Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File: klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier: 7q5mXgumw2WkZKQpClO8YHoMpeOYdQGcoOYKecieDPA=
Subject key identifier: 76:0C:4C:07:98:B1:2D:35:1C:8C:79:9F:A5:CC:8B:A6:61:C5:B1:CA
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 019A4F2AF635CF720D2BFDCF7E0244CAF0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:06 +0000
Manifest this update: Tue 04 Nov 2025 14:00:06 +0000
Manifest next update: Wed 05 Nov 2025 14:00:06 +0000
Files and hashes: 1: 0cwv1kps50n5fxH17jZ6DrIm1N0.roa (hash: undM2lyLTll3NMITFEXa/JcW5GP1KelrAOfh7Rau6zQ=)
2: DFcDai4MmMP-4I9ZmvHSmiuuiVo.roa (hash: P1EgClV7bkG9omjLGc5Uu3/ShqO9L3Dji7Yyz/EuHLk=)
3: V_xEHpefO5u5KSTu-XYSWan-kRo.roa (hash: jYILx7U+IDJR4gLw2si3w1xLilgSY3Xi257sg6Z15eA=)
4: Z26jB8MmkVPCobutKSYkZRRffSw.roa (hash: jtYR3qZJ5WEi/+pEZva2m9kUb9g5HMevovBDi8SuUfU=)
5: e1u7bA6PuDBeHm9U9nKjSLDhACw.roa (hash: DvBt+9eFN/dfM+tx+F5jn+yDWZNZsODtMhC5M+LFI08=)
6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: XbHih/h2v/jyv+V2ynBY4Zvg27ExpVtexo+C1vimEmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:f6:35:cf:72:0d:2b:fd:cf:7e:02:44:ca:f0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Nov 4 14:00:06 2025 GMT
Not After : Nov 5 14:00:06 2025 GMT
Subject: CN=760c4c0798b12d351c8c799fa5cc8ba661c5b1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:fa:54:06:61:e2:7e:c5:77:40:53:5d:5c:
f9:2f:94:cc:b6:fe:56:88:63:0e:c0:ae:5e:ca:66:
b8:f0:f6:f7:9b:62:97:09:45:58:1e:74:a4:c9:94:
80:dd:6b:7a:7a:45:63:b9:bb:8b:1e:22:a3:a3:3f:
47:93:f9:f6:f8:ef:ab:bc:73:34:cf:11:3e:d2:72:
62:be:0b:53:3f:cf:5d:7a:34:9b:f4:e9:73:9d:23:
29:1e:c6:f9:56:13:e8:0a:08:2a:8f:9c:26:7d:09:
d9:4d:ec:51:7d:24:0f:6c:ad:73:08:fc:c7:2d:12:
ff:ea:f2:19:7e:a4:49:4b:d5:3c:60:15:8c:8c:f3:
01:57:0e:9e:3a:b0:f7:82:75:f8:73:dc:f7:b4:e7:
40:3b:2e:d6:e4:55:a2:c7:04:94:6a:fa:1d:48:19:
e4:cd:89:c1:63:21:f2:ea:eb:53:a9:3f:aa:a9:fa:
7e:36:60:a2:0f:98:c8:ae:86:24:78:de:27:e4:86:
09:e2:25:0f:00:78:3e:22:40:6a:f1:0f:de:6b:e1:
22:01:7b:57:57:72:a3:ae:71:69:59:63:ed:8a:ae:
7d:ad:8c:a8:79:43:06:97:2b:41:15:9b:17:aa:7e:
6c:5b:d5:1d:f2:6c:71:3b:7e:1c:9e:bb:d0:3a:fc:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0C:4C:07:98:B1:2D:35:1C:8C:79:9F:A5:CC:8B:A6:61:C5:B1:CA
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bc:a4:fd:44:fb:2b:fa:81:a8:b7:4a:70:d3:6a:da:14:58:
03:4e:ac:03:a6:f4:47:7a:61:2d:54:ec:75:bd:86:cd:d3:9f:
b4:4c:a0:f4:31:01:f1:d6:61:25:48:4d:3c:ee:56:d1:c4:81:
9b:46:08:9a:a8:57:13:2a:90:58:1c:2d:1c:cb:50:f4:e9:91:
49:cc:2c:13:c3:ac:2f:d3:e8:ba:96:b4:af:f5:d2:5e:66:9a:
c1:ad:80:a3:8c:49:ae:ef:b0:c0:1a:41:c6:3b:10:ec:fe:95:
f5:f1:b1:6e:90:72:4a:8c:9f:dc:50:bb:0f:e4:5d:fa:e9:e0:
98:61:58:96:32:a1:0c:3b:b7:f2:3b:a2:a6:9b:58:20:3d:0b:
11:0b:e1:51:32:d3:4f:18:65:11:63:be:f6:81:d6:c0:9a:ac:
8e:c7:33:0e:06:ee:e3:cd:b4:09:d1:95:05:71:6b:a1:aa:cd:
17:70:5f:66:66:1f:b9:46:ab:a0:70:6e:cb:04:33:28:a0:e2:
51:b5:cd:e7:b5:a9:f8:cb:f7:57:03:e9:d2:ae:b7:94:2f:e8:
ac:6c:58:3e:78:64:ac:e4:7d:11:15:6a:0b:a3:bd:8b:98:bb:
9f:1b:50:11:62:38:75:66:49:3e:90:5b:95:f9:14:0d:14:4f:
3d:6f:f1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:57 2025 by rpki-client