Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: OgCj2RjVhWvAnb/LeY5Iwph7ebjqA+WY1PyuxJ1s9Ws=
Subject key identifier: 13:BE:3E:C0:45:E4:6B:A0:17:0A:48:FC:33:05:48:6C:3B:3A:5A:76
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019A5150F71C063DD9321625A298637F8322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0B9D
Signing time: Wed 05 Nov 2025 00:00:51 +0000
Manifest this update: Wed 05 Nov 2025 00:00:51 +0000
Manifest next update: Thu 06 Nov 2025 00:00:51 +0000
Files and hashes: 1: XFrF4ZD8RKmENGKuXlNfyh9_oV8.roa (hash: Syc9HmjiF/DkUOhl4IVh1oQ9jwD6L7ptWtUgxSy9ut8=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: h4UnRaEv2nZONECuDjQO0ftOuwQl70SlbCOUGOz+TqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:f7:1c:06:3d:d9:32:16:25:a2:98:63:7f:83:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Nov 5 00:00:51 2025 GMT
Not After : Nov 6 00:00:51 2025 GMT
Subject: CN=13be3ec045e46ba0170a48fc3305486c3b3a5a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:40:95:35:a4:24:71:89:e6:76:17:4f:be:
b9:8c:40:9a:f7:43:f0:13:10:47:fd:31:f6:93:81:
38:e7:98:15:25:a8:f6:02:1b:e9:d5:f0:d8:c5:8f:
2a:76:91:65:2c:2c:00:ce:ed:5c:10:e5:0b:bf:c7:
70:8c:05:ad:4b:4c:ec:8e:1b:2b:00:5a:54:54:1d:
a1:4e:7b:85:a3:24:db:65:26:86:92:3a:5c:f3:61:
6a:70:f5:81:f2:9d:3f:3e:83:d8:3c:9e:12:42:66:
5a:f5:02:ef:d9:c2:ad:e5:05:79:37:35:f2:31:9a:
89:f4:58:6a:b6:8a:1c:c5:51:29:f8:0a:6d:71:57:
de:af:76:21:82:f8:92:86:52:68:3a:49:ca:6c:79:
32:23:80:db:42:7c:5d:d9:20:ea:d3:34:bc:a1:81:
92:2a:71:78:8d:48:13:4b:86:58:6f:76:d3:ca:d0:
85:33:0c:94:d9:4b:8a:69:86:61:92:04:98:4d:15:
49:8d:d3:69:c9:c2:58:22:cb:ec:49:d4:5d:41:98:
0d:da:c0:cc:01:71:0b:4a:8a:12:33:4b:0f:d8:fd:
47:82:98:af:58:d8:1c:c9:16:b0:1f:99:0d:61:30:
b0:9d:0d:88:91:95:9c:1e:a5:66:7d:05:3f:4b:9c:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:3E:C0:45:E4:6B:A0:17:0A:48:FC:33:05:48:6C:3B:3A:5A:76
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:83:b6:38:a9:3c:39:c3:e3:11:03:9e:a2:e9:e7:93:10:56:
bf:bf:2a:f7:13:90:bf:cd:e1:4a:ce:8e:12:06:fc:e8:ab:f0:
34:d7:8c:0c:2d:f6:9c:3a:aa:43:58:66:ab:d4:9a:58:9b:8b:
c5:8b:c4:f1:f9:65:bb:45:89:6f:25:58:f4:24:e9:e4:ed:99:
43:2f:49:d7:72:b1:fc:75:8d:c0:23:53:52:bc:49:72:f2:7a:
5c:f0:6b:17:95:ca:1d:5e:c7:f5:05:6b:09:9a:70:33:e7:f7:
4d:e8:d4:ed:65:8e:f7:a5:36:21:11:53:61:50:c6:13:72:82:
e1:31:0d:04:5f:74:cc:ad:f1:b0:aa:7d:64:10:39:70:d4:6d:
b3:f9:7a:70:ef:a1:8e:05:3d:90:aa:e3:2d:24:7f:6b:de:68:
11:d1:e6:06:c6:3c:f5:92:af:93:c3:29:20:98:8e:7a:81:e2:
6d:6f:2c:cb:95:ee:47:03:10:82:58:73:65:21:f9:da:c6:2d:
81:86:06:19:4d:51:b5:fe:ce:4d:ef:91:5f:22:c1:6a:59:40:
7f:7d:65:99:b4:32:ec:77:20:9e:68:f3:f1:57:28:42:b7:94:
0f:ef:ee:15:c3:3d:82:e9:5b:4f:dd:36:16:46:e8:58:84:e5:
02:e4:c7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:32 2025 by rpki-client