Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier: XyX1Q4yVpgrBqL/stOyNnlYoNPlLyGQCYtXaAZfHr0Q=
Subject key identifier: 61:D7:DB:03:B8:E3:21:CC:2D:C2:F6:03:05:3B:C3:C7:51:B2:89:A7
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 019A5187BA6D40F0EF6BB3C4ED22B367B7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number: 1450
Signing time: Wed 05 Nov 2025 01:00:40 +0000
Manifest this update: Wed 05 Nov 2025 01:00:40 +0000
Manifest next update: Thu 06 Nov 2025 01:00:40 +0000
Files and hashes: 1: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (hash: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=)
2: cl0W_dg6-SS2WR9dVPceKMDs_Vs.roa (hash: /pB+oHyiaUXmAAdbfPeCmqHZJhPFFFtRAcQpmJHE+pY=)
3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: IHbIj8oGfy5q1oO5Dt+ikYuldy9trYjxiFiuvU1btEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:ba:6d:40:f0:ef:6b:b3:c4:ed:22:b3:67:b7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Nov 5 01:00:40 2025 GMT
Not After : Nov 6 01:00:40 2025 GMT
Subject: CN=61d7db03b8e321cc2dc2f603053bc3c751b289a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:52:0a:8f:d3:a1:17:87:61:b0:78:02:44:
3d:a7:a8:4b:33:85:c4:c3:c6:10:a0:d1:ad:86:16:
08:2b:ba:a3:b8:d0:8d:a4:15:c1:05:7e:99:2b:ed:
a0:90:a1:7e:55:2a:d4:e8:da:e0:ea:e7:79:67:11:
84:5c:a1:03:71:01:df:fe:a1:dc:8c:13:87:28:3b:
ac:37:70:02:67:d3:ed:fa:cc:36:14:d7:7c:91:38:
aa:a8:39:aa:88:9d:14:37:59:3d:de:27:24:d0:cb:
73:0e:ae:5c:06:8f:0d:a6:35:01:e2:bb:b3:de:2b:
e7:0a:03:fc:a0:09:6e:6a:13:9e:d7:a1:67:83:c2:
5c:7b:d5:6b:fb:c2:63:03:ed:5c:fd:5c:62:14:0f:
de:66:f5:a9:24:f0:41:ad:40:6d:0c:2d:19:e8:7f:
35:55:9c:94:ce:1b:01:ab:05:74:d1:59:f2:6e:77:
3b:29:5e:97:78:e8:1a:8d:9c:ad:97:17:2b:ec:12:
66:bf:9c:4a:2b:ac:0e:7b:80:b7:ab:e5:b4:d0:19:
74:be:6c:99:bc:c6:0f:06:25:04:20:d4:6f:9f:d6:
7b:37:9d:58:97:1a:bf:6b:c7:e4:8b:c2:91:7c:d4:
69:88:75:e2:15:4b:70:e2:c2:8c:29:24:e0:d7:7e:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D7:DB:03:B8:E3:21:CC:2D:C2:F6:03:05:3B:C3:C7:51:B2:89:A7
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:49:7d:04:32:38:11:b8:5b:b9:42:64:0f:57:77:50:88:38:
c5:25:72:93:5e:2f:fd:5d:7e:ae:18:0d:4e:b2:ea:c2:be:19:
a1:be:f8:1c:9b:9d:3f:13:9d:4f:94:33:c6:ef:ae:01:21:b0:
f4:08:30:c5:69:5f:6f:d9:32:62:17:d9:6e:78:32:15:87:97:
bc:06:81:45:1b:bd:a7:e4:30:fa:ef:48:8f:88:6e:69:0e:54:
22:30:5c:15:41:81:37:ca:c8:7d:b6:5b:e5:1a:8f:cd:db:2d:
ed:89:7c:59:56:77:05:37:8f:29:31:19:66:23:e8:66:5f:59:
f6:44:8f:19:c5:ac:4e:43:b8:90:a6:a1:f2:6f:69:95:43:45:
77:b6:8d:89:06:f0:41:30:7c:39:8e:75:40:ae:b4:1b:39:a6:
c6:0e:94:75:70:7a:77:ce:bd:b8:b9:a7:02:e3:42:1d:b1:bf:
08:dd:27:ce:bd:3b:8d:5a:ec:13:cb:91:09:e1:c9:d3:a5:2c:
71:7d:6e:ea:ee:b2:0d:75:f5:5c:da:b6:b1:9b:46:f1:18:6a:
79:bb:f9:92:85:8f:50:7b:b4:b6:f8:94:36:94:1d:df:37:e6:
f5:ad:4e:51:ef:29:ed:67:6b:82:58:d7:49:01:a6:c8:53:48:
41:87:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:10:07 2025 by rpki-client