Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: 3F7KJWnA5eLkr4WMxTr2Le7kEzlPYr091IWODShsW6Q=
Subject key identifier: 50:84:D5:98:55:CB:1F:F3:D1:88:93:C2:9C:AF:B9:A0:A4:EE:19:94
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 019A5187E512C1B5D75B88A4A6BCEC9F6F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 172A
Signing time: Wed 05 Nov 2025 01:00:51 +0000
Manifest this update: Wed 05 Nov 2025 01:00:51 +0000
Manifest next update: Thu 06 Nov 2025 01:00:51 +0000
Files and hashes: 1: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
2: anqJ49NaASwaJ_s7wvdwnyeoi7A.roa (hash: tT4VObTQFTBANax7YZ+QGhxAr7cz6xVgJTjgQ2oVs4U=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: HJIiyrHezQ6/zJauYbzkJFhNk3JUcynsIgWTVhvF7Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:e5:12:c1:b5:d7:5b:88:a4:a6:bc:ec:9f:6f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Nov 5 01:00:51 2025 GMT
Not After : Nov 6 01:00:51 2025 GMT
Subject: CN=5084d59855cb1ff3d18893c29cafb9a0a4ee1994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:a9:6b:8d:d1:41:e3:1f:f6:34:59:51:03:
37:55:d3:a4:45:17:3b:5d:a7:29:c7:b0:7f:5c:64:
3c:68:9f:9c:91:12:33:00:ce:df:fb:5b:21:ff:b3:
85:f2:02:93:13:0d:87:97:1a:29:3d:d5:15:3a:df:
05:b6:c4:f2:7c:3e:80:37:ef:bd:08:94:2a:42:e0:
39:f7:8b:78:3f:c6:43:ab:cc:25:60:3d:67:f1:d1:
b1:f4:0d:ab:1f:dd:fb:31:dd:41:bf:42:f0:e4:d7:
f0:2f:85:82:30:cb:46:37:8c:88:19:6e:99:c0:b7:
f2:80:80:bd:8e:12:58:e9:e4:a1:70:5a:df:1c:a9:
a4:71:26:46:a6:bf:ca:34:3c:59:a7:62:2a:e5:11:
ac:aa:80:1f:cb:03:68:ce:b8:5c:e1:71:98:7c:0f:
58:10:cc:9d:ad:ab:40:5e:75:6a:e9:ce:50:19:ce:
9c:35:d2:20:05:fd:69:ff:4f:68:61:8e:16:b1:64:
e5:e8:8a:95:74:cc:28:0b:df:c6:27:b2:4d:34:38:
3c:01:5c:53:c3:9e:3b:ab:99:2a:7d:31:12:17:f1:
c1:f4:fe:20:91:c3:68:de:43:c4:23:83:e4:d8:05:
36:c1:e7:20:55:82:b8:39:24:58:cf:56:cf:86:d4:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:84:D5:98:55:CB:1F:F3:D1:88:93:C2:9C:AF:B9:A0:A4:EE:19:94
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:24:9f:92:71:f1:e4:44:a0:d4:0c:25:72:cf:0a:4b:b7:f3:
c1:fc:2b:1f:32:08:1b:6a:fc:17:68:bf:cc:7a:f6:c7:83:e4:
83:5b:6e:6e:52:97:09:7b:e8:9b:89:75:b2:0f:51:5e:c0:0a:
69:4b:c1:be:a9:e3:68:fa:d8:ac:5a:03:8b:e3:51:c3:e2:df:
ad:92:35:93:8c:2f:ab:85:bc:28:5d:46:a4:9e:90:78:3b:1a:
6b:be:f8:8b:28:97:2f:56:db:3b:b9:94:74:a8:68:4c:cd:6a:
9e:56:79:44:91:cc:f1:d4:86:99:64:84:a3:73:ee:ea:9f:b1:
5f:6f:af:c0:4f:25:0c:f3:49:c0:4e:8f:91:52:fa:9b:0f:fc:
cb:59:95:d4:b8:7e:07:6a:8b:e8:6d:70:54:9d:8d:a9:a8:ba:
9c:f5:51:ca:34:08:eb:93:98:1b:ca:af:e0:6f:f1:50:36:11:
5c:b6:9b:a0:15:50:2b:9a:5a:34:4d:fb:31:8d:9c:7f:08:f1:
1d:90:c7:ba:0c:b9:00:c7:5f:f2:29:60:5d:20:c0:84:51:55:
10:c0:be:b1:92:07:5f:49:09:37:b3:5d:f3:f8:01:f7:98:9f:
5a:68:4f:c4:77:75:e4:11:55:98:20:10:73:2d:d6:3f:04:c6:
23:52:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:52 2025 by rpki-client