Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: 2CeOB79wQxzGsoJHSqAkE1IRwMg8gMv1AKPqJe4qV5s=
Subject key identifier: 27:62:5C:55:77:30:C3:AC:A6:57:37:79:D3:4D:D0:BD:92:58:2B:1B
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019A52D2B7C6B027AB4C19C262493008CB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 06CC
Signing time: Wed 05 Nov 2025 07:02:12 +0000
Manifest this update: Wed 05 Nov 2025 07:02:12 +0000
Manifest next update: Thu 06 Nov 2025 07:02:12 +0000
Files and hashes: 1: fIvnp6gdPn80_yvJlotdGcog18A.roa (hash: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: iyYEepN8RAEC1KeeYpG6AxY9Y6C93GBHlnnROJCvsdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:b7:c6:b0:27:ab:4c:19:c2:62:49:30:08:cb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Nov 5 07:02:12 2025 GMT
Not After : Nov 6 07:02:12 2025 GMT
Subject: CN=27625c557730c3aca6573779d34dd0bd92582b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:05:69:0f:5f:fe:06:83:8f:65:65:f6:de:
c0:6d:d1:5c:cd:7a:7d:23:6a:eb:dd:d2:12:61:ba:
0c:d2:f7:0e:a8:18:2c:3f:0a:d4:5b:94:f4:fa:49:
7a:86:5d:2d:62:cd:f8:b8:ef:f0:22:6d:5b:b5:ed:
58:d1:05:c8:c4:42:df:14:1c:3a:2b:5b:65:09:fd:
04:0f:70:d7:fd:65:ff:7b:19:53:af:3e:1f:33:e9:
e0:7e:dd:9b:60:6b:7d:c8:3d:5c:c5:d6:0c:96:af:
1f:99:37:51:a1:9a:82:8a:35:31:65:e3:02:d0:e3:
47:4f:61:ce:18:48:df:06:d6:11:bd:d2:0b:92:af:
d1:dd:2c:27:2d:31:05:60:1c:9c:f4:05:78:ab:c0:
c1:77:86:ed:84:c0:49:62:fd:3b:20:c2:bf:ac:0e:
08:6a:1d:97:73:d8:d9:35:e4:b2:e3:48:e2:9a:41:
c1:5e:8f:7e:40:b3:a0:c0:fc:8f:da:a4:74:78:3e:
2e:18:50:9d:78:91:11:b8:14:95:05:ec:77:ab:d5:
e7:c3:8c:5e:53:2b:e6:f6:e0:2b:61:a1:13:d3:41:
d0:7c:f0:14:f0:6a:06:69:05:0f:cd:4b:d5:75:8d:
b8:52:bb:43:d5:d0:1f:67:2a:b4:54:1a:c3:23:21:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:62:5C:55:77:30:C3:AC:A6:57:37:79:D3:4D:D0:BD:92:58:2B:1B
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d4:83:0a:9b:7b:78:2d:ce:88:9a:eb:3b:30:33:9f:b5:d4:
21:d3:d2:d8:12:f7:74:63:b9:b3:f3:be:7a:57:07:09:4f:32:
e9:0c:cf:cd:42:0d:f0:11:a4:58:55:f0:71:ba:d1:53:9b:5d:
9a:b4:8d:fd:da:b3:f4:7b:70:1d:8a:87:2e:23:e6:65:c1:da:
01:b0:c3:d2:82:89:d6:40:bf:84:45:4a:ed:38:91:9d:e8:96:
e4:c8:dc:27:88:d7:4f:f0:ed:d3:e6:60:d7:91:ea:e8:09:12:
74:b6:23:07:9d:2d:83:ae:bf:d5:8d:2e:2a:67:dd:2b:9e:d1:
4f:00:6e:11:e5:6b:b0:67:62:61:85:cf:d6:ac:10:fe:46:e6:
39:62:6f:32:c6:db:a5:7e:64:fa:95:ce:21:25:68:c8:a0:1b:
58:0c:95:0d:83:6a:6f:9a:6b:89:ad:7f:f5:4f:b1:60:96:ce:
5b:71:63:b6:fb:5c:f7:4b:8e:d9:30:53:fb:cc:d0:19:00:5f:
15:20:39:ad:9c:d8:c9:2e:86:45:e0:5f:47:f0:3e:04:0c:61:
b5:1d:83:b2:9f:d8:27:bd:04:54:b5:45:00:42:ee:bf:9b:6b:
ec:95:35:22:4c:af:71:6f:f5:9b:b8:ef:f8:54:30:c1:e0:27:
3a:8b:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:40:28 2025 by rpki-client