Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: 0eXCjYCSYGWtul/xwOV69Cq4dZaz4RPu8IQFvxmxo/g=
Subject key identifier: 15:E8:B1:27:D2:36:B8:BE:69:06:13:FE:67:F6:74:F6:9A:F5:37:33
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 019A4F62D3EC33FA714C2685A549E36A0B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 15:01:08 +0000
Manifest this update: Tue 04 Nov 2025 15:01:08 +0000
Manifest next update: Wed 05 Nov 2025 15:01:08 +0000
Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: 2UFWQyqVKz2SX3xiLVw3KRRl36FWnzQDK2q9XsKbTDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d3:ec:33:fa:71:4c:26:85:a5:49:e3:6a:0b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Nov 4 15:01:08 2025 GMT
Not After : Nov 5 15:01:08 2025 GMT
Subject: CN=15e8b127d236b8be690613fe67f674f69af53733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:42:18:4e:49:58:aa:84:98:5a:c6:54:5f:
b9:35:70:49:35:48:71:f4:c9:a4:29:71:88:c1:ec:
a4:67:ad:40:bf:28:3e:e7:82:f1:bb:41:b6:42:ce:
30:9c:9e:f7:77:15:c5:a1:fe:68:46:f7:35:5f:40:
83:78:28:07:61:b3:4b:d2:8e:27:1a:a5:b4:f2:05:
79:8e:f1:69:7f:63:c7:4b:ce:e1:15:29:59:b9:94:
a9:fa:f6:51:88:8d:f7:da:fa:a6:e1:6b:08:de:ce:
3d:ad:02:30:00:fa:bb:33:73:98:c7:50:d1:76:80:
72:5c:52:82:a0:c7:5e:2a:0d:b3:08:14:1b:5b:98:
be:38:e2:71:a0:08:71:57:f7:a6:c8:83:3b:36:29:
bb:1d:8d:f1:4e:15:93:e3:fa:b4:a2:48:3a:4e:c8:
5c:d0:97:8c:6f:1e:70:ec:f1:11:d7:3c:96:8c:c9:
ca:44:78:ca:4d:8c:bf:d3:b6:f8:00:d4:df:f4:18:
51:c6:39:1b:05:e7:8c:5e:5c:ce:d0:c5:c4:44:15:
a2:b9:b0:9c:06:4c:e2:e6:4e:88:dc:0a:ec:fc:c5:
79:ed:53:71:2c:78:80:c1:71:6d:e7:23:ed:16:1a:
54:d1:90:b5:c5:6c:78:d1:7a:21:cc:0e:cc:78:3f:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E8:B1:27:D2:36:B8:BE:69:06:13:FE:67:F6:74:F6:9A:F5:37:33
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:02:42:4f:7a:27:27:cc:98:31:e4:4f:ee:e8:80:7c:65:b7:
d3:91:a3:79:99:98:8e:43:2f:9f:d5:8b:d6:8a:35:63:15:b8:
0e:f6:d9:12:46:f9:3a:cf:e1:53:30:fb:64:02:32:40:f1:64:
f0:a0:0c:0a:be:15:88:8d:7a:3d:b3:eb:06:e7:48:43:f0:db:
7b:a7:60:93:b3:2b:72:f3:c3:3f:f5:8b:28:70:9e:8d:9a:0a:
9e:87:d2:9e:d8:1a:51:ba:3a:5b:c0:cd:69:fb:fc:43:2e:f3:
22:b0:c9:84:62:3b:6d:30:32:ff:b8:39:10:56:6c:37:2c:02:
e8:02:4e:ff:d5:61:0a:d6:95:77:c0:7d:4d:a5:35:dc:04:a6:
eb:3c:45:e4:dc:e2:3c:a2:fe:be:71:e7:06:c0:2d:45:4d:21:
8b:f9:93:42:61:6d:b1:77:0c:3e:05:df:5c:30:ea:9e:45:a6:
b4:5a:ca:a2:bd:86:8e:da:a8:e1:0c:85:7c:e6:22:96:53:35:
a2:82:dc:96:a9:45:0e:dd:22:93:f5:f1:f4:98:6d:14:08:7b:
b9:10:77:a2:8c:6f:2f:61:f8:8b:a6:ce:22:ea:23:9f:53:be:
b2:fb:e5:a2:a8:70:29:a2:8a:8c:38:88:9e:5e:4a:51:41:1a:
f3:61:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:47 2025 by rpki-client