:68:79:40:5c:73:a5:dc:
ce:5e:fe:5a:b8:f9:81:24:43:81:60:c4:6d:92:a5:
c2:10:b1:2d:3a:4d:c6:59:90:ef:22:8c:4c:80:a5:
6e:0b:2c:3d:6a:f9:4c:e5:6b:36:de:ed:dc:55:b0:
f7:0b:e1:06:ed:9b:f2:ce:22:47:9c:41:99:56:0f:
57:e8:48:bf:b6:e8:16:c0:4c:9a:e3:f1:0a:8f:a0:
20:2b:43:5b:57:2a:18:d6:e2:77:37:9c:c0:5e:6b:
3e:96:f5:a6:46:1f:7d:2c:a7:89:a7:07:e5:ac:79:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:09:C8:F9:D4:D2:66:8F:15:A6:71:F3:91:28:D6:1E:8B:71:63:AE
X509v3 Authority Key Identifier:
keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fe:5d:c5:38:b8:19:53:0b:21:80:98:11:20:ac:43:a3:86:
85:75:02:26:12:00:7d:db:e6:52:68:1e:71:cd:92:67:a4:71:
6a:63:c5:e4:2f:84:18:c7:be:f4:ee:af:ea:29:43:1e:27:4a:
e0:68:06:c6:72:30:0f:d7:5a:db:e8:17:aa:5d:b8:f5:28:89:
88:f8:be:2e:7c:42:cd:3d:cd:1c:40:9d:99:13:78:d9:a7:42:
b9:3c:1c:23:e2:01:6a:76:7d:fd:80:68:61:08:93:b3:bd:32:
8a:61:fe:8b:70:fc:04:f7:cf:fd:1b:33:e6:ed:bd:99:c0:27:
50:9e:40:37:7b:b9:13:14:d3:84:fa:c6:ef:64:bf:e1:c2:c6:
f2:d7:33:d1:1c:b7:97:d9:2c:99:28:9f:7f:b3:46:c6:87:33:
bd:aa:ed:54:80:d3:a6:08:3d:d2:ee:e8:6a:63:f0:ce:53:c7:
5a:a1:0f:a1:29:c0:62:b3:b9:d2:28:91:c0:46:4d:54:86:b2:
b5:bc:17:49:90:6b:3c:b8:52:47:91:1e:0a:b5:67:a1:c5:3f:
cf:eb:53:94:91:20:40:57:32:7a:0e:3f:89:58:4a:3b:52:ae:
82:1a:76:24:d5:b5:c6:df:80:ad:58:ae:a7:14:c0:d5:7d:bb:
7e:52:8c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:54 2025 by rpki-client