Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File: KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier: Pd6xI6+KhJMRhFoRCcSKZuoEOggpaqRSf6O33GNBK7Q=
Subject key identifier: B0:95:AD:F1:02:A1:3A:17:40:14:FF:2E:C4:14:C4:03:EB:91:6A:7B
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 019A51BE8A0917D6F548AF6EABFB8A788B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number: 144E
Signing time: Wed 05 Nov 2025 02:00:32 +0000
Manifest this update: Wed 05 Nov 2025 02:00:32 +0000
Manifest next update: Thu 06 Nov 2025 02:00:32 +0000
Files and hashes: 1: 5r4roNSh8TWW8XLP5gLpTUYEtC8.roa (hash: AktxI+V17na/V+Hz9k9ha+hVm279Tijdqa0CvwmI/7Q=)
2: Gxhnb8KOTrVvxDF8yuKOv2GjqtU.roa (hash: QO/QE2IRS/pPOvcN+3PpcsYmJwErYvPF742Zst4rEP8=)
3: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: iwRVaVZmCwMBLfKYhKLIu/5erz7H5j2ni47d4g3X8j8=)
4: TtvNTrhsW3wjOkk9eOHVRXZxsEg.roa (hash: gPmUeUcfbob5JNxYnTxCOkrudyCPlteleGt+PSj2/00=)
5: ekdDszvqGt_eJ_hGO_xIWYzbzAA.roa (hash: zqr+o3bWODGGGIrhIMHHh91Y/JEASXYkOBODwzmfRz8=)
6: iIQaeGWo37d4w_fiU_R29carNk8.roa (hash: FbNS7L7XPQULlvHXJ6Yq35UuABtJRjSmhRiCGjDk29Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:8a:09:17:d6:f5:48:af:6e:ab:fb:8a:78:8b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Nov 5 02:00:32 2025 GMT
Not After : Nov 6 02:00:32 2025 GMT
Subject: CN=b095adf102a13a174014ff2ec414c403eb916a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:64:c8:fd:e4:1c:00:ae:b5:3b:49:d9:02:
05:48:c2:03:3b:81:dd:d3:63:11:d9:71:11:60:ef:
58:03:ae:1d:72:75:2e:2e:64:d7:29:98:5f:2d:83:
52:93:41:a3:35:f6:2d:e9:34:e6:10:4f:51:15:05:
e2:87:57:d4:7f:51:94:45:c2:7c:14:b8:16:1c:48:
60:92:41:b9:40:5c:3c:30:44:21:b8:37:a6:66:3d:
49:b9:e7:39:f3:69:86:9c:77:75:da:c8:1d:05:a5:
7a:67:40:ea:79:5c:57:25:34:a5:38:ed:93:c0:eb:
a0:c8:25:79:48:e2:b8:d7:55:6d:7f:2e:ee:b7:ed:
bb:54:4f:c4:e6:8c:75:5a:d6:c6:59:85:ed:3e:e3:
15:b9:dd:1c:6a:f8:8f:ce:ee:75:71:7f:ed:d2:4a:
34:d0:32:ef:3a:0f:c4:f3:00:ed:b2:bc:9c:fb:5d:
b6:d7:48:1d:66:14:95:78:81:54:b8:a2:b4:e4:1e:
26:9f:5e:31:4a:87:49:a6:96:cc:4a:63:45:35:54:
74:1a:55:03:a3:fc:97:37:c1:01:db:39:af:93:0c:
62:ac:51:df:18:f6:24:da:d7:79:0b:e7:5f:b0:64:
ad:77:95:03:52:8b:d7:9a:34:47:f8:9f:5f:94:09:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:95:AD:F1:02:A1:3A:17:40:14:FF:2E:C4:14:C4:03:EB:91:6A:7B
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bc:82:af:27:9b:21:60:72:32:50:b2:38:88:f5:2c:e4:03:
06:37:08:99:f5:61:8a:8b:a1:3b:cf:22:90:57:b9:d2:d3:b1:
88:25:57:fa:7f:8d:52:7b:13:04:46:e4:15:39:41:4b:48:61:
3e:fa:d0:4c:9d:8b:09:69:cc:a9:ac:2f:77:b8:9e:66:ad:c1:
80:ff:81:9d:d6:05:be:46:44:24:91:0d:7f:f7:dc:31:fa:43:
b3:f2:e0:0d:82:bf:17:f1:ed:61:ce:bc:7b:c8:0c:23:14:56:
5e:3d:be:6d:aa:8f:dd:a9:f8:81:9c:1e:2a:c0:b4:84:0d:f5:
22:5e:41:1e:7f:0e:2c:9a:68:6b:7d:b6:e7:a1:de:3f:e5:a4:
fe:83:c5:67:90:0c:c7:52:e0:ab:f3:67:3c:8c:b2:a6:e0:89:
49:35:56:64:0f:4a:76:81:1f:ff:09:04:0c:07:3b:fe:7f:25:
aa:3d:b4:2e:85:d9:e6:f9:fd:c3:de:52:0d:cd:18:fb:41:53:
75:9d:68:f6:87:e2:f3:05:6f:5c:7b:6c:f1:31:bb:3b:34:b1:
ad:49:7d:1c:9a:86:3b:e5:f4:01:0f:60:ab:97:2c:3c:9c:c0:
cb:6d:36:03:e0:53:e6:b2:e4:5c:c9:b6:29:f5:e7:0a:dd:7e:
22:4b:ae:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:50:00 2025 by rpki-client