Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: wNHrvAJQ91GFB4Pg8vKEAporVGH4XTgHZwb00Y3b0lk=
Subject key identifier: A3:6A:F2:EF:FB:A3:14:9A:0C:46:B5:B2:FB:5C:30:22:05:4A:57:1D
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 019A52630F0902FEB335E35D473D17B55022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 0425
Signing time: Wed 05 Nov 2025 05:00:14 +0000
Manifest this update: Wed 05 Nov 2025 05:00:14 +0000
Manifest next update: Thu 06 Nov 2025 05:00:14 +0000
Files and hashes: 1: 4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (hash: ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=)
2: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: m/UzdVs8dBy04gaoqmcilUfQDwxHlhr18VXKkrpb1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:0f:09:02:fe:b3:35:e3:5d:47:3d:17:b5:50:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: Nov 5 05:00:14 2025 GMT
Not After : Nov 6 05:00:14 2025 GMT
Subject: CN=a36af2effba3149a0c46b5b2fb5c3022054a571d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:d6:e3:09:3a:e9:ea:db:ed:49:a6:dc:d4:
fc:6a:cd:58:26:d6:ad:03:d0:7f:a7:68:cb:3c:20:
20:74:83:aa:c4:4f:2e:c2:86:f8:52:ad:f0:7b:e3:
c3:60:47:7f:59:87:cc:20:77:79:4b:c6:87:42:a5:
b4:e6:05:79:2a:f5:57:74:f6:8a:ab:ce:79:5e:a9:
52:5c:df:df:f7:cd:93:b3:17:d6:2f:7e:af:dd:e3:
94:10:1f:ce:d3:e4:63:c1:00:12:3e:ec:d2:f8:5a:
ef:69:66:fb:25:fe:0b:64:01:fe:86:70:de:9b:10:
10:96:f4:3f:98:e4:3e:c1:0d:65:e9:06:fb:22:37:
09:08:f7:f2:8d:f7:c6:7b:11:e4:12:15:e3:cd:8c:
f6:4a:10:cd:6b:95:8a:69:1b:5e:0e:2f:3d:32:d1:
39:64:bd:c5:42:d7:d2:5a:ac:7c:e6:30:cc:8b:6a:
d3:c4:6c:c9:6b:15:89:9c:cc:6d:49:86:2b:d4:8f:
5b:9e:d8:f9:6d:56:86:c3:85:24:65:17:76:af:9e:
26:13:c3:34:6a:59:22:7c:cf:89:0e:17:84:5e:12:
09:97:37:30:1e:31:af:3a:81:ec:ba:21:59:8f:b2:
ba:cf:64:a1:b4:eb:52:bb:9f:d8:25:24:d1:5b:90:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6A:F2:EF:FB:A3:14:9A:0C:46:B5:B2:FB:5C:30:22:05:4A:57:1D
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e5:89:e0:ba:4f:12:17:52:9c:af:ca:67:1b:96:a9:b0:5a:
0a:c5:eb:e7:50:7a:a9:1a:d0:4f:88:96:a1:a9:08:91:1b:bb:
1d:9d:4e:db:d4:9f:34:d2:c8:6a:23:a1:fe:bf:17:1a:00:ed:
35:f4:5f:2b:be:87:55:cf:a8:d2:49:8a:df:35:1a:54:6e:62:
19:81:02:a6:20:93:4e:5b:51:30:14:ac:32:b6:3e:b3:db:dc:
d7:bb:88:92:a7:a5:d2:69:62:76:d6:6b:3f:af:4d:88:32:b8:
ac:e5:50:b4:03:84:97:b4:22:6b:5d:04:99:54:e9:b8:83:f0:
34:7a:4c:58:74:99:d2:d8:45:e2:d5:28:69:7d:0a:66:c0:b8:
dc:a7:cc:58:18:d3:28:3d:db:9c:92:2d:95:ec:ee:2c:b0:ab:
a9:a5:38:7e:80:b2:38:d5:1d:24:00:06:44:a1:b1:e9:ab:c9:
db:fc:d6:f7:62:68:9b:11:ab:d4:ce:17:fc:e5:4d:9b:5c:08:
06:64:51:0a:9f:c1:5b:a9:be:0e:3f:24:fb:0a:dc:87:36:c6:
66:21:4a:ef:4d:be:95:0d:e2:e2:c5:89:fb:08:4a:41:9c:63:
66:3b:a6:69:90:f6:67:04:36:b6:90:d0:a2:06:7a:76:8b:8d:
df:96:f2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:33 2025 by rpki-client