Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File: _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier: /lOH3lkV+HHPtERWwpnJ7+03w8vHI0Hsh2svSOpjeps=
Subject key identifier: 73:A0:95:2B:34:75:BB:A9:3B:06:9F:33:E3:9F:88:9E:7D:2A:C2:E9
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial: 019A4F9969BC0E75589E9EABAA7AF8F414F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number: 0633
Signing time: Tue 04 Nov 2025 16:00:45 +0000
Manifest this update: Tue 04 Nov 2025 16:00:45 +0000
Manifest next update: Wed 05 Nov 2025 16:00:45 +0000
Files and hashes: 1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: PSgYSgybKy8JnLSrofQNbNL5QUij4CkFLVBLyKw/+xM=)
2: j0TrgD1mMe4SCFwW2zXApzSjMys.roa (hash: A16AXZA8TA0369WZ1QSUTK6vpWpKMrbFHrcl2YyzIA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:69:bc:0e:75:58:9e:9e:ab:aa:7a:f8:f4:14:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
Validity
Not Before: Nov 4 16:00:45 2025 GMT
Not After : Nov 5 16:00:45 2025 GMT
Subject: CN=73a0952b3475bba93b069f33e39f889e7d2ac2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:9a:d4:8f:4c:38:3d:38:e4:8e:15:57:12:
21:a8:6e:e6:85:1e:50:82:09:d9:82:20:34:b3:b1:
89:bd:0b:53:fe:e5:6e:81:64:94:39:76:d0:df:01:
91:68:8b:65:33:31:f4:13:d7:84:bb:0e:ce:c0:80:
ca:6f:ff:1d:4d:2c:bf:74:36:86:d6:92:96:87:2f:
4f:13:d6:f9:4d:94:ea:70:d7:ad:72:8a:2f:96:f2:
bf:31:88:64:5c:c4:e3:93:1a:04:0f:67:d2:d5:31:
13:5b:3e:6a:2d:fa:55:99:7c:bb:84:a9:35:9b:94:
1a:0f:64:db:08:06:84:a2:be:72:0e:2d:53:42:95:
11:f2:ac:79:2d:49:6d:d2:83:5d:76:fa:99:6a:7a:
da:5c:11:9e:6d:fd:dd:16:ca:c2:96:de:e6:38:91:
97:d7:dc:3e:03:e9:a2:a9:cf:53:df:cf:1d:74:1b:
f6:d8:eb:34:b4:2a:4f:a4:63:fc:f7:37:5d:e3:dd:
f5:34:0f:99:89:b6:3a:3f:8f:a6:a6:17:33:33:5c:
11:4d:e2:7f:fb:2f:42:74:62:f8:53:f4:74:b7:45:
41:7f:75:85:bc:ef:41:63:1d:a6:58:80:22:bc:52:
a8:22:11:e6:c5:03:8e:38:8a:7f:a8:59:cb:bc:82:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A0:95:2B:34:75:BB:A9:3B:06:9F:33:E3:9F:88:9E:7D:2A:C2:E9
X509v3 Authority Key Identifier:
keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a0:96:8a:fb:5b:d8:73:bb:2e:91:65:67:3d:f4:3a:2a:bd:
c1:93:d1:1f:a1:c4:0f:0b:cb:87:6b:5a:49:f6:7b:c9:15:6e:
30:44:82:f8:9a:10:e9:85:14:33:9f:f1:bf:13:d6:d6:8c:72:
18:a2:32:13:64:f4:32:34:8d:04:13:88:a9:e0:c1:c7:9d:5a:
db:95:c1:3a:50:92:e9:a0:e4:cb:47:81:bb:9d:4b:bf:28:e8:
7a:fd:f0:d7:fe:bd:6b:80:65:3c:9b:79:7f:f9:24:25:ea:0b:
ee:d5:cf:bf:e0:6b:fe:c0:50:21:62:de:48:7b:46:13:58:44:
17:32:e7:46:f6:89:4a:b6:1d:2a:37:a6:70:fb:e5:fb:c2:6e:
e5:16:a1:b1:62:b1:8f:cd:1e:d0:a0:13:75:90:e4:be:ed:cf:
ea:61:3e:3d:f6:6f:1b:19:dc:5d:f7:d5:fc:48:0f:b6:20:45:
0e:57:ad:4e:35:92:80:c4:48:5a:a1:0d:f6:bc:22:24:92:20:
93:d2:ed:bb:bd:bd:ed:58:39:24:87:85:b0:2a:21:65:9c:c0:
04:7c:08:85:ac:0a:66:73:0e:b2:83:eb:6c:07:3b:62:24:ad:
c8:84:43:94:c5:e1:bc:a8:11:ea:e3:94:7a:18:c0:fc:4b:c4:
4b:46:64:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:41 2025 by rpki-client