Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: Y56PnwkorBYVyflfKoZ10FnPOm+PwpmMfj4NRIDUzhw=
Subject key identifier: A4:6E:72:3A:A5:84:FB:A7:95:87:A6:55:A4:69:E6:0D:2C:2F:F0:D3
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 019A7149C50B87D644209B0605F05DD1B186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 1118
Signing time: Tue 11 Nov 2025 05:00:51 +0000
Manifest this update: Tue 11 Nov 2025 05:00:51 +0000
Manifest next update: Wed 12 Nov 2025 05:00:51 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: orXNAySW8A9wkHYKvYCVnJ1Zfmihj8EXSJceY+QwYmM=)
2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c5:0b:87:d6:44:20:9b:06:05:f0:5d:d1:b1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Nov 11 05:00:51 2025 GMT
Not After : Nov 12 05:00:51 2025 GMT
Subject: CN=a46e723aa584fba79587a655a469e60d2c2ff0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:00:81:84:8e:52:88:e0:34:52:f9:b6:a1:
34:b4:a7:d8:7e:b2:69:e8:4f:21:e6:a7:fe:ae:30:
05:61:6e:63:ab:8f:2c:0d:5d:7b:5a:30:d7:bb:8f:
9f:8f:d9:0c:51:f9:17:f8:72:dc:bb:42:13:cd:c5:
50:00:80:db:52:7f:b4:0f:6c:48:b2:91:16:de:8a:
a3:97:14:8a:de:a2:63:c6:73:8d:e0:eb:a0:53:c8:
fb:1a:7d:1a:3a:6a:8e:b1:65:da:96:93:06:cd:2a:
64:3c:96:e6:34:c2:aa:14:42:2d:63:a5:4d:13:46:
59:f4:6f:ff:f8:39:a8:fc:d4:2e:9a:42:56:c1:18:
60:87:de:46:90:ff:ec:fd:f0:5f:de:44:1c:1a:59:
71:55:01:88:a5:14:79:54:1c:f1:05:5f:da:0b:89:
59:41:a8:e3:2e:a8:74:76:fd:c7:d5:98:51:17:59:
93:e5:3e:2e:a4:5a:59:2f:3d:cf:13:35:92:2f:7d:
0f:b5:91:ec:f4:26:f9:89:47:91:fc:5c:81:3c:4b:
ad:1e:f0:09:46:21:70:b9:a8:d6:ba:06:71:9e:43:
5e:0c:d9:c1:ce:68:b7:bc:3a:c1:50:e4:e0:70:8b:
f7:25:52:b2:63:27:ff:ff:99:70:82:6e:e5:7f:da:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6E:72:3A:A5:84:FB:A7:95:87:A6:55:A4:69:E6:0D:2C:2F:F0:D3
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ca:c9:45:ab:72:9d:64:7f:d9:c8:56:67:0e:10:a3:92:a1:
a5:7a:8e:27:96:c5:1b:14:bb:6a:da:61:3f:ee:b7:a7:fb:b8:
a3:a1:a6:a7:f3:fb:22:23:e1:cf:c3:ef:3e:bd:21:b8:2a:f3:
e4:5b:ad:d3:82:7c:27:1f:7d:15:6a:9d:c1:13:61:12:22:6c:
85:b0:83:10:2f:ad:b1:99:cc:0d:ae:bf:27:25:f8:a8:26:10:
55:26:9f:4c:bb:db:d9:c4:91:c6:a7:61:a1:b5:af:79:1a:c2:
de:00:53:db:80:09:78:24:02:a7:bd:14:61:5a:19:a8:93:87:
71:fb:81:48:c3:de:70:a0:07:ec:21:2a:09:f8:a0:74:a6:2a:
45:ee:e0:6c:7c:9a:32:5a:f0:1a:cd:df:80:e9:f7:cc:fb:26:
36:5c:7f:39:a8:4c:22:c5:1e:25:89:9b:a5:00:eb:98:44:5b:
45:a8:0f:7d:dc:0a:d9:c3:5e:3a:af:0f:10:f4:46:08:5b:f9:
65:cb:e7:61:fa:4d:70:e9:b0:c0:ec:1e:fa:2f:9f:69:8a:33:
4c:e6:ed:f1:88:81:83:6d:7a:9a:86:02:f2:f8:49:5d:d2:71:
58:e5:81:20:76:7f:ff:41:3d:fc:5f:00:f3:c5:95:c2:8d:ef:
65:c3:d8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:33 2025 by rpki-client