Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json)
Hash identifier: xB2c5bQhbFW3a9sOckRREmwZImLvWRAGCYBI8dWhjBI=
Subject key identifier: DD:19:8C:47:31:41:56:12:EA:08:06:A2:16:8B:9F:55:C9:C3:2B:84
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 019A4EF5257C039431002AD79EEC257B0DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
Manifest number: 1517
Signing time: Tue 04 Nov 2025 13:01:20 +0000
Manifest this update: Tue 04 Nov 2025 13:01:20 +0000
Manifest next update: Wed 05 Nov 2025 13:01:20 +0000
Files and hashes: 1: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: kZIQ4dIJxnZd2ZIqGceng1JybBo/GxCWZ5sHH2Y1Llk=)
2: Mk8AMLQRC0TMSZEM9wRPKQe_rUI.roa (hash: kj/bATPWc6gsPOSTnqsvTyx2Cven+aKMOotd9KFucsg=)
3: U1IJdlbbqYMq74Zgnki2ng7hcKM.roa (hash: 9WBhhRCHZxnvz9Na6TAE6zXjUSCL0zXJBZDCKRLKqvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:25:7c:03:94:31:00:2a:d7:9e:ec:25:7b:0d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: Nov 4 13:01:20 2025 GMT
Not After : Nov 5 13:01:20 2025 GMT
Subject: CN=dd198c4731415612ea0806a2168b9f55c9c32b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:51:d1:92:a4:22:11:e7:27:38:4d:ec:4c:
5f:5f:53:dc:56:9d:5d:07:a9:00:38:fe:21:89:98:
07:a5:0c:df:17:09:91:2c:52:e9:fa:f9:68:8d:31:
18:a7:66:64:9f:11:b5:f8:fa:34:03:c5:1b:eb:00:
18:6b:eb:f5:d8:7e:68:98:c3:03:f9:1b:d1:02:b0:
b7:20:5b:3d:61:4f:a9:dd:1c:e1:c3:b3:1b:00:7c:
41:19:07:27:ea:88:b4:83:c0:7c:59:fb:f0:82:0d:
ed:70:63:3d:cd:c8:71:cf:88:6e:6e:e0:2c:46:4c:
c0:d6:cc:dc:84:42:75:40:b6:16:7f:4a:e6:d6:ef:
9a:b5:d0:ad:41:92:63:b3:d7:f7:5c:a8:01:53:89:
f1:44:09:b4:cb:61:df:7a:f4:09:7f:fd:3d:60:2e:
0e:50:ea:42:5c:cb:92:4e:4b:10:4a:37:3f:6d:eb:
75:60:45:51:f7:0c:17:4c:17:87:eb:5c:f9:fc:6e:
90:68:41:28:d1:cf:40:d5:c0:af:b8:85:dd:ca:86:
5e:07:cf:b1:b0:a9:9b:06:d0:a8:23:71:a0:52:2f:
ae:db:86:71:7d:22:17:ea:89:2f:57:0b:87:31:5a:
a5:e6:91:65:ab:29:3f:a7:f0:2a:19:d6:8c:5a:42:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:8C:47:31:41:56:12:EA:08:06:A2:16:8B:9F:55:C9:C3:2B:84
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c3:31:2b:8e:55:cf:c9:36:e1:2b:db:0c:9d:c1:00:f6:84:
15:a7:0d:1a:51:3d:3f:88:35:fb:30:cb:90:bf:05:70:4d:31:
42:b9:e7:1d:a8:28:ca:fa:fc:ec:c6:d8:05:1f:f3:ed:c1:64:
1d:ab:c1:6e:d3:66:17:04:51:f9:c9:2a:f4:81:f9:d1:ec:21:
da:de:52:50:f8:51:d6:0a:57:f0:22:2e:27:a0:75:ac:00:85:
20:3f:69:d4:0c:11:f7:99:fe:ea:5e:4b:47:e7:89:88:49:ba:
6f:12:18:8b:c6:58:8f:19:cf:45:6d:9e:9d:08:83:fe:61:35:
de:8d:92:f5:66:aa:a1:6a:02:fe:e1:12:94:d3:85:02:20:1b:
cb:61:73:7e:88:ca:3d:d7:c9:16:60:05:bd:bd:16:8a:ff:f3:
23:42:f9:22:3a:9b:eb:ae:d6:d5:18:f8:f0:01:c4:94:da:ca:
eb:5f:59:50:71:60:71:bc:8c:7d:0a:75:2e:7b:3d:83:ca:73:
e3:9e:17:89:90:a3:86:ee:98:1d:15:ff:40:20:fb:50:b2:48:
5c:cb:18:34:08:9c:b6:2f:39:b4:c0:59:44:84:24:8c:b8:8c:
a3:f0:a4:13:98:2e:56:07:14:71:21:39:bc:ed:d6:20:46:b7:
a9:83:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:29:18 2025 by rpki-client