Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: OKlMpEYULR+UUo63a+qllYj9GcBgdpPtUSB8o6atMC0=
Subject key identifier: 87:B1:BE:6D:63:C0:F8:FF:7E:13:FB:CE:69:ED:AB:B1:BD:E5:AA:92
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 019A503DCA6D6BD39182FBCDA334F1146CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 1108
Signing time: Tue 04 Nov 2025 19:00:18 +0000
Manifest this update: Tue 04 Nov 2025 19:00:18 +0000
Manifest next update: Wed 05 Nov 2025 19:00:18 +0000
Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: Hr5mAhH3fEHhduNjhrk9aDMsDwfrjzQjVEwONldAEwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ca:6d:6b:d3:91:82:fb:cd:a3:34:f1:14:6c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Nov 4 19:00:18 2025 GMT
Not After : Nov 5 19:00:18 2025 GMT
Subject: CN=87b1be6d63c0f8ff7e13fbce69edabb1bde5aa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:9f:94:f1:b3:28:d9:f2:1c:d1:13:4d:22:
fb:07:f0:bd:57:46:1b:5e:48:8a:8c:6b:1f:83:f9:
9f:a8:59:df:69:5a:7a:d4:f9:1d:37:13:40:df:f3:
98:f1:24:4b:a4:64:44:90:ae:21:22:41:58:10:d5:
5e:c6:17:5d:a2:39:e5:09:90:0a:c1:fe:b9:22:c1:
73:8d:e7:67:46:cd:d8:24:2c:d8:d7:f2:0b:87:28:
85:30:b9:f2:7b:a9:93:a6:be:87:90:f4:b2:a4:94:
7a:61:2e:9f:75:32:d9:f7:2d:d7:06:5e:88:d6:e6:
27:d8:13:51:86:c7:d8:f8:a1:81:9f:c7:f8:36:66:
4c:79:ff:36:49:21:d7:b7:5c:8b:df:8d:70:5e:55:
aa:1c:bf:3d:4f:ca:b7:39:52:bc:48:be:b3:3a:ad:
9a:a0:fb:62:8c:6c:6b:94:c6:b6:94:32:15:1e:0a:
b6:44:54:dc:1c:08:58:bb:bf:f6:30:c5:20:48:15:
70:70:04:e0:f6:da:36:b2:97:ee:be:b6:e4:a0:9f:
f0:20:3f:c2:8a:60:44:6d:66:1a:d6:c9:8e:6d:d4:
d3:8f:3f:09:60:86:56:b6:8c:c2:64:16:39:cd:a7:
97:e6:3b:40:50:aa:b2:99:bb:8a:58:7b:c9:0b:cc:
5b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B1:BE:6D:63:C0:F8:FF:7E:13:FB:CE:69:ED:AB:B1:BD:E5:AA:92
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:aa:6a:e2:5d:b2:8a:e8:af:1b:33:dd:9c:45:8b:13:d1:b7:
aa:60:39:b4:9b:76:7a:da:d8:1d:6c:df:8e:88:ac:6f:f9:c2:
04:c5:35:e1:0d:86:83:37:0a:10:8d:75:97:94:12:76:b1:b7:
b4:00:ef:ff:05:e7:ff:67:ed:29:e2:7b:77:ba:56:3f:41:b9:
3f:8e:3a:21:14:b9:8a:06:ea:09:fe:28:ae:2d:45:1f:f4:d8:
95:ad:7b:1e:a0:ec:6d:72:9b:88:d2:c5:53:5b:5b:c7:82:bb:
cc:a1:28:84:3c:5e:d3:2c:1f:cb:20:a8:be:a6:12:ae:51:c4:
2d:b1:81:61:e2:d7:b7:a7:a0:32:8b:e0:28:1c:29:e4:54:fa:
60:15:da:fa:20:31:0f:ea:cc:9a:32:32:a7:cd:95:db:fa:a9:
3a:35:ac:f3:0f:c1:3a:f7:7d:42:f4:46:4c:c9:ed:4b:6a:92:
cf:41:f4:14:03:75:75:e7:bf:30:f3:ac:e1:ce:51:88:5c:2c:
57:4a:d3:ec:17:3b:f5:17:60:70:8e:a0:52:88:74:e1:1b:54:
fc:a8:18:77:49:67:f6:72:d7:f4:8d:ba:c1:62:f2:73:f6:4a:
a8:c6:d5:21:42:a9:ba:17:42:24:39:00:d5:42:57:69:a5:d4:
8c:8e:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:00 2025 by rpki-client