Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json)
Hash identifier: 8z1c7YOxGTEx+35GYa5XJEhsRx4ZYGNbkxm/5eUy3R4=
Subject key identifier: E5:2D:F1:CB:87:EA:D8:92:9A:A1:38:22:45:7E:49:39:1E:9F:68:7E
Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
Certificate issuer: /CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Certificate serial: 019A50E36FD96680B95CCFB5D0244DE82528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
Manifest number: 140A
Signing time: Tue 04 Nov 2025 22:01:13 +0000
Manifest this update: Tue 04 Nov 2025 22:01:13 +0000
Manifest next update: Wed 05 Nov 2025 22:01:13 +0000
Files and hashes: 1: CXJP9kYgvGSt4VoYKuQPShczMME.roa (hash: gqOSApFpGsIytyW52e0emdHCeVR15916QBJkj7VrVD8=)
2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: bdhsIuowV7I990XpiXF6lW5L++NYybEwYQFgtVTfFCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:6f:d9:66:80:b9:5c:cf:b5:d0:24:4d:e8:25:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Validity
Not Before: Nov 4 22:01:13 2025 GMT
Not After : Nov 5 22:01:13 2025 GMT
Subject: CN=e52df1cb87ead8929aa13822457e49391e9f687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:f5:c6:55:24:3b:be:90:66:5c:c3:95:b8:
49:c5:63:5a:df:b7:1a:8e:6a:50:42:47:1c:ff:26:
06:d0:7f:62:11:c1:9d:9a:a5:96:74:8c:8b:93:06:
fc:e8:a1:f0:d6:e9:f7:f8:62:32:9b:d6:28:4b:25:
55:ba:55:81:43:8e:71:10:08:f9:2b:71:ea:96:b7:
5a:22:f7:3e:04:f5:c5:f8:60:54:2b:68:6f:b9:f8:
b9:b4:12:5f:54:13:66:c5:fe:e4:77:87:fa:41:ab:
4d:bf:eb:ee:a4:24:5f:19:94:6f:cb:2c:aa:85:6e:
d8:06:d1:c0:e4:83:ea:9f:c9:38:ae:bb:e2:62:d5:
c5:59:9c:46:2c:c4:05:dc:a2:22:61:43:41:ce:c2:
74:84:b1:c5:c5:fa:98:30:20:a9:c7:c0:4c:95:8b:
c6:b2:10:fc:f0:c0:94:dc:cc:ea:ad:56:31:2e:9f:
a5:40:dd:8a:66:fc:6c:d3:93:c5:8d:24:42:aa:f3:
b9:70:8f:c9:61:24:55:a2:b4:f2:a8:49:35:f0:b7:
69:95:7c:da:81:aa:96:24:46:33:db:34:fc:49:63:
07:09:73:b0:aa:07:04:cd:b7:03:aa:fa:50:ba:82:
8c:dc:76:16:16:44:ce:af:1c:be:7d:b1:42:77:34:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:F1:CB:87:EA:D8:92:9A:A1:38:22:45:7E:49:39:1E:9F:68:7E
X509v3 Authority Key Identifier:
keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8f:a6:c3:85:04:60:76:ac:f8:bc:e5:a1:fa:55:c7:85:19:
9a:07:cf:5e:bf:6d:4e:22:f6:01:09:99:24:bc:b0:03:f6:fe:
17:d4:cf:62:ef:f2:20:22:ac:58:6d:10:d3:7e:39:37:3e:79:
fd:5a:7b:ba:c6:72:17:81:80:42:62:d2:6b:46:71:02:77:32:
d4:f2:d5:a5:76:d8:cb:a8:95:c8:d1:e6:d4:da:e0:96:bd:2f:
77:01:fe:36:6f:4b:cd:f9:fa:c4:e3:35:a5:01:64:fc:17:b8:
9e:a3:86:d4:91:7b:9c:0e:dd:01:4f:5e:ce:31:87:2a:76:7c:
7b:a0:56:a7:65:6d:3e:7c:10:a8:9e:1a:ca:a6:1d:26:58:9c:
f5:0e:41:67:95:03:1a:2b:53:db:c2:2a:9d:79:07:cd:d2:5d:
e1:34:ff:4d:6a:1d:36:3e:9b:28:45:34:ab:eb:30:af:41:70:
23:37:d8:a4:42:e0:89:80:69:4a:36:00:77:31:9c:ca:dc:45:
0b:ec:0d:dd:16:3f:98:eb:38:c3:53:ae:27:10:ce:28:49:e7:
d3:8b:0f:8c:ee:3c:42:8a:6b:d4:1b:57:8f:0f:9e:2e:b6:e7:
99:5d:fe:03:33:17:ef:6e:0e:e5:f7:3d:1d:31:94:04:41:31:
38:d7:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:21:50 2025 by rpki-client