Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: ypcWCa218cprl5ExgtkHDBeZWqWGjkakB7pQ9tRABI0=
Subject key identifier: 14:14:37:19:BC:E1:97:74:8D:CE:EE:D9:CF:90:28:74:3E:C5:25:2D
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 019A4E187EEA4BAEAF3944D0F4E7AC64E569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 05D5
Signing time: Tue 04 Nov 2025 09:00:19 +0000
Manifest this update: Tue 04 Nov 2025 09:00:19 +0000
Manifest next update: Wed 05 Nov 2025 09:00:19 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: BGQfbxagU7qcl5OdEaslkTbmyEM+EkCT1x5I3UasGCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:7e:ea:4b:ae:af:39:44:d0:f4:e7:ac:64:e5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Nov 4 09:00:19 2025 GMT
Not After : Nov 5 09:00:19 2025 GMT
Subject: CN=14143719bce197748dceeed9cf9028743ec5252d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:17:59:5d:c6:d4:2b:71:76:3e:17:f1:6c:76:
65:37:b4:b8:62:43:61:c7:16:b8:3d:5f:93:17:44:
1d:d1:12:15:1f:0f:e5:a2:26:fa:90:96:43:86:66:
89:a2:ab:cb:4e:39:56:55:74:4e:a7:17:ec:f5:03:
ff:c4:f4:a3:58:3c:52:c7:0f:47:c7:e6:40:20:fb:
d4:11:fe:ba:23:04:72:23:99:b8:c5:16:c8:b1:24:
b1:54:43:b5:96:a7:c1:25:e2:fb:61:4f:39:b2:dd:
8c:a8:10:fa:28:c9:b6:a1:53:84:a7:59:ab:ae:bc:
22:dc:5d:ae:80:38:4a:a7:b2:2d:83:46:85:26:cd:
22:33:29:4e:5e:06:17:65:54:de:90:56:58:06:01:
e9:71:b8:b3:e5:86:06:d0:a7:f3:b8:0b:86:39:62:
c5:8c:56:09:73:52:fe:dc:a5:2d:00:5f:f0:dc:41:
e7:17:ee:eb:bb:88:d3:5b:ee:50:1c:d5:4b:21:af:
a6:4e:30:77:97:1e:57:cd:4b:ce:f5:fb:a9:50:64:
01:75:33:e3:2e:6c:e1:20:de:54:a5:fe:74:0c:64:
cb:e0:89:a8:31:d7:de:e2:c9:c1:de:1f:0a:c1:6f:
5c:9f:c2:c7:98:5f:6e:58:71:aa:6e:d1:67:b9:b7:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:14:37:19:BC:E1:97:74:8D:CE:EE:D9:CF:90:28:74:3E:C5:25:2D
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6e:ba:b3:f0:f0:93:61:65:bb:1b:18:1c:f1:c9:41:92:80:
b5:60:00:9c:55:e0:9b:9b:e4:36:f1:56:67:fd:c3:62:83:20:
54:39:62:fd:d5:49:cf:57:06:80:cb:71:26:4a:36:93:8d:64:
37:9b:80:6b:2b:c0:5d:d1:65:08:2f:1b:ed:dc:66:44:66:4e:
93:26:da:a7:82:c7:28:74:19:24:a8:b7:6e:98:6f:41:9b:02:
c7:91:21:0f:7e:29:34:ab:68:5c:24:89:5b:94:3a:ba:5e:6d:
eb:75:00:98:cd:84:10:48:30:13:ad:3c:e1:07:ff:0d:93:dc:
61:82:84:01:96:c1:52:63:b6:e0:80:f0:45:9d:81:59:7c:ca:
ce:9c:2e:4e:ef:4d:6d:1c:5b:04:f1:f1:bc:02:53:d5:7c:9c:
e6:11:3f:35:7a:ac:48:58:53:80:de:b8:f9:23:f8:cd:09:11:
dd:19:04:b0:c3:d0:2a:fb:c2:a9:4d:c1:0e:af:af:6a:3e:bc:
64:80:ad:bb:48:4e:75:d0:30:ed:2d:b6:11:1b:6c:de:0e:a6:
a9:c3:23:d1:9d:fa:94:fc:79:a8:d6:7b:a7:98:ec:86:75:ce:
58:21:93:7d:c8:8c:d6:04:22:7a:35:35:fb:51:19:bf:3b:53:
d8:c6:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:19 2025 by rpki-client