Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
File: KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft (raw, json)
Hash identifier: CpjGvzyC6zncGG1SqGDyBS/5z4XSLy4rG6M7aIeMwhE=
Subject key identifier: 96:37:5D:4E:82:0C:D0:1D:F1:4D:B3:0C:8F:41:C9:F5:2A:92:BB:50
Authority key identifier: 2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
Certificate issuer: /CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Certificate serial: 019A4EF5074F3A65519086A9E903C4225A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
Manifest number: 06DC
Signing time: Tue 04 Nov 2025 13:01:12 +0000
Manifest this update: Tue 04 Nov 2025 13:01:12 +0000
Manifest next update: Wed 05 Nov 2025 13:01:12 +0000
Files and hashes: 1: FN4mbfTwvi8Xhlnmnlqh5KIO2hw.roa (hash: Z0wCpt0sE7ChkFPlKeGXtBFCnXabrU9fj1GXtnw3GDg=)
2: KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl (hash: 700ewPPeGNo8Ye2pRgxdf8rcDLxqokY2t3yCoDjcRfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:07:4f:3a:65:51:90:86:a9:e9:03:c4:22:5a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Validity
Not Before: Nov 4 13:01:12 2025 GMT
Not After : Nov 5 13:01:12 2025 GMT
Subject: CN=96375d4e820cd01df14db30c8f41c9f52a92bb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:b5:c8:6b:b6:32:de:fe:6d:bb:4f:4e:4f:
e8:ee:5e:95:9c:24:7f:a3:86:4e:1a:df:3e:01:67:
f3:8d:ef:b2:31:0d:9b:88:eb:d6:0b:57:46:73:13:
ed:15:6a:39:d0:45:59:0f:07:9f:0b:cd:29:64:af:
f4:df:c0:a9:0c:35:9c:22:6d:82:c2:54:b5:f3:6a:
a5:da:ee:44:b3:6f:7d:2c:3f:c9:f7:b1:0b:bf:5b:
c3:9f:8e:11:f8:d7:ca:30:ee:60:63:a1:9c:0a:dc:
95:30:29:7d:76:70:4f:4c:a7:e9:ab:1a:0a:03:d2:
c5:c8:66:a8:3c:16:ed:9b:1f:7f:88:18:bc:65:0c:
b4:2f:ed:3d:7c:c4:49:29:92:bf:b4:28:d1:f5:c0:
13:f6:bc:de:82:6d:5c:29:4e:2f:a7:90:d9:e3:00:
13:f7:9d:bd:fc:21:c6:5b:71:91:cb:e9:96:e8:83:
7c:a0:22:4e:96:b1:4d:28:88:c8:e2:d3:f1:ed:4e:
ea:e2:00:2a:9f:04:e3:ac:6c:0a:2e:f2:cd:5d:39:
cf:0c:71:86:78:4a:0e:d6:ab:9b:33:fc:48:6b:6e:
98:83:30:d8:4b:b8:bb:84:ad:da:15:fe:2b:67:68:
c5:6f:03:cc:07:81:ae:92:c2:d1:91:64:97:8f:ea:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:5D:4E:82:0C:D0:1D:F1:4D:B3:0C:8F:41:C9:F5:2A:92:BB:50
X509v3 Authority Key Identifier:
keyid:2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d6:fb:38:ee:69:b3:c6:4a:d1:c7:7d:2e:1e:9f:20:d7:83:
0e:9b:7f:bd:c9:0f:2d:75:8a:a4:16:db:76:16:cf:8b:81:94:
2e:93:fb:27:da:12:40:61:71:f8:fa:f7:7b:23:65:81:38:4a:
bf:b3:66:ef:89:8a:50:96:38:bd:29:0d:b6:3f:67:6f:f1:2f:
f3:b3:0b:ea:ac:ae:e4:a1:8a:36:35:8f:ba:9c:78:3a:39:93:
0c:80:5e:37:26:2a:2c:5c:ac:46:58:4e:13:6e:ba:b8:3d:f3:
16:9d:b1:16:c1:1d:c6:7c:4e:b7:33:1b:fb:4c:d2:c4:1e:0a:
fe:75:f9:fa:d5:b1:97:da:b5:b7:92:a2:ca:2c:df:89:e6:95:
bc:93:85:e8:42:6f:3d:bd:ca:69:0b:39:df:2f:e3:73:fc:56:
d5:8e:d1:27:98:3f:47:6e:a4:ce:43:49:a3:b4:0d:4b:1c:12:
86:22:45:75:65:ca:fe:ac:87:88:4e:ae:cd:2f:96:50:35:59:
28:a4:e1:a8:d0:bc:44:fb:4c:5b:5e:3c:ab:a5:7c:a6:8d:3c:
f4:38:3f:34:1d:1e:1b:a2:f6:1e:d7:2e:bb:84:06:7b:ec:df:
33:44:c8:5e:85:b7:bd:67:a0:a3:a4:40:23:64:52:af:45:11:
ea:70:f4:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9QdPOmVRkIap6QPEIlqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTcwNzg4OTc5NGNlYTA2MjJiZDQ5MjFkNmJkYmRkNTZl
ZjBiMDYwHhcNMjUxMTA0MTMwMTEyWhcNMjUxMTA1MTMwMTEyWjAzMTEwLwYDVQQD
Eyg5NjM3NWQ0ZTgyMGNkMDFkZjE0ZGIzMGM4ZjQxYzlmNTJhOTJiYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06u1yGu2Mt7+bbtPTk/o7l6VnCR/
o4ZOGt8+AWfzje+yMQ2biOvWC1dGcxPtFWo50EVZDwefC80pZK/038CpDDWcIm2C
wlS182ql2u5Es299LD/J97ELv1vDn44R+NfKMO5gY6GcCtyVMCl9dnBPTKfpqxoK
A9LFyGaoPBbtmx9/iBi8ZQy0L+09fMRJKZK/tCjR9cAT9rzegm1cKU4vp5DZ4wAT
9529/CHGW3GRy+mW6IN8oCJOlrFNKIjI4tPx7U7q4gAqnwTjrGwKLvLNXTnPDHGG
eEoO1qubM/xIa26YgzDYS7i7hK3aFf4rZ2jFbwPMB4GuksLRkWSXj+qIGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJY3XU6CDNAd8U2zDI9ByfUqkrtQMB8GA1UdIwQY
MBaAFCsXB4iXlM6gYivUkh1r291W7wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYWNjNzctZGYzMC00OTQxLWJlMzMt
ZGNiNWI5ZTg4ZTlhLzEvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYWNjNzctZGYzMC00OTQxLWJlMzMtZGNiNWI5ZTg4ZTlh
LzEvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldb7OO5p
s8ZK0cd9Lh6fINeDDpt/vckPLXWKpBbbdhbPi4GULpP7J9oSQGFx+Pr3eyNlgThK
v7Nm74mKUJY4vSkNtj9nb/Ev87ML6qyu5KGKNjWPupx4OjmTDIBeNyYqLFysRlhO
E266uD3zFp2xFsEdxnxOtzMb+0zSxB4K/nX5+tWxl9q1t5KiyizfieaVvJOF6EJv
Pb3KaQs53y/jc/xW1Y7RJ5g/R26kzkNJo7QNSxwShiJFdWXK/qyHiE6uzS+WUDVZ
KKThqNC8RPtMW148q6V8po089Dg/NB0eG6L2Htcuu4QGe+zfM0TIXoW3vWego6RA
I2RSr0UR6nD0+g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:26 2025 by rpki-client