Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: Rqkrlif9gnFQWs7/kOv1dH/Sks1gjbu28UzN+C1amiM=
Subject key identifier: E1:94:55:A7:F6:5A:F5:B6:A6:7C:82:0A:6E:AD:4C:12:3E:5F:48:98
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 019A4EF5F6F9BAA64E5A415209B58226F543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0E28
Signing time: Tue 04 Nov 2025 13:02:13 +0000
Manifest this update: Tue 04 Nov 2025 13:02:13 +0000
Manifest next update: Wed 05 Nov 2025 13:02:13 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: 2RUwgIRz16Ex+C7Ae3H1w7dOxkx4bQkeZQKQ+Dx/D04=)
2: o0NNJAdQ09Zlx7io8L7w4JsxeRk.roa (hash: GHDYyjn7cWOGvu2PuaUkyCHLa21ud2IleT+Ydwgziyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f6:f9:ba:a6:4e:5a:41:52:09:b5:82:26:f5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Nov 4 13:02:13 2025 GMT
Not After : Nov 5 13:02:13 2025 GMT
Subject: CN=e19455a7f65af5b6a67c820a6ead4c123e5f4898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:cd:5e:5f:c0:3c:32:4f:20:26:1b:b3:40:
f6:67:d6:70:91:06:4e:46:8c:68:fb:a8:49:b5:c2:
64:e3:4c:b5:70:e4:4a:cd:83:93:85:17:63:51:f0:
6e:cf:56:63:cb:1a:0e:0d:7b:65:65:bb:a1:16:7c:
81:ef:db:49:18:f9:1f:dc:5e:11:c5:07:d8:8a:7e:
d3:09:46:3f:88:41:0a:cd:d0:7f:cc:ec:e0:fa:fb:
76:e8:87:04:dc:23:f3:a1:b8:8f:0a:e9:a1:3c:7f:
13:28:c6:b7:e1:9f:fb:ee:3a:5a:16:00:e9:ea:e1:
c4:87:b4:32:a3:2a:a5:21:77:cd:e1:12:95:a0:78:
c3:fd:53:bf:38:84:61:4d:93:7d:32:b6:a6:da:40:
4b:cb:99:84:50:04:e6:3b:6a:b3:4e:1b:6a:f8:44:
b4:9e:b3:18:d1:1e:48:f5:11:37:82:19:19:13:ac:
a5:ee:19:29:6f:a7:2f:77:6b:c3:62:84:b5:c4:69:
53:87:93:1c:96:94:50:fc:74:31:71:41:41:51:04:
ba:8e:50:54:74:a5:b8:d8:a8:de:0e:c8:65:34:56:
6e:20:72:0c:77:71:d8:b9:df:4f:0b:20:7d:04:92:
f3:d1:4a:ff:f5:76:fd:14:20:3a:96:2c:ee:1b:e9:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:94:55:A7:F6:5A:F5:B6:A6:7C:82:0A:6E:AD:4C:12:3E:5F:48:98
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3a:a2:7e:e7:3f:a2:2f:e1:91:c3:fd:84:54:88:9f:ad:a9:
41:14:df:e7:0f:c5:8f:e9:0d:a0:69:3e:d8:94:9b:01:fe:96:
c2:ce:cc:f1:1f:07:54:1a:2d:dc:94:c0:2d:a5:65:22:77:57:
4f:3c:d0:e2:94:54:13:42:c1:14:61:75:a3:4d:cb:27:45:bf:
77:7d:ab:3a:55:85:ac:71:ed:87:b1:31:46:e7:8e:57:f9:4e:
ae:08:e9:56:d0:d4:39:14:91:77:21:cd:2e:97:2e:d1:2d:bc:
b5:1a:fe:f7:90:90:06:7d:bb:41:db:1b:e5:61:f6:ab:24:08:
84:38:a0:9c:43:a4:e2:f6:a3:54:e5:7d:e6:60:93:a6:15:8f:
cc:6f:8c:ef:d3:f0:8b:bd:e4:6b:62:12:a9:de:63:91:40:7c:
24:db:86:84:73:3f:87:95:4e:d1:2f:b5:fb:de:40:46:8b:9e:
26:bb:e4:a4:48:e2:81:5a:cf:9c:e1:44:fa:0c:8d:bf:9f:05:
8c:09:77:96:2b:9b:21:dd:cb:8b:c7:e3:1c:88:2f:fe:4c:73:
0e:69:54:bf:ec:f4:7d:40:b3:61:48:cc:6f:9a:d9:6c:4f:64:
c7:ba:f7:69:e4:e6:74:fc:ce:ad:a6:46:6f:59:94:c8:95:69:
d7:86:ea:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:55:26 2025 by rpki-client