Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: Mk/fNDaVZFRCpZau+nBQcJ3gJvCzAH9eNVFZHCCg8ZM=
Subject key identifier: C1:31:6D:3F:20:04:AD:D6:67:03:62:D5:F0:88:CF:36:D8:A3:9F:49
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 019A4FD05356980C5EABB3C03206144D75E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 0F1C
Signing time: Tue 04 Nov 2025 17:00:44 +0000
Manifest this update: Tue 04 Nov 2025 17:00:44 +0000
Manifest next update: Wed 05 Nov 2025 17:00:44 +0000
Files and hashes: 1: TYH4Ce0-k-wvqgRH0i5li3BgriI.roa (hash: Q3Et9vzkH2i83UUu897K4DdPhoe5uvwQSHH8BVd+9Y4=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: UqkroFGCmZSbrAOeSigyJ5RBV80FgvxNRCh9FbaNyIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:53:56:98:0c:5e:ab:b3:c0:32:06:14:4d:75:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Nov 4 17:00:44 2025 GMT
Not After : Nov 5 17:00:44 2025 GMT
Subject: CN=c1316d3f2004add6670362d5f088cf36d8a39f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:be:1e:53:bf:a9:f9:79:4b:fb:46:25:0f:
42:f6:8a:1d:e0:19:6f:0b:5e:77:69:76:fd:81:36:
f9:06:fe:e2:e8:a2:01:fd:28:8c:88:7d:d3:b6:cd:
7c:74:99:8d:6a:0f:09:38:10:cf:42:d1:81:3f:17:
88:5a:d1:0a:7b:c0:4f:4f:17:aa:99:b1:89:44:cf:
21:7a:ff:21:9b:9d:10:f3:63:9d:e8:83:31:4e:42:
ad:46:72:fa:b1:40:99:1b:dc:61:60:dd:0a:d3:5e:
e8:c8:6f:eb:74:1c:ad:7f:1d:e6:ae:26:e5:e3:b5:
bc:e9:a3:8a:3b:09:c1:00:b0:34:e2:36:8d:d0:47:
54:a4:57:6c:5a:7c:fd:72:75:65:74:82:5f:ac:0c:
a6:e9:c3:be:28:0b:3a:2e:07:05:0b:94:a6:c3:00:
ed:6d:e8:05:44:f1:51:cf:00:ae:d2:13:e7:77:e3:
37:66:8b:cc:8d:18:eb:18:d0:7c:38:06:bb:4f:57:
0f:25:8e:a2:e6:96:4d:8c:bc:e0:86:34:22:24:e8:
b8:e3:ad:b3:a7:36:79:45:0c:a0:8d:97:81:43:f9:
98:35:e5:f8:e8:b7:81:af:83:58:f2:bd:2b:1d:5c:
46:c5:6e:bd:58:6a:f1:17:02:30:88:d1:71:b6:e6:
51:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:31:6D:3F:20:04:AD:D6:67:03:62:D5:F0:88:CF:36:D8:A3:9F:49
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dd:b8:0b:9f:48:dc:e8:08:3d:23:8e:5d:0c:b9:22:20:98:
81:43:a0:b1:0c:c1:70:71:80:93:24:84:1b:ef:75:d3:99:f3:
26:30:eb:7a:82:a0:f7:6c:b8:9b:f0:10:e9:06:08:54:03:73:
b7:a8:21:29:19:3d:6b:13:57:df:32:e4:a8:0e:b1:ae:ee:45:
28:4c:66:2c:a2:91:ca:8f:74:c0:9c:9f:d9:44:62:37:de:1b:
1d:f3:fc:d7:0d:3b:4e:12:5b:70:2d:88:45:ad:c8:a5:9c:0b:
14:0f:f3:2e:6c:9f:30:15:19:d4:dd:71:33:29:f1:30:ee:5f:
22:0d:95:ad:1f:05:61:f9:cf:28:8f:8f:e0:5f:ae:52:28:18:
a8:af:cb:f2:13:d1:b2:cc:d8:13:7f:98:fa:4f:1d:db:53:e7:
64:ad:1b:aa:33:f8:c5:e1:f2:b0:aa:13:74:2d:2b:32:47:fc:
60:b8:e4:81:f6:bc:2f:24:11:76:eb:20:41:4b:39:de:da:c1:
da:69:21:e3:d4:ad:2e:bd:4e:91:a1:ff:a5:bd:4a:73:92:71:
dc:89:43:3f:9c:16:95:c6:2e:d6:b2:7b:20:b8:39:d2:01:26:
66:1e:20:ac:af:ea:42:35:c9:e0:e5:88:35:36:c6:75:4e:08:
98:f4:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:22:18 2025 by rpki-client