Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: LK4/RIJVoSUn14/+tGioUiDUGbe2HahYXUVgojHzNBs=
Subject key identifier: 53:81:4A:1D:10:E9:4E:CF:47:F9:7D:DA:E0:F3:BA:3D:75:75:DA:6A
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 019A71EE77EB013C1D05984F7BF76610E553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 100E
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: b5X3qU1qsSmDpb6hzGJ3rDFwb279fos7UUKXskOxizg=)
2: hRopNkKlsL4OwqAqAiJ3QXD2oug.roa (hash: NMdRr2OaOIcyhizjr1sKy4ahHmQgfdQZAiHU+pJ6knM=)
3: wXKkmEzVnT6wH-e4RUZ5ISziflM.roa (hash: 0ibg6oISPGaXyJMIkBYpRfjFyr2Dyc5Kyu9O/zaq9rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:77:eb:01:3c:1d:05:98:4f:7b:f7:66:10:e5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=53814a1d10e94ecf47f97ddae0f3ba3d7575da6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:d4:03:ee:10:65:92:03:d0:3a:ab:cb:b0:
3d:10:ec:c2:10:31:92:eb:51:e8:17:9e:bd:bd:14:
1b:cd:bf:97:60:a9:0b:27:d3:9e:fd:e6:93:33:08:
2d:1f:20:34:c5:3b:f3:1e:09:79:ab:7b:e3:7f:23:
b2:71:32:79:74:af:8b:54:e7:70:f4:ef:e7:7b:ba:
94:d4:20:20:8e:38:9a:f5:92:d8:2f:8f:b7:e4:11:
cb:62:c5:d8:ed:a7:ed:ab:78:84:74:72:17:3e:7e:
09:bd:06:b5:38:90:9d:66:1c:ab:9e:0f:13:7e:a7:
50:ef:25:d1:39:56:1d:3f:02:b1:36:b8:34:b5:3c:
d6:98:ab:39:a9:04:df:6d:82:c0:77:d7:f2:37:2b:
c0:6e:79:4c:d2:fd:71:ae:73:d1:2b:86:85:ab:df:
bf:dc:a3:55:78:41:6e:db:21:e6:94:d0:2e:13:33:
19:8c:f9:24:ac:74:40:be:cd:c2:ce:4b:ea:7f:d0:
c3:f8:68:f2:51:98:17:8f:cb:a2:89:6b:81:cc:e6:
ca:44:01:48:3a:5b:53:61:6b:25:01:0d:dd:f9:eb:
2c:63:d6:48:98:be:c3:19:23:4d:33:52:6f:f5:23:
f7:bb:37:75:00:e9:ec:e3:62:73:cc:0d:2f:a3:0a:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:4A:1D:10:E9:4E:CF:47:F9:7D:DA:E0:F3:BA:3D:75:75:DA:6A
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9d:0a:a2:19:75:98:4d:d5:2d:3b:46:15:d8:04:90:e1:99:
16:c1:ff:61:7d:1a:8e:ab:2c:bb:bd:f4:a2:60:41:fb:88:ab:
da:1c:0f:a6:e2:4d:75:a0:3f:22:db:51:45:3e:b1:90:e8:fe:
aa:ca:cb:21:aa:5e:5a:a3:47:f7:5b:cd:72:ff:e0:32:74:15:
00:ff:ac:22:1b:80:a8:49:a1:45:d0:e2:1a:72:43:61:f5:93:
0d:fe:9e:43:dc:fc:35:e5:91:0a:19:ac:a8:38:fa:d6:bb:99:
43:51:64:c4:0a:70:c7:f3:5b:1f:68:b2:b1:a7:36:c2:77:22:
ab:2b:8c:71:10:dd:78:2b:e4:48:43:8b:0d:d5:57:ca:4f:9f:
b2:ca:ef:88:f4:18:27:b6:d9:6d:e3:d6:0a:48:f7:39:de:f7:
08:ee:b8:d7:60:e3:c4:3a:61:3e:9a:3f:77:52:ba:ea:a6:53:
86:f5:8b:37:93:73:6d:c0:d7:9f:91:04:03:d9:60:e5:e4:3c:
36:a1:a8:bf:c9:fb:53:fd:84:82:f4:33:25:3c:64:b8:de:13:
bd:7f:5e:e3:ae:06:00:4a:6b:e6:32:bf:78:c9:34:d1:78:5e:
49:df:4c:e8:29:bd:f0:1e:d5:c6:09:6e:a8:d8:2f:bb:b5:02:
e7:e9:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:52 2025 by rpki-client