Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: uRU/QD3HcRurTUKmBBQrJLDheSyAJT1W24uXv8PHK6c=
Subject key identifier: DD:F4:3A:5D:C0:0E:46:55:33:50:60:5F:1D:A4:56:37:13:4C:CE:76
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 019A4EF5FFFA8A041A71AD5F8AF5CD4D27B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 1107
Signing time: Tue 04 Nov 2025 13:02:15 +0000
Manifest this update: Tue 04 Nov 2025 13:02:15 +0000
Manifest next update: Wed 05 Nov 2025 13:02:15 +0000
Files and hashes: 1: 75qkVCY5XXIcFQQiW3dyFVzW6eQ.roa (hash: dXFNWNpycxDfWS4F1kZ68a/+XDX33UqEzrugZvo8DVg=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: PJtxwRHox1iAkml7H/6fojgqMchFPaNblchgbV7s2ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ff:fa:8a:04:1a:71:ad:5f:8a:f5:cd:4d:27:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Nov 4 13:02:15 2025 GMT
Not After : Nov 5 13:02:15 2025 GMT
Subject: CN=ddf43a5dc00e46553350605f1da45637134cce76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:9b:99:fc:18:6b:ef:81:9f:5c:87:15:5c:
b9:89:0e:d5:09:77:64:5f:b5:a5:2d:b2:5d:a4:04:
30:46:da:4c:ed:a4:be:e7:f6:a7:0a:a6:b0:aa:de:
31:88:b0:10:bb:e6:ca:5b:01:e7:20:14:fd:13:17:
2e:46:ac:01:5d:f7:a7:de:32:ce:12:f3:72:69:5d:
f1:6e:23:2c:ce:cd:af:b1:39:a4:6b:72:7e:16:ae:
f7:27:47:c0:58:ea:41:36:5c:c7:7a:f5:d4:71:3a:
1c:74:e9:03:d4:19:10:71:09:00:ee:8c:d0:83:24:
c3:c1:30:f4:c3:94:ac:c3:43:11:42:e8:a4:6b:2d:
f8:d6:f4:e0:4f:12:5a:d3:cb:1b:d0:5e:0d:b7:14:
12:b5:50:aa:ff:38:ee:e3:96:73:14:e0:7e:8b:b7:
bf:f5:8d:ae:fc:a3:12:9e:98:30:34:0d:3c:01:a5:
dd:b3:4c:91:0b:3a:c5:d6:05:b7:1d:a9:58:92:d9:
15:b0:b8:01:7e:bf:8e:c7:44:29:fc:bf:a4:89:53:
5f:f9:a2:b1:34:c3:b2:7f:ad:98:c9:f1:f0:62:46:
3a:ed:5b:32:b6:3f:6f:ca:df:c2:b3:81:e4:f7:7b:
f1:71:ad:23:eb:c2:e7:8b:0e:63:57:d7:7e:2b:1d:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F4:3A:5D:C0:0E:46:55:33:50:60:5F:1D:A4:56:37:13:4C:CE:76
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:39:97:f9:d0:4e:b2:a1:30:45:0e:8b:5f:2c:f8:a8:75:33:
b4:19:19:47:66:4a:19:d7:5d:7d:93:4b:1b:49:86:4a:ca:fe:
b2:a0:92:28:9f:58:3f:bc:b6:72:02:69:4e:e9:24:83:26:a9:
fd:17:f0:b5:3b:6d:8e:97:a1:2b:cf:22:dd:d5:fd:bf:e2:c6:
66:41:54:54:ea:21:f8:4b:ff:15:8a:85:15:37:02:a0:28:1a:
b1:72:ee:b4:08:88:8b:95:e5:0f:17:33:b3:b3:dd:9a:f7:1b:
80:c3:29:7b:9c:bf:c0:bc:75:d7:c9:a8:a0:ce:28:60:95:5c:
bf:2f:c5:b7:d4:05:4b:d2:be:32:89:fa:6a:70:d8:d2:39:5b:
dc:8b:3b:b5:d6:16:4a:d1:a4:d4:6d:4f:91:c8:f5:71:38:1c:
f0:07:61:23:56:1b:c9:03:30:e3:c6:3f:78:09:2b:c3:8b:12:
ae:4f:77:73:8e:2a:66:83:31:e0:f2:02:1d:d5:9f:06:26:e2:
5e:44:ac:72:57:99:db:6b:18:84:9d:bc:64:0c:77:ad:06:8e:
77:4f:97:6c:ba:56:e6:5c:41:b9:4e:d6:8a:36:a4:a8:50:0b:
91:96:56:e3:8d:b3:4f:79:3d:9a:7d:3d:b4:ec:28:8c:59:78:
ac:25:de:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:36 2025 by rpki-client