Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json)
Hash identifier: AA6KQt6Pxs3yH6rspNpBK3yO6NihJvrrgpQA8k+1dYc=
Subject key identifier: 71:F8:FE:9D:FA:87:AF:BE:22:50:BC:F2:F9:52:A5:64:AB:2B:D4:D9
Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Certificate serial: 019A51196E2A70281C8767AFB265701F66D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
Manifest number: 01F9
Signing time: Tue 04 Nov 2025 23:00:12 +0000
Manifest this update: Tue 04 Nov 2025 23:00:12 +0000
Manifest next update: Wed 05 Nov 2025 23:00:12 +0000
Files and hashes: 1: EJij4b5tXcMHreEwXaDPFHiUPSY.roa (hash: 1zvQlqg1XnwbTr3tDDEsxM/UclGY5wHW7JBqKQIRxus=)
2: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: PDWomcrF2x6Lyjqj8Hk0rVvHndGrlTeS6/XcC0b3pb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:6e:2a:70:28:1c:87:67:af:b2:65:70:1f:66:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Validity
Not Before: Nov 4 23:00:12 2025 GMT
Not After : Nov 5 23:00:12 2025 GMT
Subject: CN=71f8fe9dfa87afbe2250bcf2f952a564ab2bd4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:42:eb:91:b9:f2:aa:1b:2f:a1:5e:0e:26:
fb:7e:dd:7c:7b:b5:c2:75:a4:a6:9c:76:7f:a3:e2:
69:f5:cd:34:a0:4c:48:61:8f:52:f3:d8:08:5c:97:
9d:76:3f:48:9d:0a:7f:55:f0:e4:96:df:16:4a:57:
3a:6b:18:4a:af:e0:d1:79:de:e6:69:9b:c9:72:a3:
8c:f7:ac:1f:64:b1:e1:f3:79:7f:ed:ca:68:58:c3:
d1:c7:bb:dc:79:4c:67:e4:96:f7:71:92:47:88:03:
fa:74:f9:2f:1e:b2:fe:cf:ab:77:af:76:2b:1c:cf:
3f:bc:27:d4:5b:6c:11:94:d0:f9:c1:1c:6e:a7:f5:
1d:a5:d1:c5:47:73:94:81:f5:43:a8:5e:9f:9f:ae:
8c:a3:ec:2b:d0:45:5c:27:a9:00:99:2c:b9:2e:f8:
67:a3:e5:cd:fb:55:b4:5d:23:61:a4:49:d6:81:b4:
53:a3:9a:86:36:3f:3c:f4:50:97:6e:84:be:3a:da:
82:2e:52:e8:b9:cf:9b:e5:ad:0e:72:90:e8:a1:bc:
90:2e:36:c3:a5:4c:36:4d:02:a8:32:a9:a5:f9:03:
db:55:b3:4b:c5:e1:b1:7f:f7:f1:30:c7:c1:f9:33:
a6:37:45:30:e3:ae:6f:fc:7c:73:bf:a3:e6:8f:f5:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F8:FE:9D:FA:87:AF:BE:22:50:BC:F2:F9:52:A5:64:AB:2B:D4:D9
X509v3 Authority Key Identifier:
keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e4:79:10:b3:59:1a:19:d2:10:87:76:c0:9e:8a:f2:84:86:
bb:3b:77:5e:45:0c:af:cf:c4:68:a7:e5:4e:66:4c:af:0e:40:
96:ac:43:cf:ef:67:99:d7:3f:93:b9:e9:6f:17:a4:04:d1:df:
d2:60:cf:bb:b0:c8:46:86:98:61:48:4a:d2:25:f7:f6:bb:05:
7a:a3:87:9f:f3:5e:28:3b:b4:db:f7:aa:94:f0:71:4c:94:72:
a4:85:c9:d4:f9:72:4e:c9:88:02:ce:d2:8c:5a:38:44:d7:30:
c6:f2:d5:f4:ea:65:c0:a4:f7:ca:63:57:ce:d8:be:d1:cb:f8:
b3:f2:29:2b:54:d1:1d:b7:aa:50:ed:1d:6f:17:27:9f:91:73:
ab:1f:39:9f:f7:b5:f6:24:4d:58:bb:3f:78:ba:95:25:9c:05:
b5:9a:07:ac:32:f3:20:13:8c:b5:d8:5c:bf:3e:9e:24:73:56:
42:91:fc:a8:38:97:9d:01:48:1f:84:8e:78:0e:6b:3e:01:d1:
74:eb:8a:3b:35:a4:8d:ec:0f:97:eb:27:39:80:ab:7e:c8:83:
a7:36:e6:ca:15:4b:08:2e:31:4d:51:34:ac:d9:03:a3:fe:2b:
71:3e:37:7f:91:4e:c4:79:65:f6:6f:79:55:6d:59:6c:f6:ed:
bf:69:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:16:34 2025 by rpki-client