Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: SxG5B2o6zd8TKe8IipZBdJ6hnfHIiRP2TalpkzfadSQ=
Subject key identifier: 9E:21:7C:47:B1:09:FF:D8:B0:80:5D:37:29:A9:97:CF:A8:7B:68:00
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 019A4E191EBBE841920C3E7B0B78EDBE3FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:01:00 +0000
Manifest this update: Tue 04 Nov 2025 09:01:00 +0000
Manifest next update: Wed 05 Nov 2025 09:01:00 +0000
Files and hashes: 1: Dmpy31ijG2f6hXZqP5vPJHMC7fc.roa (hash: a19ubK1sseKa07iYGs0SfWBGmOIfQnOOnA1DdC09cIs=)
2: E7yxjynkTDUFSV0KBoIMTHpUAPI.roa (hash: 9bhJ257wp5/WErvUFH4Spo9AhE0rTIMhiGRzFbkOnjk=)
3: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: W+oqbT2HlJ4o72OrJHDrVps1KsKEcs/UDQ2SqPEZ4Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:1e:bb:e8:41:92:0c:3e:7b:0b:78:ed:be:3f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Nov 4 09:01:00 2025 GMT
Not After : Nov 5 09:01:00 2025 GMT
Subject: CN=9e217c47b109ffd8b0805d3729a997cfa87b6800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:24:38:da:51:c9:a1:b9:21:d6:6a:14:c6:
76:e1:9e:be:2d:41:14:89:15:42:f5:82:0b:5b:49:
3a:df:cf:ea:ea:21:f8:da:c0:ed:60:d4:ac:7f:da:
cf:d7:53:82:ce:7f:f1:7d:3a:3c:10:f9:00:3a:fc:
9b:2b:2e:56:4a:05:f6:6b:e7:8a:bd:40:ef:54:2f:
03:c7:30:f8:79:44:48:06:32:c3:33:11:d0:2a:8d:
5c:4e:95:07:f2:1f:5d:f2:ff:a5:11:88:13:50:87:
3f:4b:31:80:85:00:f7:b0:ff:3e:bd:14:0c:6e:ff:
1f:ae:11:20:96:59:40:81:df:b0:6a:f0:00:51:86:
59:60:1a:11:68:d0:07:cc:a0:36:f6:40:ca:ca:a8:
be:0f:cf:54:c0:cd:0e:73:19:bc:1a:3f:27:10:ae:
4c:10:fc:e3:fa:9d:65:37:46:ce:fc:86:72:28:a2:
37:ce:dc:16:0a:a7:ac:83:17:59:ec:48:bc:f1:c9:
d2:e0:71:f9:b8:b0:f1:9f:fe:6e:50:f3:e2:c8:c5:
e3:0b:3d:77:df:0c:6c:f1:e5:98:cd:75:4d:87:12:
69:f7:14:16:0a:55:7d:45:86:8e:2c:fa:f6:00:69:
65:42:0b:56:e8:8b:c8:9e:0e:b2:35:23:3c:83:02:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:21:7C:47:B1:09:FF:D8:B0:80:5D:37:29:A9:97:CF:A8:7B:68:00
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5e:45:76:a4:e4:7f:3e:0c:1b:bb:35:25:ac:d2:b7:17:6a:
33:63:18:5a:f6:6d:a8:16:5a:3d:87:e0:46:0c:9e:b4:6c:53:
17:88:a8:36:d4:98:5b:fd:39:f5:b4:ef:ed:8e:d6:2c:08:6f:
e0:48:5e:35:9f:a0:ae:6a:87:4a:9b:ff:4d:72:b3:63:10:dd:
0a:f5:00:7c:c5:49:c1:24:87:39:2f:5e:26:c2:e7:92:d9:3f:
a2:9d:4a:a4:97:66:0f:0c:56:71:20:22:8f:31:01:e1:7a:e5:
a2:2f:b3:60:3f:47:b1:48:1b:bd:d5:07:17:60:cb:10:19:03:
4f:9f:f8:b9:59:92:02:b3:56:30:7d:df:08:5d:a8:7f:1b:e8:
6f:fd:ee:b2:f0:70:5d:57:47:64:c3:7d:dc:52:53:3e:1e:53:
f4:52:0f:d7:a4:4e:2a:b0:d5:d7:04:49:8f:63:cc:34:2a:06:
a3:bb:90:1d:04:2d:22:70:d4:dd:1d:4c:f0:e9:e9:f5:b8:10:
ec:4c:37:4e:17:d6:f1:26:e4:c1:1d:83:5b:ca:23:4a:0a:fb:
cb:b2:ab:04:ed:fd:5a:68:5b:49:68:52:a0:6d:65:31:e0:f5:
1b:a8:b7:fe:91:0d:cb:1a:25:c9:ec:ad:da:cd:fa:6b:12:45:
f0:cd:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:21 2025 by rpki-client