Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: RZIRYRjbIqHuNt7H0ynTQvmAdunI71/LaTy8qZCrXrs=
Subject key identifier: 11:0B:4E:17:39:62:CC:F2:DB:BD:52:F0:DE:E6:DF:23:03:9D:F6:EB
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 019A72265BB9F1F1B59D0B72E77B74A214CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=)
2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: FnW0SSWreraOfSGyWBF5XGgCVeQrOK2L7uaI/5ckyjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5b:b9:f1:f1:b5:9d:0b:72:e7:7b:74:a2:14:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=110b4e173962ccf2dbbd52f0dee6df23039df6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:65:90:ae:41:66:7b:36:d7:90:46:81:95:
8f:9e:d0:25:94:7f:ea:6b:02:9b:79:54:57:d9:e6:
0b:ce:ab:87:43:4b:f6:e9:30:fb:91:35:93:2e:ca:
c9:66:ef:3f:ca:53:3b:be:5f:9a:00:81:62:20:5e:
af:c9:51:ce:6d:54:1c:28:d9:22:92:a4:fa:4d:0b:
c2:11:a3:17:4f:72:ef:35:8c:db:b8:ec:c6:f6:32:
e9:a3:b1:77:ef:f9:98:ef:64:0b:27:74:80:b7:34:
93:b9:aa:05:18:c5:9b:55:b0:96:e7:48:49:58:99:
4f:e8:d1:8d:19:d9:05:e9:df:2b:e9:e7:f9:de:da:
74:bd:dc:b9:2a:cd:21:5e:d1:fe:50:fd:d6:19:63:
45:a3:13:09:31:06:4e:6f:5a:00:0d:98:2d:c6:2d:
32:58:d3:ea:fd:86:6a:cb:98:54:86:29:3b:16:3f:
e5:fd:a4:78:76:25:55:98:d6:37:9d:37:1a:56:fb:
b6:a7:2a:cd:2a:e5:a5:45:b3:80:24:b1:a5:82:35:
fd:30:3e:d4:b3:59:b4:9a:1f:f0:1d:10:dd:fd:69:
6a:aa:aa:41:9a:f3:61:d2:09:17:bb:c8:07:7f:4b:
ff:6e:3b:a2:45:a8:4d:88:7b:e8:bb:50:09:ab:20:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0B:4E:17:39:62:CC:F2:DB:BD:52:F0:DE:E6:DF:23:03:9D:F6:EB
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f1:18:1c:c1:04:d1:cb:fa:b8:0f:70:71:d6:0b:d9:6d:82:
dc:5e:e9:0e:ed:b2:3b:d9:7c:05:13:48:d2:69:9a:25:d4:52:
b0:74:77:c5:e1:15:73:d1:dd:cd:3a:e7:b8:86:c2:64:9f:3e:
b7:a6:a0:88:70:ff:8d:57:ab:a4:77:71:c1:e5:83:7c:ba:f6:
3e:87:8c:1a:30:61:6d:6a:3b:5f:97:f0:2d:0d:68:a6:4c:63:
c5:bb:3f:bb:23:bc:ba:3f:a7:db:67:c0:4b:35:68:7c:f6:26:
31:0a:08:7c:cf:bd:53:0b:e2:15:d5:ea:e2:38:86:d8:b3:ab:
66:c7:73:be:5f:31:77:0c:4d:e3:98:b4:19:ac:74:30:cd:e2:
01:9e:37:e1:65:6e:6a:86:89:30:08:1f:be:96:7f:39:b8:5d:
ed:53:c2:cc:74:16:37:c4:22:ad:69:5f:be:a4:7e:c4:d5:ac:
41:11:01:a8:8b:dd:dd:c1:ab:a0:f6:8e:4f:e0:71:31:82:2e:
58:c1:40:e1:e3:02:9e:de:c6:3a:8a:ec:a5:c2:59:ee:e0:f3:
7c:4a:44:ee:3f:7e:62:ea:24:82:06:98:9d:d3:a0:10:9f:96:
7e:85:5e:c7:78:9a:f7:80:1c:4a:da:2c:35:7f:eb:40:a8:cb:
a3:d3:b9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:24 2025 by rpki-client