Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: 7fsbPHlxA6WqfHAgdWcBz5X4NrnJOSSHrJBsXYw9IYc=
Subject key identifier: 22:FD:3E:F9:70:DA:25:F8:1E:BB:D3:48:86:08:E7:94:A8:ED:30:A2
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 019A50AB91188D4B0FAEAA442C4E90BF4FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 21:00:12 +0000
Manifest this update: Tue 04 Nov 2025 21:00:12 +0000
Manifest next update: Wed 05 Nov 2025 21:00:12 +0000
Files and hashes: 1: DnNAXyr4mJbh9D2dH8b-Eqlp6x0.roa (hash: cdWRTytNkhNuFkycWb/FtgfNdkALU3YMBn7zWtYw/bY=)
2: Se8nAg0-xrQhHXIbYS2eSChavY4.roa (hash: NDhJCH+ULsr3l5nHLuoOYh5KnKuXbhQ8t+mEi5JVlO4=)
3: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: k8Y5JcxJjWxmaAMbweht3UbXfwPQir77f4odPPHWXM4=)
4: t4twN0aSa0K9eQj9_U5RX1_3ON0.roa (hash: bDhB2OJvqSQD0pWiRQx+Ywx+t/naLGQ733yplp/x/5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:91:18:8d:4b:0f:ae:aa:44:2c:4e:90:bf:4f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Nov 4 21:00:12 2025 GMT
Not After : Nov 5 21:00:12 2025 GMT
Subject: CN=22fd3ef970da25f81ebbd3488608e794a8ed30a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:1f:c0:ea:56:bd:05:a3:cc:e0:5a:2f:7a:
ca:de:69:49:e9:c8:6a:00:5f:a7:07:bb:fb:99:a0:
e1:87:5e:fe:60:a0:17:60:35:11:ad:af:a0:a4:97:
8b:4f:83:3e:46:d6:2e:74:e8:e2:d3:53:a7:aa:79:
45:83:4a:48:80:f0:28:05:21:73:fd:b3:d2:49:c1:
f4:1a:b5:ee:d0:e2:d5:f0:f6:48:38:24:85:ec:6c:
67:c3:ce:99:97:88:f6:60:b6:3b:5e:c5:d3:c5:49:
4c:59:6e:f0:00:54:87:43:61:8a:9d:75:aa:48:c6:
ae:41:2c:47:7f:7c:0f:49:19:8a:f5:c6:82:a1:3b:
d3:1d:4c:91:f8:78:41:a1:8c:6d:2b:ef:1e:58:0a:
9b:c5:87:83:23:f2:61:78:9a:34:d4:bd:2b:44:8b:
e3:9a:69:93:94:6c:b9:9f:14:84:17:3a:15:b1:3a:
b9:6f:58:e0:8f:ef:3f:1a:77:9d:9a:22:a9:f9:64:
e1:8e:e8:68:c4:db:c1:db:aa:ba:0e:40:8e:38:74:
e2:47:8f:9d:5b:e3:d4:d5:db:05:c1:ce:82:da:1f:
d0:15:80:a9:dd:00:c4:eb:43:a0:9a:1e:8a:f9:2d:
2f:f9:08:01:73:a5:f7:e4:ad:29:60:08:a7:63:82:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FD:3E:F9:70:DA:25:F8:1E:BB:D3:48:86:08:E7:94:A8:ED:30:A2
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a5:b4:16:fe:df:31:1b:10:19:36:e1:a7:bf:c7:9f:87:1a:
b6:99:df:0f:c2:74:28:8a:82:68:c2:5b:03:89:1c:fb:e2:65:
38:72:83:42:14:07:15:ef:83:d8:c2:e0:3e:5c:5c:2e:72:26:
27:08:2c:99:53:12:12:89:b7:4e:4a:eb:72:cf:c0:62:38:00:
58:b6:7a:35:3c:4c:f3:c0:a3:35:b4:d5:e1:fd:4d:f4:ac:ba:
c1:7e:78:e4:b8:1a:cb:d2:1e:28:85:4c:36:b1:32:ac:cf:0b:
ac:43:23:f9:e7:d7:88:2d:fd:29:2e:16:af:26:75:14:52:36:
95:4c:ba:94:03:67:d9:0f:ab:9c:1b:77:82:1a:4f:d9:f9:ce:
ba:f3:34:a4:09:dc:74:22:c2:62:91:f3:bd:c7:b1:ea:2c:26:
c7:8e:74:67:49:a9:8d:77:9a:af:26:83:bd:fd:56:48:fc:04:
8f:55:e6:0d:aa:26:ab:83:8f:03:46:ea:7f:32:9d:58:fe:fb:
55:01:4a:62:16:61:bf:76:92:74:12:98:e1:1e:96:ff:4c:c8:
c8:5c:bf:75:a3:c4:e4:be:51:78:13:cd:19:d5:02:a4:e8:02:
5f:5f:bf:d3:32:40:f5:7e:b7:3b:4d:be:4e:ee:46:6b:db:68:
db:ec:68:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:43 2025 by rpki-client