Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: S3pxsV/RmMgDsn5FUqy7AkaIvwJmDfGMzwlceLufowQ=
Subject key identifier: 1B:A3:26:D5:19:F4:FE:B2:0C:70:BA:E9:1C:B1:36:AC:82:A8:D1:2D
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 019A7112A3036023279E490DBC4CC769BE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:00:37 +0000
Manifest this update: Tue 11 Nov 2025 04:00:37 +0000
Manifest next update: Wed 12 Nov 2025 04:00:37 +0000
Files and hashes: 1: Cgt_gy7EMOYMV19k2tz2rtLd7TU.roa (hash: j2CPj0aVUdndtIwS2SsvRubF8DiJi7ArwXEuxy5F6uI=)
2: LtAL3K8AdfyisGKqq9Vjp_7EH0w.roa (hash: ExkUCXkAhlWeYSrTyMjTF0LGwM8Q8/UHTNY3ZJzGHYE=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: QMTdemRImQjcWZSpZXATmv0HlekZgJojktgWaos3/eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a3:03:60:23:27:9e:49:0d:bc:4c:c7:69:be:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: Nov 11 04:00:37 2025 GMT
Not After : Nov 12 04:00:37 2025 GMT
Subject: CN=1ba326d519f4feb20c70bae91cb136ac82a8d12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:96:6b:d5:1c:ef:a1:22:29:c8:d7:53:c6:
cb:e6:e7:e8:4b:3c:f2:d6:e2:69:67:fb:3f:fe:17:
cd:72:95:dc:a3:75:e1:1e:e5:45:d1:12:4f:35:61:
3b:de:b5:67:4a:42:3e:68:ab:c0:09:88:b2:86:91:
54:1e:96:81:44:ad:e8:3f:d9:7c:a3:ac:cd:04:2b:
35:34:fc:4f:77:bd:ce:c2:bd:5c:8e:de:3d:45:68:
84:ac:85:15:e7:75:fc:c3:c0:d9:d8:0d:8c:38:d6:
db:e2:5b:d5:27:2e:97:79:92:be:ed:2e:5c:70:e8:
0d:8a:68:9c:8b:cc:5d:57:d6:5f:3e:84:3e:eb:50:
06:b7:1a:41:9c:fc:85:99:58:68:6e:bb:de:fc:8b:
56:41:ca:af:3e:14:10:5f:f0:fb:b7:fe:e8:66:8c:
97:80:49:3b:25:c2:8b:72:c2:05:94:7d:fd:a1:00:
09:a4:30:bf:fe:93:01:17:2d:df:95:7c:b7:dd:68:
3e:d5:39:12:25:11:6d:29:dd:62:61:d0:57:0f:ee:
34:d3:9f:cd:22:3b:b3:51:53:de:c6:84:52:50:3e:
f3:0c:65:07:5e:e7:6f:9d:98:d6:46:d0:2d:56:22:
05:37:35:71:c0:94:1a:32:5b:b0:ce:af:f7:b8:4f:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A3:26:D5:19:F4:FE:B2:0C:70:BA:E9:1C:B1:36:AC:82:A8:D1:2D
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d2:93:4b:ef:e7:f6:80:26:10:ec:6e:c8:91:0e:a3:66:b8:
30:66:ff:5a:5c:5c:61:3c:24:e9:f0:e6:cb:3a:db:10:bc:f9:
c2:e1:8b:4c:4f:ba:6c:5f:fb:4b:01:1e:e4:bb:1e:e5:4f:09:
3c:6d:2b:06:a7:94:37:31:2d:e4:2c:5a:4d:a0:e3:76:ea:82:
3a:54:ee:97:4c:33:87:12:2d:09:8a:0f:44:49:79:e9:29:10:
67:83:2b:0d:79:9e:43:57:19:f0:46:62:08:70:77:19:06:a1:
d4:3b:6c:9e:5d:0a:63:88:18:46:5b:8b:50:d2:aa:92:d8:1d:
3f:a5:af:33:c4:39:89:34:c2:4b:b0:16:2b:41:93:8a:84:a9:
6e:3d:d8:38:e8:5a:01:6f:f8:0e:5e:22:af:80:a3:64:aa:29:
39:2b:34:ad:46:c9:e4:e2:13:cb:2f:b4:fa:81:5f:d5:e4:30:
8e:51:88:4f:34:69:a4:22:9f:94:ce:0a:3b:47:ed:11:e1:4b:
e5:2c:6d:aa:57:98:1d:84:2c:0b:12:cb:96:ea:b3:61:08:91:
8b:bc:da:82:df:39:45:7f:58:32:e9:ff:6b:fa:43:2a:87:62:
4b:f7:89:18:85:b4:ea:e5:ce:28:a1:ae:13:14:b7:78:01:74:
dd:6c:8f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:33 2025 by rpki-client