Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
File: KQgY9N9Ka9El1fIhJBRaafW2o0w.mft (raw, json)
Hash identifier: YDhEIFju1yatjSjeAEMGkzQKPYM/vzVNdBMxW5dN6z4=
Subject key identifier: 27:48:6E:D9:89:58:86:17:F3:F5:E1:DF:31:C3:04:D8:AE:B0:8F:45
Authority key identifier: 29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
Certificate issuer: /CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Certificate serial: 019A71B7A947E4607FAD7BFA64870F9F1BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
Manifest number: 019B
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: KQgY9N9Ka9El1fIhJBRaafW2o0w.crl (hash: QnbICdPIZFzBG0tmgv9mNQg8Zf1+njI2BqMi+eDyIpE=)
2: eRG91sI4OxgJ5Ftj11HHCdo0lp4.roa (hash: XcHiB6tZLyMWY77AGAaJ1ywYGGueBg3m4NiJeGQTKn0=)
3: gH5Nx8BjDuFW9EStmNz8wzpaF0c.roa (hash: 4+5mIuyJK0b0oNUWLYEpywekd9cxzAgZ3IGvlVb8A04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a9:47:e4:60:7f:ad:7b:fa:64:87:0f:9f:1b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=27486ed989588617f3f5e1df31c304d8aeb08f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:aa:61:f6:de:a9:5c:6a:8f:1f:20:49:45:
59:67:2b:8e:46:da:90:fb:49:6e:01:62:f3:7c:19:
d9:e5:41:b2:23:bb:49:15:44:8c:2f:ce:32:55:cd:
89:ea:a1:41:bd:6d:9c:15:58:bf:b6:9c:00:1e:16:
de:91:24:f3:36:49:73:28:02:2c:b2:cc:e9:50:f7:
3f:2b:5c:47:3b:c7:b7:71:8d:eb:bc:63:b4:0d:2d:
99:70:5c:2e:8d:de:69:40:25:77:fc:d1:ad:2f:f8:
6c:78:2a:47:c0:a6:71:3e:80:08:ba:6f:22:2f:f9:
3a:2a:99:f4:d9:97:3f:9b:9d:b4:90:05:f5:67:61:
9d:42:02:9d:9d:27:11:f5:d9:de:11:a4:f2:98:94:
e7:e0:57:dc:fe:ee:c4:53:22:b2:33:08:7e:3a:cc:
11:e8:67:ab:35:ab:d3:f3:0c:be:7e:7c:23:7d:e3:
25:56:61:e2:2d:44:9f:2f:c6:43:43:1b:c6:6a:31:
d6:89:b4:3d:cd:9e:31:9c:44:f9:e9:13:20:77:27:
23:eb:49:c4:ed:bd:da:08:6d:54:99:b6:3c:2b:f4:
b1:7c:07:99:47:b5:95:32:f0:8d:f8:9a:24:3a:8b:
77:f5:92:dc:ea:64:55:07:24:0d:68:7d:09:4f:57:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:48:6E:D9:89:58:86:17:F3:F5:E1:DF:31:C3:04:D8:AE:B0:8F:45
X509v3 Authority Key Identifier:
keyid:29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d6:8f:9f:f0:a7:ef:c8:a3:38:e7:54:01:07:d3:8c:f3:f1:
48:2c:8c:a6:ba:c3:6c:15:ad:e9:8b:c3:ab:5d:11:ce:7a:50:
ac:ea:43:9e:18:cb:8f:c0:3e:58:d7:cc:26:8e:a7:69:ba:55:
a0:e8:37:48:08:97:db:b1:91:5e:7d:69:0a:f2:89:f6:69:5a:
b4:a3:41:4a:ac:05:62:b3:2f:45:de:d2:2b:3a:c9:c5:29:0d:
11:64:3e:62:64:3d:af:8b:ac:64:e3:90:61:7f:f0:fb:aa:8f:
25:92:9e:d2:95:12:bb:0e:18:48:cf:2a:ec:57:20:0a:de:33:
2a:98:7c:7b:42:f1:8a:e6:d8:0f:44:31:5b:23:1e:53:4a:82:
5e:43:f1:a4:e6:a4:c7:8f:bc:85:dc:f7:f7:b5:cf:82:57:dd:
de:d0:d1:07:c1:7a:70:17:54:d3:2f:fa:09:c1:e0:1d:f4:f8:
dc:7f:3d:f1:c2:7c:e9:22:50:bd:3b:67:8a:e9:c6:56:47:d2:
e6:97:68:af:80:06:49:da:ae:e9:60:05:d3:e9:1e:9a:1d:c5:
5a:b2:c7:46:49:56:13:84:1b:f0:a7:09:42:f5:6c:f9:f4:b2:
4c:d2:79:11:2d:4f:70:b3:94:15:18:35:41:d5:e5:ee:b2:37:
d1:34:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:03 2025 by rpki-client