Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
File: ksrhHed02u8FJ0JGPOlU9SHG0nI.mft (raw, json)
Hash identifier: r6L/XvokPkwIfGbOUx7eiNfK148vxYMvMv3KljO49wM=
Subject key identifier: 55:82:1D:16:CA:F5:2D:F9:E2:E0:3B:83:1F:66:D9:10:7D:EC:AC:61
Authority key identifier: 92:CA:E1:1D:E7:74:DA:EF:05:27:42:46:3C:E9:54:F5:21:C6:D2:72
Certificate issuer: /CN=92cae11de774daef052742463ce954f521c6d272
Certificate serial: 019A4EF414B3495BD9ABC19E4B20B04641CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
Manifest number: 1105
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: ksrhHed02u8FJ0JGPOlU9SHG0nI.crl (hash: LDBiLPedx+ccfCcKrQ+9ON4iVi4LqYU0CExpftlMyYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:14:b3:49:5b:d9:ab:c1:9e:4b:20:b0:46:41:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cae11de774daef052742463ce954f521c6d272
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=55821d16caf52df9e2e03b831f66d9107decac61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:1e:d5:fe:c0:39:86:ed:c0:96:13:da:2e:
a1:9a:77:7a:32:01:f6:56:aa:27:d3:a6:03:90:b6:
ca:28:d1:21:cf:96:08:d6:e4:62:32:4c:66:de:e6:
7f:b4:87:5b:b4:f4:25:40:ab:87:1e:d4:7a:d1:03:
24:a1:9c:a2:84:2b:11:ab:b5:eb:90:85:dc:e9:79:
44:96:2a:c8:25:7a:d8:36:0e:7a:05:1f:c8:1d:09:
d5:a8:99:29:9c:a8:2c:4b:ef:b5:55:51:01:e3:d2:
bc:24:93:0e:3a:07:f4:57:28:bd:06:e2:2e:df:e9:
4a:99:74:eb:f4:86:09:3a:24:8b:28:a7:10:bc:7e:
76:f8:6a:28:60:20:3c:12:12:3a:5a:7a:77:b2:c0:
ff:03:29:b8:de:fb:59:07:83:d6:f4:a1:52:09:6f:
72:53:ce:55:45:35:84:8b:2f:37:a0:93:85:78:18:
49:49:69:35:95:19:28:e4:a8:75:ca:a4:72:17:6e:
cf:b6:ff:2f:53:92:82:be:ef:c8:7b:bf:55:a6:9d:
e6:3b:c3:6f:b8:77:a9:8d:76:71:2a:81:11:24:6d:
98:72:02:5e:67:6f:15:9b:85:99:02:c5:86:05:1d:
37:d4:4b:25:37:38:5d:d9:fc:50:5c:6a:89:ce:c1:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:82:1D:16:CA:F5:2D:F9:E2:E0:3B:83:1F:66:D9:10:7D:EC:AC:61
X509v3 Authority Key Identifier:
keyid:92:CA:E1:1D:E7:74:DA:EF:05:27:42:46:3C:E9:54:F5:21:C6:D2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:3c:d9:47:de:bb:75:12:b4:80:9a:82:2e:b9:d8:f1:eb:
11:86:b5:e2:1b:d2:8d:e2:44:d7:6a:1a:78:5a:1c:ac:bc:80:
c9:e9:38:bc:e3:95:f8:dd:7d:76:78:79:97:96:3e:9d:ac:cf:
11:2e:49:56:d6:ed:2c:9e:84:ff:ec:e9:d3:2f:84:02:86:71:
01:30:c6:b2:f9:3b:0d:5a:3f:97:48:36:42:79:3c:2f:67:76:
dc:d3:af:2c:c6:e6:fc:f5:ac:65:72:68:f0:2d:a9:ef:04:57:
58:27:e7:e2:d5:4e:01:30:a3:88:01:28:89:03:5e:85:69:21:
73:02:a2:54:51:15:d5:83:89:36:8a:7c:8e:df:d9:92:a2:ab:
cc:8e:9a:66:23:1d:56:9c:a1:51:32:31:95:b6:82:ee:36:81:
94:b7:b6:a0:ea:5e:17:b4:f9:55:b1:3c:8d:4a:a4:69:d5:41:
77:8e:de:22:42:bc:a2:b8:cd:eb:90:18:8e:e5:35:fa:ab:44:
7c:9c:7c:c1:f1:74:5c:e5:6f:9e:2d:e7:c6:41:dd:1d:6a:2b:
df:bd:5c:13:35:9c:b3:fc:fe:1c:53:e0:4d:ce:0e:a1:b2:1e:
ea:8d:6b:8d:81:ac:e8:54:5b:ec:d2:e5:1a:dc:18:1e:12:84:
58:89:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:06 2025 by rpki-client