Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
File: kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json)
Hash identifier: AHJPKTpeQsR+WeObrhVCf8P5nDiyp3kJc/Z4YcsVUTw=
Subject key identifier: AC:A2:12:86:F3:9B:5A:35:8B:E0:01:3A:67:5C:98:24:6B:49:CC:A5
Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
Certificate issuer: /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Certificate serial: 019A52D16B22D4183967E27CF3D12C0C639B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
Manifest number: 019E
Signing time: Wed 05 Nov 2025 07:00:47 +0000
Manifest this update: Wed 05 Nov 2025 07:00:47 +0000
Manifest next update: Thu 06 Nov 2025 07:00:47 +0000
Files and hashes: 1: Hma6GYWs5Tdom6T2R14STXiUtLo.roa (hash: nzMAO+8FCPXY1wL1mWVZEzCo6GePIs/i8E7UJEjZ+GM=)
2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: WJ4rZLihZuvHeSHphwEjQBGjuV8nn75vI9VAo40/LZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:6b:22:d4:18:39:67:e2:7c:f3:d1:2c:0c:63:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Validity
Not Before: Nov 5 07:00:47 2025 GMT
Not After : Nov 6 07:00:47 2025 GMT
Subject: CN=aca21286f39b5a358be0013a675c98246b49cca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f7:17:d9:80:38:17:fa:10:c9:47:bd:ff:d7:
8f:18:08:76:a4:fd:19:25:8f:bc:55:8c:e0:30:ba:
9c:bd:3c:ef:5d:f0:34:98:ed:3d:ca:f1:b0:e5:99:
25:b3:2a:5f:d3:3e:02:cd:5b:f2:26:53:d8:d5:b8:
d6:92:b4:58:32:4a:4c:7a:d1:0f:da:8c:22:53:6d:
c4:80:c2:ae:42:30:cb:b4:17:76:6e:fd:5a:94:c1:
7d:32:58:7b:45:5a:30:d5:d9:e8:d7:81:ba:95:5b:
2e:41:c7:41:91:8b:a8:58:fb:d1:d2:c4:be:ee:2f:
b6:c0:fa:ec:f5:09:67:d3:d8:e9:e2:58:07:29:7f:
63:7c:07:9d:e1:c0:da:82:25:ad:9b:60:77:08:91:
b2:63:55:ab:b9:79:a3:04:12:00:5e:bb:f3:24:8f:
a1:e5:a0:07:2d:d1:c4:5c:05:de:e6:c7:7e:cb:6e:
20:3e:26:5f:81:f2:14:72:f5:03:f3:d6:2a:f9:e5:
ab:92:28:84:60:81:a8:8e:c5:4b:2d:4f:6a:a8:36:
c4:04:17:84:5c:d0:08:3f:38:15:c1:c7:a1:67:c0:
a7:8e:de:95:38:df:05:9c:dd:eb:55:18:ab:05:86:
8d:f4:3d:b7:11:cd:1e:2f:d4:7b:73:8b:5e:ed:ad:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A2:12:86:F3:9B:5A:35:8B:E0:01:3A:67:5C:98:24:6B:49:CC:A5
X509v3 Authority Key Identifier:
keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:10:f6:32:09:5b:b3:24:83:6a:d3:24:14:11:2f:7b:0c:31:
16:3b:19:e6:fc:d4:51:0a:22:31:8b:89:b5:c4:cd:3c:12:3c:
db:22:7d:9f:28:39:00:87:e6:40:75:19:e2:24:1d:3a:f4:1f:
b4:51:f7:72:ec:33:61:ce:ce:5e:19:a8:d8:9e:42:8a:61:70:
0f:98:f7:42:b3:46:40:e8:f1:10:fd:15:fc:03:8b:24:fe:0b:
dc:da:4c:1c:cc:ca:c6:e5:10:45:4f:d9:58:54:2f:e8:9c:1b:
17:3a:87:40:26:bd:24:f4:41:75:89:29:9e:67:06:61:5e:0f:
d2:2c:93:76:88:97:81:cb:b6:31:1e:7e:fb:d8:42:7b:4e:e1:
19:b5:1d:b0:3e:55:55:56:68:6c:f2:37:fb:37:7f:dc:88:15:
c2:38:e8:22:20:d3:16:39:5b:ad:7e:52:60:c5:24:90:ca:f4:
7a:15:46:eb:71:72:5d:d2:4c:a8:76:70:14:d9:10:80:c2:79:
6d:ce:a3:51:dc:3a:74:63:c3:9e:90:05:ce:84:df:2b:d2:58:
e1:a5:9f:35:16:16:fe:65:53:89:ea:1c:6c:67:8b:56:41:46:
d6:ae:09:ec:41:bb:3a:fd:a8:90:41:37:5c:70:2a:9e:dc:3b:
c4:03:27:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:45:13 2025 by rpki-client