Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier: NMEGI28BrajH8vS2zV9xvwQ79ztuAcZfPUgBnMnsXwo=
Subject key identifier: A3:77:A3:6F:E4:F0:1F:40:62:68:7E:72:9E:41:01:C6:36:3D:D8:2D
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial: 019A4D0761CFC8365C2229591389C3C3794F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number: 0F09
Signing time: Tue 04 Nov 2025 04:02:00 +0000
Manifest this update: Tue 04 Nov 2025 04:02:00 +0000
Manifest next update: Wed 05 Nov 2025 04:02:00 +0000
Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: vqftTOJJZ9p4LxcIlcaLCdOneIP3lhGgtOashPuv+rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:61:cf:c8:36:5c:22:29:59:13:89:c3:c3:79:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Validity
Not Before: Nov 4 04:02:00 2025 GMT
Not After : Nov 5 04:02:00 2025 GMT
Subject: CN=a377a36fe4f01f4062687e729e4101c6363dd82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:d1:bd:f5:be:ad:d1:11:4b:31:d8:f9:ac:
1b:74:9f:74:e4:b2:aa:dd:b6:94:b1:1d:c1:a8:1f:
e6:b5:68:c7:51:c6:46:3d:f0:84:7d:d9:fc:b2:df:
fc:a7:c0:a4:50:ec:02:26:75:d9:fc:17:5a:90:eb:
cf:0c:35:12:89:91:0e:6b:61:ca:c6:b8:bd:d5:4b:
96:bd:54:d1:73:bb:61:1c:28:b4:0d:32:ce:80:c5:
5a:b8:55:9a:62:03:a4:ea:04:eb:f5:c7:8c:c4:99:
8f:5e:9f:0b:43:33:bd:65:a5:e6:02:8c:bb:00:ba:
d0:89:58:dc:c9:9e:6a:e3:33:9c:15:71:e6:6a:ed:
b0:be:06:cf:ab:88:3b:54:2b:62:e0:29:3a:70:14:
5e:4d:e9:d5:19:55:f2:d0:a8:97:f4:85:0a:a0:df:
61:67:90:ac:29:ee:62:6f:5f:70:28:90:94:e6:8f:
83:e2:9d:b5:3c:1d:b4:b3:f3:43:94:16:6a:8e:c5:
be:f1:d6:c6:15:5c:9b:a5:19:57:57:11:b5:45:10:
89:9a:9b:0b:ac:8f:e3:fd:a7:94:18:ec:44:2e:7d:
43:ba:f1:86:39:2d:37:3e:55:40:45:ff:15:bd:22:
04:6d:42:e2:17:0c:af:2e:46:24:7a:b2:d6:68:c7:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:77:A3:6F:E4:F0:1F:40:62:68:7E:72:9E:41:01:C6:36:3D:D8:2D
X509v3 Authority Key Identifier:
keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:34:a7:46:3e:11:9f:a8:99:6a:74:8e:5c:c9:d8:b4:5c:d6:
d9:8b:fe:5b:cb:cc:86:25:81:0f:6d:d6:fe:da:68:56:98:b9:
00:40:98:10:5e:8f:f1:6e:15:bc:cb:45:75:c4:39:c8:97:13:
2e:c5:05:4e:fa:89:be:db:94:4f:3f:7c:22:c3:19:7e:dd:35:
7f:57:af:da:f0:9c:eb:47:fb:67:41:5d:08:e8:07:a5:8b:8e:
d0:9d:d8:82:2d:cf:c9:a1:23:b2:27:db:1e:7d:b5:c8:34:c2:
5f:e4:3b:6b:af:72:77:ce:23:2c:3c:72:6d:35:d9:e1:a7:cc:
fe:9f:f9:72:d2:75:55:02:31:db:d6:00:f0:8d:01:66:28:63:
f4:94:29:60:db:a8:7f:fb:a4:95:5d:27:57:13:14:f4:e9:a3:
88:97:49:19:d2:84:fd:54:96:08:cb:f3:99:55:f2:e8:c5:f1:
cf:c8:ea:54:27:b8:2f:a2:94:83:f4:97:0f:5a:0c:cf:09:ee:
d8:d0:ee:0b:09:94:36:35:19:f0:ed:ef:7c:65:52:32:ba:65:
f7:98:82:40:ab:ad:bb:67:61:ca:1a:0a:3a:1c:f1:8d:47:84:
30:76:a5:ce:b1:38:0d:ea:79:63:41:55:39:f0:2d:3c:65:8a:
b7:eb:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:33 2025 by rpki-client