Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json)
Hash identifier: KTzqYBgzKSVHqQjbhxFssnpYovG2B5tXss2CtMvmUmE=
Subject key identifier: 3E:BA:5D:E5:1C:14:17:47:A0:D9:AD:51:03:13:F0:86:5C:AD:52:AE
Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Certificate serial: 019A725CAD7EFB058E018A3510041FC3F09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
Manifest number: 03E5
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: R-CX4CB0hLo514CToPVhOwxreNk.roa (hash: uWvGHgIozdO3NKS0KfC+P7cEFWYQl8434I9zUzprdfA=)
2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: Tw/ZGu4gIrtrrxyJIpBEc/FdnnJD0AmdcuWaYBqOLhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ad:7e:fb:05:8e:01:8a:35:10:04:1f:c3:f0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=3eba5de51c141747a0d9ad510313f0865cad52ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:ff:bd:a8:b6:b2:86:e0:a7:ac:de:72:19:
c0:74:f2:e8:b9:86:8a:c4:14:83:82:1b:97:b2:aa:
d4:10:a3:4b:d8:9e:15:ac:29:a4:66:1b:5f:45:ba:
36:74:db:57:5c:11:61:e5:5c:f4:5c:c2:a5:f6:9a:
50:8f:0a:22:23:55:99:33:9c:3a:a3:d1:47:f6:36:
e6:66:f7:c3:a0:c1:2e:10:fb:10:bc:3a:65:86:7d:
3d:e1:f8:71:58:b6:12:4c:c9:da:fe:88:46:5d:db:
0c:bf:9c:51:da:12:d9:95:0d:0d:e8:e7:a4:67:19:
2c:c8:b9:29:b5:5f:34:d9:0d:bf:21:4e:be:b4:c9:
1e:83:29:54:99:d8:b7:3f:6b:3e:99:15:6e:4c:f7:
64:33:a7:6c:0b:9b:f9:bc:29:67:1c:24:d2:73:48:
40:76:bb:8c:b0:8f:e9:90:b1:66:9e:54:a0:65:4b:
55:bf:db:44:fa:06:6e:39:9d:97:16:94:b4:75:82:
81:a1:43:8d:d4:19:40:78:06:fc:c5:82:71:e6:19:
2d:d1:4d:d6:9a:52:d7:db:4b:db:ba:d9:a9:14:d1:
1b:76:33:bf:e4:69:c5:22:65:4f:69:3c:cc:1c:15:
ef:81:c0:c8:81:eb:c8:2c:db:69:d2:b3:56:18:6a:
24:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BA:5D:E5:1C:14:17:47:A0:D9:AD:51:03:13:F0:86:5C:AD:52:AE
X509v3 Authority Key Identifier:
keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e8:38:56:9a:b6:b2:39:76:34:40:4f:b3:5a:b7:31:b7:01:
b0:63:95:e5:01:9b:30:52:95:af:d6:cd:af:f9:95:bc:de:f4:
a5:19:eb:db:4e:c5:c4:82:ac:dc:09:20:53:60:a0:76:61:2e:
c0:a5:cd:88:f6:df:d1:9a:56:cd:25:aa:dc:4d:5a:08:cf:63:
06:b4:88:c8:95:66:b8:07:bf:db:87:25:cd:8a:5c:7d:ea:90:
22:98:28:f7:bc:3b:c8:82:21:c5:80:3f:7f:c7:f3:92:d3:9d:
f3:42:1a:26:79:f2:6b:47:70:5f:af:d4:4b:a9:c2:96:d7:3f:
37:ee:30:3a:ec:0d:aa:3a:81:a8:da:39:7c:6d:24:5e:29:72:
a4:a7:27:98:b4:5d:28:55:a8:f3:18:03:c8:f1:c3:dc:2b:24:
c6:bc:e4:bb:ab:f6:a6:bb:cc:a3:ec:df:6a:52:63:23:3a:70:
3f:0d:03:03:85:b4:9f:65:e8:c2:a9:e6:22:28:9f:36:99:bc:
2f:32:87:f2:c0:da:56:fc:f2:34:4f:9f:64:3d:22:ad:e6:8f:
11:42:51:5b:c9:6c:a0:09:3c:62:40:9a:fa:4f:a5:13:df:fd:
38:5f:e8:e0:a2:6b:29:1e:f9:ea:81:6d:10:2b:04:cc:01:68:
6d:51:fe:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:57 2025 by rpki-client