Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: 9U+a//g5SbN2ZfmzqSbXcpMAZODhCmqa8/U7oqT1gxw=
Subject key identifier: 98:37:0E:4F:57:EC:DA:80:BF:5C:BB:BB:7D:36:97:A0:08:50:35:C6
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 019A4DE161FEBA58E7D2E1A8E4848E471232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 1107
Signing time: Tue 04 Nov 2025 08:00:07 +0000
Manifest this update: Tue 04 Nov 2025 08:00:07 +0000
Manifest next update: Wed 05 Nov 2025 08:00:07 +0000
Files and hashes: 1: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: hqB+CX+U1D9Nq3mLerOzyK8w2swmA6BkKnXFwoU0nRI=)
2: NdfWSMRABwv2F_yFFl7X4UZH0vA.roa (hash: cuV8z/cxgYl0ffX7fgAA/EzOTZZ9e9S+JYGHmQ2nzxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:61:fe:ba:58:e7:d2:e1:a8:e4:84:8e:47:12:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Nov 4 08:00:07 2025 GMT
Not After : Nov 5 08:00:07 2025 GMT
Subject: CN=98370e4f57ecda80bf5cbbbb7d3697a0085035c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:2b:e5:08:68:c3:ac:1f:6f:1b:76:42:fb:
b7:2d:fc:13:16:81:b0:65:d3:4a:77:01:9c:3b:d8:
b3:7b:02:39:ae:91:46:67:02:33:5e:92:d2:81:af:
9d:43:11:38:50:93:b6:a2:e1:64:b5:a3:8c:fe:17:
63:0f:98:1b:d1:fb:3d:6a:7c:4f:74:05:58:b0:8c:
76:83:c9:a8:e6:46:dd:e2:de:9d:40:67:41:bc:17:
fb:de:e3:61:3f:32:4c:5d:11:87:40:1f:ab:f3:4f:
71:fb:fc:10:12:4f:96:8a:7a:94:f7:87:75:4f:8f:
53:d3:bc:5b:11:d4:69:53:6f:dd:b6:75:87:c8:e6:
20:03:58:67:39:fc:fa:f1:52:5e:4b:e4:85:61:21:
25:04:f5:fe:eb:c9:5f:69:95:2a:01:60:cf:6e:94:
4d:0a:81:2c:15:45:6c:eb:95:0a:d9:1c:6a:a6:aa:
e7:bc:2a:ed:a2:c9:39:ff:18:4e:2b:a9:31:25:3b:
74:88:6b:20:6f:98:06:61:09:8d:8c:1f:11:8a:1f:
51:53:b7:72:e2:35:fb:6c:c9:d6:f1:91:b5:62:ed:
7f:a5:ef:22:a3:17:11:21:61:c8:05:21:3f:3c:c7:
24:a4:36:b2:59:1e:ad:c2:73:69:d0:0b:12:7a:b8:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:37:0E:4F:57:EC:DA:80:BF:5C:BB:BB:7D:36:97:A0:08:50:35:C6
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:50:73:45:a8:88:ea:e2:24:9f:70:38:3b:08:35:c3:f4:cb:
b1:b8:ee:48:12:95:13:31:7b:bd:58:54:95:aa:36:61:c6:68:
39:55:b2:28:cf:60:33:98:49:fb:16:f7:ee:6e:98:b7:ad:08:
24:73:66:df:dd:f2:3d:5b:ed:e3:70:16:7b:70:cb:45:fb:30:
c7:70:bc:21:d1:62:46:d5:56:c1:51:67:0e:96:d9:19:22:c5:
ae:09:f3:7e:b6:20:9b:b5:32:f0:67:0b:d2:66:c0:ea:af:de:
3c:f5:c9:47:a0:0d:59:23:40:8c:92:23:1a:6a:b3:13:e6:e0:
40:e4:dc:21:29:dc:03:48:87:95:b9:a7:4d:ee:f0:fa:62:5d:
c2:95:bf:6e:9b:bb:38:6b:92:85:84:e4:02:47:10:42:48:f1:
1d:e0:e8:de:c7:6e:7a:d9:28:12:36:d4:b8:db:6c:68:eb:83:
6c:2a:65:9a:ea:06:3a:35:01:3c:fc:85:65:a4:50:d3:36:75:
28:f3:5d:64:f9:ca:51:4d:7d:53:18:57:b5:aa:59:cc:76:a7:
df:4e:1c:cf:25:cb:27:29:a8:66:a2:b4:29:ff:27:1a:e6:e2:
3e:2d:00:3a:d0:25:3b:e5:38:2e:ef:b7:1a:e8:74:58:10:8e:
52:3e:c9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:43 2025 by rpki-client