Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: QsARXaRDGfDEHNeYyHnyjsjDJ0zdbQwA+PNncv5qYHs=
Subject key identifier: 8D:45:C9:BA:9D:C6:E1:40:AF:49:A6:D1:F9:B2:78:7F:CB:0E:91:A6
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 019A54C0A0895204FF0ED637268177B9B552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 119B
Signing time: Wed 05 Nov 2025 16:01:41 +0000
Manifest this update: Wed 05 Nov 2025 16:01:41 +0000
Manifest next update: Thu 06 Nov 2025 16:01:41 +0000
Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=)
2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: TRnFzzOwU2xrMdw5nXgpV/ft0fOzv35lj4Nu/JJWFtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:a0:89:52:04:ff:0e:d6:37:26:81:77:b9:b5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Nov 5 16:01:41 2025 GMT
Not After : Nov 6 16:01:41 2025 GMT
Subject: CN=8d45c9ba9dc6e140af49a6d1f9b2787fcb0e91a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:e8:cb:a6:af:9c:b2:29:a6:b5:39:d5:72:
4f:a0:ca:cd:1b:04:37:29:32:c9:fa:7b:90:0a:3f:
71:9f:c4:aa:ee:06:32:bd:5e:d5:9e:46:fd:96:f1:
03:c2:2e:bc:30:45:60:3e:b1:0d:69:8f:d9:d3:22:
15:18:d8:e2:91:d5:3c:2c:3a:ec:87:5f:67:47:23:
ab:3e:5b:d2:19:d2:7d:be:8d:55:c1:eb:dd:c0:98:
51:dd:8c:14:66:de:19:d8:f8:f4:cf:66:35:e2:ac:
82:f2:51:66:eb:53:b3:a2:2d:36:74:6f:55:cf:44:
03:d4:60:7c:c9:3f:f4:fd:ce:93:3b:ae:b5:26:6f:
45:64:61:71:68:74:f3:bd:8a:46:59:22:20:56:62:
f7:14:cc:28:d5:5f:ee:2b:e8:58:ec:c2:a3:5c:e7:
23:d4:6b:f5:af:46:39:3c:87:30:c2:66:7a:58:fc:
7c:20:1a:f5:4b:80:a5:e8:57:d2:71:1a:ad:4f:cf:
e0:74:8e:36:4a:df:82:8e:c1:7b:a4:e9:4f:8a:61:
5e:6e:fa:82:b4:b3:67:43:25:24:b3:72:83:ea:01:
8d:18:91:85:46:d3:11:39:f4:e8:f2:a4:df:19:c6:
5f:2d:08:63:73:e6:59:18:91:93:27:e0:b0:91:0f:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:45:C9:BA:9D:C6:E1:40:AF:49:A6:D1:F9:B2:78:7F:CB:0E:91:A6
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2b:31:5d:18:55:4a:31:8f:31:03:f3:10:8b:49:54:6f:aa:
8d:3b:0f:85:f1:a6:ac:3e:4f:64:e3:1a:cb:b4:8e:3e:59:35:
5b:de:63:90:7c:af:b8:c1:92:f8:bd:91:17:15:c0:fc:1f:8b:
a1:4f:61:92:18:2c:e9:47:1f:bf:78:0b:94:08:33:28:bc:9a:
08:05:c2:97:7a:7f:8c:18:78:6b:14:b2:e5:52:45:5a:b7:df:
ff:b5:73:70:c1:b9:07:59:78:c2:de:96:82:83:6d:9e:e1:eb:
87:6b:72:f0:88:87:e5:39:95:ca:22:69:fb:77:4e:46:7a:9c:
28:92:81:cf:de:c5:16:87:18:c1:cd:81:e1:f1:b0:b6:1c:4c:
87:83:ed:a8:0c:4c:c1:b2:cf:ba:64:ee:6a:c7:84:b3:d1:2c:
86:ca:06:78:1e:3b:ba:74:ab:c0:81:84:1f:d0:7a:1d:09:e4:
ce:eb:6d:ca:4f:43:4a:03:39:23:3b:7c:2d:4e:79:83:40:2e:
85:cb:92:80:c3:ea:7c:66:b5:78:cd:25:12:8c:53:2a:b7:0b:
6a:6c:15:9d:e0:76:81:26:12:61:a6:66:b6:74:fb:ca:19:68:
cf:37:69:78:49:a1:87:40:58:89:d0:bb:c1:c3:e2:49:58:ea:
3f:00:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:05:17 2025 by rpki-client