Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: LPVidfPxj9gRhBNDSPtNm6TU7QmO9uiTi/ST1g1aSi4=
Subject key identifier: E5:C1:8E:78:01:0A:B4:2E:79:A3:B7:78:4A:5D:2A:55:8C:CA:8E:3A
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019A4F2B3F21FF7E196A362EB52A64310FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 12D0
Signing time: Tue 04 Nov 2025 14:00:25 +0000
Manifest this update: Tue 04 Nov 2025 14:00:25 +0000
Manifest next update: Wed 05 Nov 2025 14:00:25 +0000
Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=)
2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: BTDQGKMQgJrNm7ufDAzU04XDAW5VnhME4wrEk72Ok9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:3f:21:ff:7e:19:6a:36:2e:b5:2a:64:31:0f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Nov 4 14:00:25 2025 GMT
Not After : Nov 5 14:00:25 2025 GMT
Subject: CN=e5c18e78010ab42e79a3b7784a5d2a558cca8e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:cf:c4:bf:e7:99:35:f9:f8:04:70:79:c2:
f2:bd:be:37:11:0a:9f:d4:23:1a:8f:26:38:e7:08:
91:eb:bc:e9:37:a2:00:08:75:c9:2d:70:0f:4b:cf:
75:f7:dd:35:8d:c0:2d:57:bf:b8:ec:20:2f:10:3d:
97:00:72:6b:c7:09:88:9c:d1:64:3a:ef:a2:16:0f:
3d:60:dc:a3:d1:81:a2:ca:0f:41:14:ac:36:c2:b9:
79:ab:76:ba:69:00:56:4c:18:71:34:ae:48:53:00:
be:ec:70:6b:b3:11:ae:a8:ff:b2:e7:77:ec:05:40:
5c:18:92:39:a3:0c:f9:af:d8:63:3e:4b:f2:a3:61:
6a:af:86:ca:13:57:86:87:b7:d1:d5:fe:a8:02:c6:
d2:98:01:31:7e:92:d1:60:44:d8:76:ea:33:c8:01:
15:86:c9:54:53:9f:10:0c:26:80:12:4d:35:64:45:
bf:1e:69:5d:1c:c9:8d:4f:f0:a2:20:1b:8d:9a:47:
63:77:70:d6:b7:83:5e:1e:e6:87:0d:85:54:ab:6f:
71:97:3d:70:69:55:2c:f3:94:ca:2e:90:55:19:f8:
bb:a7:de:e8:b3:0a:27:5a:6d:61:2a:fb:63:01:b8:
83:b9:85:4b:29:85:9f:8f:88:7a:c6:c8:eb:df:a7:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C1:8E:78:01:0A:B4:2E:79:A3:B7:78:4A:5D:2A:55:8C:CA:8E:3A
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9a:eb:84:83:f1:73:bf:d2:31:1f:67:e4:7a:43:ef:bd:3f:
07:19:9b:d7:ce:fc:17:73:d2:45:52:8f:12:3f:fb:63:57:07:
0e:59:79:17:7a:59:2f:fa:c2:18:78:14:18:e8:83:c9:1f:b3:
a8:f2:d7:6b:fb:44:4d:cc:3b:77:20:23:bb:dd:1a:89:8d:a6:
46:61:e2:78:ef:b5:72:ea:73:49:f9:82:dc:c3:36:fe:09:d3:
0d:44:23:2e:3c:f5:a7:86:71:05:01:f6:14:9c:56:0e:14:89:
44:e8:4d:43:7c:cc:65:76:08:90:0e:ab:b0:00:a0:cc:c0:b7:
f1:e1:7d:7a:86:b0:8d:aa:5d:e9:9c:5f:f3:71:9f:8a:7a:72:
e1:d1:2f:5c:37:6c:3e:65:40:08:30:99:22:6c:ca:f0:13:d3:
7b:25:8a:78:7a:98:33:33:48:43:37:3e:8a:72:1c:af:4c:f7:
f1:83:3c:61:fa:81:46:7e:42:28:65:18:cb:fc:40:48:d6:40:
f1:86:20:c9:f2:d5:2e:b1:8d:91:d4:22:ce:d6:dc:ec:49:be:
ee:24:48:1e:79:b1:fd:8a:a9:0d:b6:40:50:72:5c:64:0d:db:
14:ae:27:55:63:6c:92:81:64:3f:e1:67:e8:0a:30:05:b6:83:
30:27:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:35 2025 by rpki-client