Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: EsU/Krsxb8/NYis9+7iQM8YYNZCU5o4QmdphZTOsCGI=
Subject key identifier: 12:F5:B4:37:88:AF:D1:90:5E:79:2C:EC:76:E8:C4:97:75:49:81:8A
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 019A4F6284EBD6D5ACCBE68FE896BDFD2341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0C2F
Signing time: Tue 04 Nov 2025 15:00:47 +0000
Manifest this update: Tue 04 Nov 2025 15:00:47 +0000
Manifest next update: Wed 05 Nov 2025 15:00:47 +0000
Files and hashes: 1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: 8SHk3dvChnOd8dlhQE+8HNVyso5mha+jkSpFTAlZcqw=)
3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:84:eb:d6:d5:ac:cb:e6:8f:e8:96:bd:fd:23:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Nov 4 15:00:47 2025 GMT
Not After : Nov 5 15:00:47 2025 GMT
Subject: CN=12f5b43788afd1905e792cec76e8c4977549818a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:23:d3:b5:c7:5e:e3:dc:ae:0e:2a:5c:15:
13:4e:9e:c6:6c:81:49:72:6e:63:3e:ca:bc:87:e4:
37:1f:5f:b2:40:be:80:7d:4d:6e:7e:11:c3:a1:51:
35:aa:13:dd:6c:40:96:3b:15:42:38:79:4d:d8:41:
4b:7b:13:37:a4:be:ec:74:ac:1e:5e:cd:8c:99:7d:
41:47:ea:af:8e:93:43:3d:48:40:ee:d0:84:19:84:
9b:ac:e5:2b:5a:ed:92:19:47:27:7b:47:30:bf:f8:
42:0a:8a:b1:49:f8:1d:88:bf:40:cb:0e:61:e0:3d:
fb:37:fd:2d:78:2a:41:d7:69:70:ca:22:15:f9:7e:
fd:dc:86:6b:04:0c:cb:9b:d3:ca:59:30:ed:33:ed:
fd:f4:0f:cb:be:1e:54:59:e5:9e:39:a9:0a:2f:1a:
d7:9b:1e:e6:43:70:db:6c:72:9e:18:21:1b:ce:b4:
f0:39:80:8d:2f:db:a6:2a:7b:ee:2d:2c:73:26:41:
25:75:21:41:6a:5d:f1:04:13:65:f2:21:0b:c5:70:
25:2e:e2:8e:1a:e5:9c:d4:87:ca:d3:62:b4:d5:b2:
fc:df:51:da:80:8c:f4:ab:e3:4f:c6:94:51:b5:33:
0c:96:73:4a:46:ee:5f:10:cd:b1:58:cb:59:0f:ef:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F5:B4:37:88:AF:D1:90:5E:79:2C:EC:76:E8:C4:97:75:49:81:8A
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:82:c9:2e:20:16:a3:dd:fb:b9:18:ad:f2:b1:c1:ae:20:13:
70:77:1e:85:b3:ac:04:d3:cf:7d:d1:3d:74:78:3a:df:08:7e:
ea:e9:ad:60:ae:98:a8:c5:c5:33:46:6b:a8:90:04:cc:1f:91:
53:b2:91:1e:04:72:0b:b6:23:cd:74:b0:0d:eb:d5:6b:e8:36:
84:31:21:08:27:37:29:2d:23:2a:f3:bd:30:58:ea:69:a0:92:
55:ba:86:30:99:11:f8:69:6d:bf:02:a2:66:d1:b2:4f:ca:f3:
11:22:f2:3a:56:35:3d:07:a1:7c:98:82:1c:0f:94:72:a8:cf:
37:06:80:38:75:f9:2c:1c:7a:e5:2d:60:15:e6:f4:6e:ee:2f:
d2:88:e1:81:b0:61:6e:22:dc:c2:23:00:86:31:f2:69:4b:9e:
5a:31:45:6f:4e:b4:d3:81:f9:8f:6c:de:cf:e9:49:86:56:5e:
c6:45:96:f7:89:64:ec:89:01:19:f8:c1:10:15:7e:2e:bd:f5:
67:71:db:da:ee:38:7c:24:6d:47:73:53:2f:25:75:f1:12:d1:
d1:53:6c:b8:2e:86:db:81:ed:7a:de:6c:c9:5f:34:31:ed:6d:
b3:48:a7:69:9f:15:24:ad:77:57:6a:ca:44:2e:70:e8:93:b9:
92:d8:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:35 2025 by rpki-client