Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File: kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier: Gd1TCTQ+0iDJosk0cggeqQiohgKoAfm9NY/OmuKwLJc=
Subject key identifier: 7D:A0:21:C5:D7:A5:D1:37:26:7D:CB:A2:7A:D4:D5:23:8E:A0:C8:02
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 019A50751C89B5C6B8250908428B8575A5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number: 1671
Signing time: Tue 04 Nov 2025 20:00:43 +0000
Manifest this update: Tue 04 Nov 2025 20:00:43 +0000
Manifest next update: Wed 05 Nov 2025 20:00:43 +0000
Files and hashes: 1: 1-6txeQs5g_33zuSjTCgOD4iIjGM.roa (hash: 0QhFC81+fO/ZdvCBfNNwnivS3ThqNHOEWwldyX4zRQQ=)
2: i9rF_vMQKJ6Idr0l2zV9fG7JsI4.roa (hash: Ym+D0lV82GzeaN5WC17D6hleAFitEdQ3vLzucr/5Qp0=)
3: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: Ab/7eKBpwRnsiHQEixaPDQqX71DCMYFiIhemgA7WTNg=)
4: yCaHWvL_AiksDwFoCiFxm6bABT8.roa (hash: 5pG/4JjPAr+yjin6VDP+CajWtJLqJ6Va//r9XfV+zU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:1c:89:b5:c6:b8:25:09:08:42:8b:85:75:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Nov 4 20:00:43 2025 GMT
Not After : Nov 5 20:00:43 2025 GMT
Subject: CN=7da021c5d7a5d137267dcba27ad4d5238ea0c802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:58:07:fa:fd:b6:a0:92:09:e2:f8:1c:07:
74:59:d2:64:ea:77:33:76:ee:74:f6:f9:c8:4b:66:
55:5f:be:60:39:11:54:ce:d5:13:22:5e:db:f3:91:
bd:21:fd:6a:8a:e5:21:66:d3:dc:04:c5:3e:17:14:
e1:b8:98:8b:48:5a:15:00:56:d7:ad:21:ba:38:ff:
3d:13:88:00:49:62:93:0b:4e:4e:c2:1b:19:93:fc:
b8:e1:b7:89:6d:9e:f4:fa:30:66:c5:e9:3a:bf:34:
cb:a3:b7:da:3f:d1:5c:58:3b:d9:d3:db:95:c9:1b:
0b:af:57:03:56:8a:d2:e7:7a:53:58:87:c4:82:48:
cb:d8:6c:11:df:b1:43:93:35:f9:0b:d0:dc:76:b0:
fa:27:12:4f:36:28:62:9b:29:ed:81:cd:c0:25:67:
b2:ff:16:a0:de:cc:e9:0c:09:a0:82:4c:8b:5f:cb:
b0:48:cf:1f:bc:68:9c:4f:f0:c9:9e:c8:1e:50:c2:
42:f7:b1:1b:e6:b6:3d:11:6c:b2:65:85:08:10:7a:
d7:86:4b:fd:ad:0b:35:5a:d3:9c:84:68:74:01:5b:
3d:f6:bb:3a:b0:ce:64:b6:0f:7e:31:35:db:08:b8:
40:b9:9a:b2:0f:4c:be:8a:c6:e0:cb:d7:d6:a3:1a:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A0:21:C5:D7:A5:D1:37:26:7D:CB:A2:7A:D4:D5:23:8E:A0:C8:02
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a3:2c:72:ce:76:72:40:aa:06:12:55:29:2e:b2:af:89:19:
3a:3c:75:57:6d:93:7c:56:51:85:d8:78:e9:07:5e:d4:6c:eb:
b8:89:65:03:f0:cb:71:38:fc:83:39:44:4e:6b:ab:19:80:92:
f4:d7:eb:9c:7c:6e:c5:ac:8f:61:11:ea:ca:91:52:1a:be:eb:
f1:4f:91:65:aa:d8:3e:27:c2:e9:4e:eb:5e:b8:ef:c5:01:67:
91:fc:c2:e4:2f:cd:5b:04:fc:37:07:35:df:84:cd:8e:80:43:
53:ee:f9:7b:50:91:01:b9:78:de:b8:40:94:bc:9d:a5:2e:6c:
45:78:ea:b8:92:25:5f:e0:b6:0d:ed:55:dc:dc:c8:6c:6b:36:
f3:2c:6b:9f:20:a8:7b:9e:b2:fb:56:fb:59:c1:79:fd:ba:12:
f1:3c:ef:cd:25:82:f8:a1:c2:39:48:95:ee:40:1c:4e:0b:34:
4a:b9:30:7f:ee:38:04:f1:16:7a:3b:83:52:b3:77:8a:46:50:
09:2d:14:f8:99:72:53:43:5f:88:39:59:58:ab:c2:46:80:76:
30:15:e8:9e:25:b2:9f:4f:7f:b4:03:b9:93:da:a0:85:29:33:
ff:7e:b3:78:05:38:21:99:76:fe:9b:76:a2:7a:ab:75:51:0d:
bb:18:16:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:53 2025 by rpki-client