Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
File: kLCsKbEI83Ixb79OqT4UhzGkxOk.mft (raw, json)
Hash identifier: i/TeJGFJ+penadM6J2t2z/mXgYsLgDw+h+3MjYUbTsU=
Subject key identifier: 15:DA:E4:B1:A6:DC:24:B5:4B:0E:D8:75:1B:1F:63:0E:11:50:2C:E6
Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
Certificate issuer: /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Certificate serial: 019A71B8448A1A3D583D35C5A73B51B9A71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: E7tuzODCvj1Y4rQf0ix9lEI7vNs.roa (hash: 7tjdPPhW07eifJoW12vu1rvxuuaPJc8oBZTFD5/C/EY=)
2: kLCsKbEI83Ixb79OqT4UhzGkxOk.crl (hash: BaujpXeXq2FgQ8huk/fcSOEayudYRgNbZaBagh+xSPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:44:8a:1a:3d:58:3d:35:c5:a7:3b:51:b9:a7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=15dae4b1a6dc24b54b0ed8751b1f630e11502ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:4b:af:55:7f:8b:db:1a:a3:a4:51:db:6c:
51:31:0a:67:ec:a5:47:a8:fe:3a:be:81:f0:7f:bb:
ef:e1:69:ed:eb:62:74:d3:f1:51:6a:f1:77:fc:e9:
37:16:00:39:d0:ec:1f:02:36:ee:56:dd:53:16:e0:
30:a5:e6:41:41:b8:e9:f6:8a:1d:39:11:c3:06:d9:
04:8d:b2:52:bb:c6:29:70:0a:18:6f:80:c0:08:8f:
b8:cb:a8:06:12:95:70:82:bf:ad:c1:6a:18:9e:22:
50:4c:cc:39:9d:77:c8:0e:ee:1d:ef:10:ef:ef:63:
b4:70:aa:a7:c2:54:04:bd:9e:af:db:b6:38:f0:86:
5f:3f:2e:3e:4d:84:35:d9:ca:85:19:27:d9:79:68:
e0:aa:43:3b:2f:38:cf:6d:3e:0b:91:17:e7:8e:be:
17:ce:a4:e0:4d:41:00:a3:6b:c5:e2:5e:ae:59:61:
a8:fc:46:d5:d1:77:28:0e:92:c9:ff:8e:dd:d1:dc:
2b:c6:a5:b3:eb:1a:a1:d4:7b:d1:51:bf:cd:71:4f:
68:c7:1b:be:88:0f:b7:8e:87:6b:ea:da:3c:31:fe:
6c:71:15:60:fd:d3:72:ee:ac:dd:cd:97:62:7e:81:
32:be:6c:03:25:98:4a:cc:af:73:40:43:b6:31:f6:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DA:E4:B1:A6:DC:24:B5:4B:0E:D8:75:1B:1F:63:0E:11:50:2C:E6
X509v3 Authority Key Identifier:
keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f1:65:fe:d8:35:74:9b:57:40:a9:20:e9:bc:fe:33:21:73:
48:0c:19:b5:fa:ba:fb:d5:2a:75:cc:75:cf:e1:4c:33:c0:35:
9e:6a:f6:02:08:b4:02:9e:59:de:ee:5a:ea:d8:9f:92:8b:55:
00:ac:03:ef:b2:93:1c:b6:9d:fe:4d:aa:d3:1c:07:17:ed:6b:
40:fe:a2:35:85:1d:bf:60:96:ce:46:99:ee:35:09:02:6f:55:
a7:d0:bc:b5:99:20:1c:72:16:77:3a:c9:21:0d:e3:ad:28:f7:
c1:d5:f1:43:97:ba:b6:30:f9:1e:bd:73:c0:49:b7:d0:5b:bb:
1f:b0:90:3a:c9:8f:ba:92:5d:2f:51:e2:51:0c:02:07:7c:f5:
a8:0c:68:72:04:01:d5:a8:e4:03:b4:c9:51:a1:fc:32:6a:48:
e4:52:bd:be:64:3b:2f:e5:5b:39:85:b2:08:d5:ce:ce:74:04:
d9:3b:cc:51:69:7d:56:30:20:23:43:71:27:50:1d:88:1b:e7:
c1:3c:28:43:6f:ca:91:56:3c:72:0f:04:8f:38:05:e1:87:41:
05:f6:5b:16:ba:86:f3:9f:db:03:0c:d2:5a:3b:c0:48:08:4c:
ca:52:99:71:b8:21:fd:4b:6e:85:95:85:8b:49:e1:67:a6:0d:
ed:01:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:45 2025 by rpki-client