Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier: 1rvzt1siSVCrClZ0w+L56L5k5A7Ehar/Qvcb7NI3qaA=
Subject key identifier: DB:A1:DB:D4:51:A1:52:1B:A1:E7:6C:9D:91:83:1A:31:EE:D0:76:9D
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 019A4C2A29713E921FD532DF9641EFCB93B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number: 0B04
Signing time: Tue 04 Nov 2025 00:00:22 +0000
Manifest this update: Tue 04 Nov 2025 00:00:22 +0000
Manifest next update: Wed 05 Nov 2025 00:00:22 +0000
Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: csu/Ui6eaFUf5HoZMQ+418RoxGfYzlElti7ACobjLX4=)
2: Yu3sg19gw9RqxXtaBobOTcFABCU.roa (hash: s1VpHCeBK4q+0ERblkTkQcFQicVxzMLQOo1cXvgRehs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:2a:29:71:3e:92:1f:d5:32:df:96:41:ef:cb:93:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Nov 4 00:00:22 2025 GMT
Not After : Nov 5 00:00:22 2025 GMT
Subject: CN=dba1dbd451a1521ba1e76c9d91831a31eed0769d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:93:80:7c:c3:c2:08:f6:09:6b:02:48:53:
fe:69:2a:1d:9f:58:eb:60:4c:5e:a0:a6:ea:99:27:
a9:fb:cd:e2:4c:aa:8c:3a:b9:fb:e4:13:21:c1:64:
01:95:be:f6:c5:e5:06:a2:96:ca:14:df:5a:3a:89:
7c:09:64:1c:8d:0d:7a:b6:fe:b8:4b:41:bc:16:6b:
7a:7e:d7:6d:9d:8e:a7:67:78:fe:a6:9c:b0:d8:b9:
f4:60:01:e6:e0:60:4b:75:c6:60:b1:6b:b8:97:4e:
14:7e:20:40:3b:ec:dc:5a:ae:fa:a5:44:5e:4d:77:
72:22:bd:27:8a:a9:f8:a4:f4:8b:61:61:d3:b6:df:
c0:ab:e0:84:26:df:d7:d4:76:9a:03:4f:20:bf:b5:
ea:32:c1:38:8b:06:a7:78:81:9c:9c:56:89:ef:aa:
1a:96:c8:a9:1a:eb:53:09:f1:d6:67:cf:78:7c:60:
86:63:32:5e:d7:e4:7a:0c:64:fd:35:b5:c1:76:55:
20:e7:64:46:55:38:9a:e7:22:6f:fe:61:a9:0b:61:
bd:9a:9e:51:92:4d:82:f8:bf:cc:58:cd:13:69:e9:
52:46:ee:f2:ab:6d:cd:1a:05:cb:09:49:8d:fc:09:
df:4d:09:52:64:aa:0d:d4:22:6e:aa:45:b9:88:0a:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A1:DB:D4:51:A1:52:1B:A1:E7:6C:9D:91:83:1A:31:EE:D0:76:9D
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:79:cb:07:90:51:20:ae:b0:46:11:41:74:90:8a:09:38:4d:
a2:b4:bd:3e:f8:a5:85:b5:fa:3e:d4:b7:39:71:46:bb:25:25:
52:3d:57:28:49:9d:ff:f8:cd:60:e4:0b:3e:73:09:f8:d8:24:
1d:bd:0f:25:54:1d:3b:07:3a:79:c5:4c:69:41:0e:4f:33:02:
1a:eb:5f:70:7c:04:fd:47:25:2d:96:4e:52:3f:bc:61:b8:b0:
24:90:33:59:fb:f8:b9:ce:dc:1c:f1:63:c0:83:8b:72:11:ab:
af:5d:a6:e2:ef:e1:f6:07:3b:36:69:2d:bc:9b:3c:9b:9f:35:
9d:37:74:1f:54:2e:05:26:be:f4:14:8f:b6:80:45:87:7e:f7:
ee:a3:e6:43:bf:fb:32:36:7f:c8:81:e9:0b:aa:66:36:e2:41:
16:4d:c5:ec:bd:ea:88:7f:06:83:b9:4b:d9:e1:57:7b:c4:86:
64:03:b3:d3:ab:f6:94:3f:4c:19:e6:61:23:dc:f6:38:97:66:
aa:43:f4:b3:f1:3b:e7:80:b2:0b:92:8a:4e:1a:0b:3a:ff:04:
eb:70:d0:c0:df:75:84:2a:2b:d9:83:aa:16:d0:c4:67:29:b9:
b5:85:4b:ac:b0:8d:ea:ca:32:4d:44:89:24:be:20:f2:72:0e:
82:1d:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:33:10 2025 by rpki-client