Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: /0GIOBylEf91Fp5CjpSNW3fVGI6HIzsZf9eXxD2+/w8=
Subject key identifier: 85:C5:C9:4E:00:F2:96:EC:B8:10:12:E3:23:55:F4:F9:38:53:92:87
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 019A725C3D2CDED423DBC86B23300C6CB1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 145C
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: B8S+7ktdigNacnAFLeg5wG1/bzc+rw7WWLC0bzhw5Ro=)
2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3d:2c:de:d4:23:db:c8:6b:23:30:0c:6c:b1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=85c5c94e00f296ecb81012e32355f4f938539287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:5b:c6:ce:02:25:08:3b:a4:e3:af:2f:82:
28:68:47:ad:0e:db:6f:49:67:55:ff:b7:2c:21:a4:
ea:09:2d:42:bb:f2:6b:ec:7f:9b:0e:9a:4e:78:df:
b5:b0:ac:8b:50:d6:da:3e:da:eb:a8:8d:9b:de:1b:
84:7e:e8:b6:5b:ba:c1:90:53:8b:03:f8:d7:e2:8c:
e6:e6:26:4d:f4:64:45:5c:e7:c5:ff:52:bc:f4:76:
64:56:88:8c:93:40:4c:1e:b9:c1:2e:18:79:1f:38:
e5:c9:3f:fd:bb:b6:76:3c:52:52:2a:7f:e9:1b:64:
75:24:32:f2:ef:98:fc:ca:66:17:cb:af:19:04:7d:
0b:30:34:c6:ec:73:03:b0:e8:ff:58:45:75:ca:7e:
9b:8f:4b:39:73:22:93:73:5b:f5:73:4e:fe:07:e9:
88:71:6f:39:b2:3a:a9:e9:e8:16:43:70:48:f5:32:
d3:52:7b:af:d4:e9:21:e9:ac:59:75:e2:fd:1f:e6:
20:3d:09:00:83:f8:ca:bd:1f:95:52:ca:e7:ea:9b:
fa:a7:5e:85:06:18:eb:d8:8e:3e:74:2a:99:c6:17:
f9:f3:05:d1:9f:c0:e9:5e:50:72:ee:c9:c6:d1:9d:
ad:a7:20:38:63:77:5b:06:c0:ba:aa:bc:05:2f:55:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:C9:4E:00:F2:96:EC:B8:10:12:E3:23:55:F4:F9:38:53:92:87
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1e:ce:b9:08:b1:e4:96:ff:88:6b:5f:5e:af:b6:9d:8c:5a:
f7:37:1b:a4:b3:25:da:9c:86:2a:19:ef:84:05:06:19:59:b4:
48:da:78:cc:99:58:00:37:72:24:78:d4:36:13:8e:88:4b:df:
2d:c0:5a:bc:a4:0c:5b:82:96:fd:11:5a:99:06:56:f8:6b:d0:
63:bb:38:60:8d:fa:b4:7a:cb:98:ae:62:1d:66:25:c8:57:2c:
3a:5e:7d:61:e2:88:e1:03:49:82:7e:79:98:8a:41:0d:4f:82:
03:08:32:28:35:ff:cc:c2:93:63:f7:61:dc:e2:3f:d3:97:f6:
b1:fd:94:f1:b4:07:ed:04:35:23:f8:85:9d:a8:ae:ca:ab:a6:
19:2d:6a:37:35:ce:7b:f1:20:fe:4f:33:33:de:46:02:52:fb:
db:96:66:ef:b7:95:58:56:1d:a2:74:2f:38:9e:68:8b:d8:fb:
94:4e:7d:38:8e:c7:05:b8:d9:a9:95:de:5f:9d:99:21:77:41:
67:e5:95:b4:1e:4b:5d:17:29:9b:a2:44:87:61:63:cf:65:4e:
5a:5f:14:86:46:e8:cf:12:e5:d1:27:ac:cf:11:79:c6:ac:40:
4f:d6:9c:e4:b4:47:c7:4d:06:98:93:33:61:3b:0a:a9:a1:20:
eb:44:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:08 2025 by rpki-client