Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File: KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier: jTBazPmRI1fr+mOWX/KsJJxylRSl9w5h4oLTSJisNzY=
Subject key identifier: A1:84:9B:CD:F5:3D:D2:D4:90:3B:0A:D6:EE:3C:71:46:BE:B7:74:72
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial: 019A507515473EDF70A61E42397BBB4080DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number: 0AC0
Signing time: Tue 04 Nov 2025 20:00:41 +0000
Manifest this update: Tue 04 Nov 2025 20:00:41 +0000
Manifest next update: Wed 05 Nov 2025 20:00:41 +0000
Files and hashes: 1: IrngZwNeCRKtAoxB4sjafysXZOU.roa (hash: F88BOJPqoOgD37Dontv64Q9dEIIVW8ruH+Ll3zUdJ5A=)
2: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: +PQt16DzsgixoBAowgn52IjbDXGI0EMdLUnjzYMT670=)
3: fLPcJ1RIjba-u72cjm954X9WUC8.roa (hash: 5ctmy3KSPkOthc06xHFkUIcKR/lSHvthuixFmuKfgFo=)
4: kkAK_iZPZkQ3SU5RdHZU1RDOfeU.roa (hash: W2MujiWrNHHsLvMLkdeEzpSgSuXzmOtIKkDO9DQfbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:15:47:3e:df:70:a6:1e:42:39:7b:bb:40:80:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Validity
Not Before: Nov 4 20:00:41 2025 GMT
Not After : Nov 5 20:00:41 2025 GMT
Subject: CN=a1849bcdf53dd2d4903b0ad6ee3c7146beb77472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:fa:45:01:45:22:f5:a0:15:80:5b:ea:65:
30:e6:13:1e:5b:c3:67:55:9e:13:be:30:61:cf:1c:
5c:5f:8a:aa:82:51:73:5a:4d:b4:a9:03:64:98:ab:
c2:bc:44:81:03:06:3a:4f:dd:51:af:35:16:e8:95:
0a:7c:e9:1e:fc:6e:45:d5:1e:e9:44:41:5c:b6:22:
cb:bc:34:ad:22:58:03:bc:dc:13:f6:ed:4b:69:d4:
61:ea:11:32:a4:5b:e3:4a:9b:42:52:c3:eb:84:53:
15:bd:67:f7:30:38:fc:47:51:be:9c:53:0b:89:71:
ef:8e:3e:f6:32:7b:01:b3:76:7b:65:68:f2:57:1d:
de:2f:48:a9:42:67:9a:5e:9a:b4:7f:e5:a4:ea:b8:
75:3c:c9:33:6c:aa:28:83:75:80:ea:01:6f:50:e1:
9f:cd:d4:98:51:ea:e3:d6:e0:92:33:0c:37:84:c5:
75:77:c8:6a:5e:4c:cb:c3:a3:f5:30:87:90:b5:0d:
71:a8:56:47:07:0e:3e:27:bd:12:a4:06:56:2b:bb:
fe:e1:b3:88:17:d3:59:a5:79:5f:d6:31:37:0d:7b:
09:8e:0b:b8:99:0b:55:29:21:23:04:77:5d:30:d8:
b6:7d:49:43:c8:f5:f3:77:1e:74:ec:f6:60:ff:e0:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:84:9B:CD:F5:3D:D2:D4:90:3B:0A:D6:EE:3C:71:46:BE:B7:74:72
X509v3 Authority Key Identifier:
keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b6:28:60:50:da:24:e8:5a:a5:53:31:17:54:85:b0:5f:57:
69:ea:d6:f7:96:61:11:d2:f3:1e:36:5e:b0:bd:8a:77:ad:16:
9f:78:93:17:0b:13:70:c4:d7:4a:ca:42:af:f6:4e:03:94:9f:
d2:d5:8b:7c:f2:92:69:19:a2:f6:ad:6d:53:bc:f0:a2:18:9a:
6d:07:29:60:f8:85:30:aa:37:2f:78:2d:ed:ef:cb:5e:d7:da:
0d:f0:28:73:93:fc:66:17:b1:ad:36:a6:07:4f:9c:29:86:64:
bc:37:20:80:91:c3:ee:19:bf:b6:54:96:07:aa:87:28:fc:bb:
54:c1:bc:c7:e9:74:44:57:5a:0a:7f:d9:29:25:38:17:c9:7c:
7d:1b:83:5f:29:1f:a9:f1:52:bc:85:74:f3:47:4a:bd:61:ea:
87:ce:e0:ae:01:ad:bc:7e:79:d7:40:b1:16:e0:25:76:53:3d:
7c:d3:fa:0c:eb:21:74:7c:a5:cf:34:e8:c2:69:94:a4:f6:53:
4a:07:b9:e1:5f:1e:ec:b8:a3:46:0d:dc:ca:df:24:43:24:08:
4c:cd:c3:a2:7e:cb:93:84:96:85:ee:41:eb:9a:97:1b:a7:59:
2b:8e:08:a5:f9:77:7d:c0:a2:4d:52:dc:be:de:db:0f:6f:fc:
1b:07:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:16 2025 by rpki-client