Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File: kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier: 7qC0oujizTM49YpFYrANG/WK/un0m9jhs9Thu/p7C4c=
Subject key identifier: E8:76:BC:C4:E3:1A:22:35:C5:DD:D7:F6:73:5F:6D:65:44:85:0E:2C
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 019A4CCED136EE0131CBFF3E2AFDD0995A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number: 131C
Signing time: Tue 04 Nov 2025 03:00:13 +0000
Manifest this update: Tue 04 Nov 2025 03:00:13 +0000
Manifest next update: Wed 05 Nov 2025 03:00:13 +0000
Files and hashes: 1: 1-5GxKRvo6BkB8tOCC2qIupzK7io.roa (hash: 2II6H121oOCvXH+WhyfO5QhchJoUvGMO9QzyXZfIQPo=)
2: WvlZiKlby6mz_WZr2UVe0cYuFc8.roa (hash: Y5kWltccMkWlbHWE6g816b2afq8ovZonUhJQEFz4q4A=)
3: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: UyIKoyC1hzsloHGm4rx6+GJV0OfrYMY9OiZmT2f7eko=)
4: uYHKtKuRAQeHOfD7lB4qDgo66SU.roa (hash: t+Ob5Y5NgLCxa3TxH9Z/GTAtTAwcsjfnwDTYcaden8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:ce:d1:36:ee:01:31:cb:ff:3e:2a:fd:d0:99:5a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Nov 4 03:00:13 2025 GMT
Not After : Nov 5 03:00:13 2025 GMT
Subject: CN=e876bcc4e31a2235c5ddd7f6735f6d6544850e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:1f:bb:ee:14:1b:1e:e3:5a:b0:0d:1a:23:
bf:05:6d:c5:ea:61:91:58:ec:48:9c:1b:dc:a5:42:
63:ee:e6:5b:b5:66:4f:ba:b1:b7:2c:9c:b6:e3:11:
98:a0:0a:2a:6a:70:30:d3:fe:74:09:21:26:1f:8d:
82:4f:7c:d3:7a:a2:53:7a:7f:91:73:a8:7c:65:2c:
22:21:0d:84:7e:54:4f:2d:7e:f5:e9:81:40:2d:43:
cc:38:e6:c5:66:a4:b2:ad:7f:b7:39:e7:d6:9a:a3:
1a:43:3d:5b:4a:53:50:b3:d9:81:d1:eb:27:3f:77:
97:fc:e2:cc:3f:57:4c:47:45:8e:e8:87:88:98:ca:
13:26:3b:c8:57:02:1c:f5:81:43:4c:3b:b0:48:c0:
70:f3:b7:d7:8f:e5:30:19:e1:9c:8a:5c:cc:91:2d:
10:d5:b6:93:d3:ed:9d:34:8e:77:94:2e:84:92:6b:
8d:eb:1c:9e:45:65:be:8a:a7:f2:5d:f4:b2:8d:fb:
3a:2b:e2:f5:3c:62:08:87:9a:91:94:3b:a9:3a:14:
98:ba:3f:65:cf:a9:fb:8f:fc:3b:13:78:95:19:7a:
c9:45:0c:9e:33:30:c4:4a:4f:7b:b0:4b:06:8d:e6:
0d:a1:80:9f:4a:b1:41:3a:21:7c:52:65:88:c6:78:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:76:BC:C4:E3:1A:22:35:C5:DD:D7:F6:73:5F:6D:65:44:85:0E:2C
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4d:66:f1:20:f5:05:47:48:c8:ae:9a:1d:87:7a:9d:12:ac:
81:98:87:b0:e9:01:58:d3:6c:03:ee:b1:8a:e7:47:98:dd:71:
29:25:8c:8f:4f:ab:fd:97:c8:2b:74:8d:d8:49:4a:3a:5e:2c:
2e:1b:13:75:58:99:b3:49:7c:64:1d:97:33:45:fc:cd:55:51:
6d:ae:fc:d9:54:54:ee:e0:b5:00:e2:d6:d8:85:49:5c:f0:bb:
b9:fa:49:e7:c8:3f:f2:1b:4b:ed:7a:37:51:48:43:cf:73:14:
24:c2:46:a1:0f:e6:de:4c:0b:f3:72:7c:35:f3:61:08:d5:5b:
00:14:27:05:58:78:63:54:c5:9d:8c:3f:20:00:22:6b:80:b4:
16:2a:8f:08:34:2c:23:fd:5c:18:e2:21:cc:7d:74:b9:2b:2f:
5c:67:8f:d0:31:57:22:cf:ee:1a:b9:58:5e:34:5f:72:5a:65:
f0:f5:dd:2d:0e:6e:f0:27:65:4d:a8:f4:85:a3:e2:db:f5:86:
40:f0:ff:4e:86:93:31:e9:c3:8e:57:66:11:77:5a:ac:41:67:
6d:34:59:b6:01:1a:02:bc:8a:ad:f2:36:7d:04:a4:ef:b7:e2:
2a:b4:7d:ec:6d:4f:0a:d0:8a:f0:94:a7:00:8f:d6:40:52:be:
c0:3b:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:48 2025 by rpki-client