Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier: E1ttMNxPDw1mbFbyyXxwyCecO8hOm5CdtbgQm77mPH4=
Subject key identifier: 83:CF:FF:0C:47:75:12:5E:37:3F:53:36:64:A9:CF:0F:F7:89:C1:C2
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 019A4EF418EDF9B0F70D635D2AF53E9BF3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number: 171E
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=)
2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=)
3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=)
4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=)
5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=)
6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=)
7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: aTFDmfhGEncex4wF0LCZLh76VyT0ulKsyO8Y3G8X0W4=)
8: cWm4lcomb_7tGOMAKfN645HZ4lY.roa (hash: Q1Xtl3Tt4xDVvissECGJZtzvYROTu/HRq3nIK5nwbTU=)
9: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:18:ed:f9:b0:f7:0d:63:5d:2a:f5:3e:9b:f3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=83cfff0c4775125e373f533664a9cf0ff789c1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:82:65:9f:59:fe:48:1f:39:96:a4:24:6d:
7b:2d:e4:7d:3a:87:06:d2:42:f3:63:af:3e:bb:c1:
6d:5f:77:64:d3:26:36:b0:67:e5:63:8c:2d:f6:b4:
65:80:d1:9b:d2:3b:7e:e0:f6:99:6c:13:48:b1:fa:
9d:2a:18:39:d7:0f:7a:3a:e7:28:c5:2c:05:35:2c:
2b:af:ee:4a:2e:33:43:97:2d:8a:93:1e:aa:f4:2a:
4e:25:ce:3f:4b:96:ca:f0:8a:ac:22:4b:23:54:49:
75:95:b8:89:0e:27:1a:f6:bd:e1:21:34:fb:0b:a1:
a8:30:ae:c4:57:ef:0f:ed:a7:57:bf:aa:6c:9b:49:
6c:2a:c0:18:5b:c3:19:4d:8c:42:fa:07:e5:aa:d8:
8e:5e:0a:d8:26:ec:68:d7:2d:71:6d:2e:b0:a8:80:
9d:75:8a:a9:bc:bc:57:ba:0a:4e:e2:f9:1a:ed:fd:
23:10:79:ec:35:f9:67:7a:50:d4:71:3e:b6:bc:68:
6b:36:14:9d:56:77:a3:15:da:33:79:7c:94:c4:1e:
31:d0:db:94:9a:24:5b:8e:b9:6f:ad:49:46:e0:6d:
be:ea:78:33:6b:0f:7e:d4:5e:e4:16:8d:dd:b0:95:
ce:0b:1d:f8:6e:79:34:11:d7:00:ae:fa:5b:23:92:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CF:FF:0C:47:75:12:5E:37:3F:53:36:64:A9:CF:0F:F7:89:C1:C2
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:36:8f:e1:bb:61:1b:b0:60:45:02:1a:6b:2e:f8:7c:c7:b4:
97:45:6f:97:dd:5f:ef:11:97:df:c7:08:c0:f3:4b:a3:43:22:
34:d7:13:67:59:98:55:62:78:90:53:d7:b8:b0:ac:c1:57:19:
5b:d5:e0:fe:f9:b8:b0:20:d2:6f:7d:ac:eb:77:ff:ac:c3:07:
73:c9:35:ad:5d:aa:4d:be:ed:94:fd:84:d3:a8:cc:ed:71:ce:
e6:13:8d:3b:c7:9e:58:40:c2:71:e4:17:a3:b5:92:33:ea:3f:
01:9f:40:d7:2c:2d:03:62:67:34:da:fa:5e:86:0d:b4:6b:eb:
08:8b:79:92:7f:ec:e4:ff:c8:ff:ce:d8:f4:57:49:ed:be:f0:
a5:64:ed:72:a5:c6:64:24:0e:eb:e5:c7:29:43:ab:93:29:0a:
fa:79:f4:77:a9:5e:2d:ad:5e:62:0d:f9:ca:e8:65:95:a7:bb:
44:af:e5:48:59:71:80:83:15:72:57:f6:27:15:ac:8d:b9:d9:
db:c5:32:5a:d1:bd:16:cd:5f:91:ee:c2:5f:9b:e7:cf:9b:bf:
45:c3:6b:f4:0b:c7:70:63:94:9e:aa:9e:73:2b:75:4c:47:9a:
a2:e3:86:70:43:bf:1f:d0:4c:58:6c:92:4d:e1:e9:b5:79:43:
e6:86:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:49 2025 by rpki-client