Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: EKXTuB0g7dYmWD7tkKc/mFM4UbbObdYFnDfwDfuDiaQ=
Subject key identifier: 45:C1:31:96:8F:2B:A8:0C:87:53:B5:38:A1:59:B2:06:41:F6:E7:0C
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 019A2A7A17085C3DD3263DF13979E5AA42EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 0FD7
Signing time: Tue 28 Oct 2025 11:00:35 +0000
Manifest this update: Tue 28 Oct 2025 11:00:35 +0000
Manifest next update: Wed 29 Oct 2025 11:00:35 +0000
Files and hashes: 1: X8wL7IEItggqG87hU2SRjhDFo0c.roa (hash: Z7Uz5pUQbhyO7q39OnET5F24kmKZzxNrZzpSD8G3ebQ=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: 7ENVy8dwpTIyFqUCVEtDK/9QHVA74glLQ4uFKzej488=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:17:08:5c:3d:d3:26:3d:f1:39:79:e5:aa:42:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Oct 28 11:00:35 2025 GMT
Not After : Oct 29 11:00:35 2025 GMT
Subject: CN=45c131968f2ba80c8753b538a159b20641f6e70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:07:ea:26:3d:41:64:9d:8a:22:cc:de:83:
4a:7a:2b:be:36:00:c6:9c:3b:f3:9b:96:75:61:d8:
e8:06:68:03:9c:6a:38:66:0c:6a:28:35:a0:3e:cd:
f1:0f:73:15:ee:19:c1:cd:e9:fd:db:ef:e1:81:92:
d0:f5:4e:84:57:70:9c:af:c7:97:80:90:38:6a:bb:
73:ed:77:a6:81:45:69:1b:e5:b3:86:3a:88:9a:a5:
01:2c:69:2b:65:0c:bd:b2:70:13:95:ac:00:0b:c5:
94:a1:a0:6f:ee:78:bd:14:aa:da:2c:70:73:8e:aa:
1c:2b:b9:05:a1:46:f6:df:29:5a:36:02:11:80:7c:
ff:c0:c2:73:b9:2c:10:7a:17:41:4f:8b:c8:6e:ac:
be:ae:be:ea:9c:76:32:f9:11:35:ed:3c:01:b4:ab:
db:b8:79:fb:b5:86:92:7a:ab:bf:2f:45:96:e7:25:
43:9d:83:be:a1:8e:1f:14:03:65:b3:16:c3:1d:2f:
78:0a:ea:b5:15:34:42:bf:98:78:84:89:6f:60:62:
a3:bc:f2:d7:77:1f:c0:5e:09:60:0a:42:08:1e:95:
2c:62:15:ca:88:2d:88:bd:99:3c:34:5e:4d:8d:3b:
1d:76:ca:45:87:1c:e5:74:9f:5e:63:3f:34:fb:51:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C1:31:96:8F:2B:A8:0C:87:53:B5:38:A1:59:B2:06:41:F6:E7:0C
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fa:7b:39:08:e4:88:11:f3:b1:f7:d9:77:c9:7d:b8:21:75:
6b:f4:4b:1d:3c:2f:f9:b4:8f:5a:12:0b:15:0c:2f:54:7d:7f:
ef:3c:03:a5:79:cc:e4:35:5f:f7:6f:de:57:f4:1a:59:9b:18:
17:c8:02:ba:ca:54:53:fd:38:66:46:e6:ce:04:26:e9:16:05:
d0:97:e2:2d:9e:58:00:61:d5:52:2a:59:d8:39:dc:66:25:d5:
ac:6c:91:84:b8:4c:5d:61:1d:42:33:36:74:2b:19:3b:75:08:
7c:e1:c6:36:29:10:bf:a3:72:e0:7b:8b:48:e7:e3:aa:e7:00:
c1:d2:6a:37:20:8f:a8:d7:e4:51:0b:f7:d2:7b:f0:5a:b6:d7:
0f:50:cf:06:d4:c1:9a:6a:00:62:d2:38:1a:d4:a5:f9:23:48:
c9:59:0e:34:1f:33:5d:4b:e5:4f:03:dc:10:4b:8d:7a:81:3b:
a6:08:51:36:87:51:82:62:c2:fa:14:1d:ea:d0:29:ac:c3:dd:
34:04:aa:fb:16:17:3c:54:fe:d4:44:30:2e:f6:9a:0c:71:01:
ac:cf:91:a0:0a:b4:8c:f4:ab:13:fd:b7:32:8e:01:34:c7:67:
d6:a6:e5:35:ae:55:cb:9f:0e:e9:be:0e:49:20:12:e4:e1:4b:
79:6d:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 15:27:48 2025 by rpki-client