Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: b1feYrklLSx+bGOo9cAMzZJvY767wMBwymvejpTZ0BA=
Subject key identifier: 4C:C9:01:37:17:19:3A:E1:FD:84:04:E7:9B:EC:9D:10:43:1F:77:9C
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 019A722583B1B944281C274931F6DCB5F5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:00:52 +0000
Manifest this update: Tue 11 Nov 2025 09:00:52 +0000
Manifest next update: Wed 12 Nov 2025 09:00:52 +0000
Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: 7lzrG1CCBc7h74I+l3Z1f/VFpkG8hVYOqdmIlCXiFb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:83:b1:b9:44:28:1c:27:49:31:f6:dc:b5:f5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Nov 11 09:00:52 2025 GMT
Not After : Nov 12 09:00:52 2025 GMT
Subject: CN=4cc9013717193ae1fd8404e79bec9d10431f779c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:a2:64:c2:51:da:a1:09:21:a9:9d:08:90:
ce:61:cd:a0:22:cb:78:c8:9e:75:eb:7b:2c:c6:3a:
20:6a:92:dc:e4:89:85:ad:d3:82:ba:b4:ed:89:ad:
21:41:b4:3a:12:82:83:cf:88:29:53:2b:57:74:6b:
71:aa:f0:0a:a6:46:3d:ee:b2:09:bd:91:c6:28:20:
5c:71:97:87:d5:ac:dd:95:12:a1:31:59:d9:65:d2:
7f:2c:04:2c:4f:83:98:4c:55:16:60:d4:2f:d7:d9:
9e:3a:1b:36:38:fa:4a:17:04:c5:17:08:7c:26:22:
e8:bb:49:4b:f6:6a:06:4c:11:6c:da:b4:77:c7:d1:
0a:0f:ff:f2:21:49:72:a9:32:bd:59:fd:d1:db:16:
7a:9e:00:70:24:89:be:72:70:de:4d:f6:df:5e:e6:
f9:2a:17:4b:45:84:11:79:5b:68:cd:04:eb:05:59:
58:b2:87:91:84:86:13:8f:64:79:7a:a6:b8:74:da:
2e:59:5e:a3:81:78:8c:cd:70:c6:57:f0:7d:c1:b0:
25:9c:69:9e:f3:ef:72:e4:83:91:6f:ad:ee:58:36:
f6:05:2b:35:f9:c6:b7:39:07:c9:d6:3e:81:29:4b:
0c:99:8d:bf:e3:73:10:44:29:55:60:24:26:94:a2:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C9:01:37:17:19:3A:E1:FD:84:04:E7:9B:EC:9D:10:43:1F:77:9C
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:62:fb:ff:a6:4e:ab:e4:3a:17:be:5a:21:3d:e1:78:19:
8b:93:49:1d:80:b7:2e:1c:82:93:f1:d1:0f:c4:ac:c8:c8:bc:
94:9b:59:06:d9:5a:2a:7f:5c:93:fb:2d:fe:c7:a9:dd:5b:cc:
2b:a4:73:68:c4:07:ba:4f:c7:b8:b1:2c:f8:8c:0b:6f:84:a2:
81:9a:d5:fc:53:ba:c3:6d:1d:2e:fe:c2:9d:f9:59:12:30:ae:
85:00:e9:36:45:a3:fe:23:b5:76:de:b3:6a:d8:35:64:11:04:
62:2a:0a:b1:ce:16:d6:bb:0d:12:38:cc:f5:d2:f0:8c:0c:8b:
d0:5c:4b:fc:ec:ab:7a:38:7a:3b:c5:86:83:19:c5:d7:fe:57:
c6:55:51:10:01:82:66:9a:8e:b0:e0:01:69:da:5b:69:09:20:
81:cd:bb:4e:e9:b6:ea:a8:c4:12:f6:09:e7:cc:38:92:64:96:
18:4a:c6:a0:9b:83:3a:4e:a7:ba:d9:f9:2b:29:48:64:4b:51:
d5:74:84:91:78:ae:9e:9e:c2:b9:e4:6e:c0:aa:ff:a6:ba:4d:
0f:65:8f:41:b8:29:11:7b:d3:d4:78:62:bd:b7:a1:40:2e:b7:
2e:24:c6:9e:bc:a3:0a:c5:78:11:a0:22:ab:51:85:dd:cb:b7:
b8:db:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:41 2025 by rpki-client