Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
File: KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft (raw, json)
Hash identifier: FZH9dWQy9FBDZYf+NY8C8VxeYSZBA3CuUAsfWmyuoLk=
Subject key identifier: E7:E8:0D:2C:D2:B6:72:FE:13:00:64:F7:2C:9E:05:40:C1:D7:7E:2D
Authority key identifier: 29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
Certificate issuer: /CN=29184647248b55523999cbb7fe5b20a99fe73be3
Certificate serial: 019A4F5B6D9981054F500AD37DA5C79DEBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:53:03 +0000
Manifest this update: Tue 04 Nov 2025 14:53:03 +0000
Manifest next update: Wed 05 Nov 2025 14:53:03 +0000
Files and hashes: 1: KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl (hash: Rve78X1Ir227n/Uku6ugzcRrZImBuYeZ2cjCgQcy+uU=)
2: be3Xk9pNKz5fO0j2jzivTfhyiiM.roa (hash: bsSd5F64tTbetVVoY+neNE5lEskWYAlXiyMGJS0XuJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:5b:6d:99:81:05:4f:50:0a:d3:7d:a5:c7:9d:eb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29184647248b55523999cbb7fe5b20a99fe73be3
Validity
Not Before: Nov 4 14:53:03 2025 GMT
Not After : Nov 5 14:53:03 2025 GMT
Subject: CN=e7e80d2cd2b672fe130064f72c9e0540c1d77e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:53:75:67:96:cb:98:91:27:79:4a:0a:ca:
c8:54:ff:23:75:a9:7f:22:dc:84:5a:e9:39:42:e0:
38:f7:c5:18:f0:ac:6a:20:f3:ac:59:22:cb:32:5c:
af:06:48:f7:02:68:34:2f:b8:cf:4a:a0:a2:d1:80:
ab:0f:ea:19:16:ae:79:0c:dd:db:71:90:03:5a:79:
e0:26:db:57:ff:f4:22:0a:7b:21:cb:06:63:fe:20:
e3:df:8d:cc:84:38:93:0a:ee:7a:56:9b:c3:e4:24:
c5:80:01:61:00:96:cc:d9:9d:d7:32:b9:89:1c:76:
26:a7:0c:1f:c7:cd:2c:42:67:d1:7e:92:23:1c:e5:
8c:37:e9:d3:5e:1e:b6:16:44:85:c1:f7:d0:a6:e7:
49:4c:f0:8e:65:1a:92:d2:47:30:4c:8f:79:8d:fe:
21:f7:2c:c6:31:04:ba:37:0b:8a:38:af:de:e3:81:
2a:42:60:74:79:29:a6:b9:45:e9:c5:84:15:69:f6:
c3:47:dc:5d:28:bf:88:79:f9:9b:03:5b:1f:03:59:
d5:9f:cc:48:6f:b4:b5:5e:bb:01:5f:2b:d2:f4:8f:
0e:be:41:49:71:d0:1c:fb:29:88:86:38:c0:ce:06:
30:66:73:52:7d:55:57:2e:0d:48:7e:c6:ca:49:e0:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E8:0D:2C:D2:B6:72:FE:13:00:64:F7:2C:9E:05:40:C1:D7:7E:2D
X509v3 Authority Key Identifier:
keyid:29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b7:75:bc:d9:a0:b2:aa:a9:ec:8d:04:0b:90:f2:6b:73:33:
e9:f9:de:c6:37:47:ea:d1:fa:76:40:41:8f:0a:e6:4f:19:96:
09:e5:fe:ac:6b:3c:bd:c1:ee:a8:ff:1a:4f:ba:e9:b1:3d:94:
ef:c5:27:07:84:c9:57:3b:84:a8:7c:86:1a:8a:08:20:ae:61:
6a:af:39:f0:d9:72:41:b8:81:7e:17:08:8e:72:ac:df:99:ad:
01:ac:58:9a:f5:bd:95:97:82:37:07:ca:0c:2b:77:2c:4d:95:
78:e3:72:5a:39:2f:91:54:1e:c4:84:32:f4:01:2d:e5:9c:d0:
4b:71:c1:29:4d:ab:23:e3:da:63:8b:c0:0b:bb:35:47:7a:24:
07:f5:b2:1d:b6:64:25:d3:4e:fc:40:b9:30:41:d1:56:16:59:
e8:f2:d7:7f:9a:e3:20:96:7b:38:92:ee:c4:20:13:72:71:1b:
fc:f6:e3:4d:9e:7b:80:50:b9:48:42:f6:a8:99:b3:f0:ca:0d:
ec:f3:0e:f4:2b:8c:40:59:50:9c:c8:b6:77:a3:15:b9:af:ef:
30:67:a8:38:dc:87:fb:eb:0e:81:54:6d:19:66:8c:3a:ff:aa:
e4:61:a6:a4:68:87:01:0c:41:6a:bc:2d:4c:dd:a8:78:9f:03:
e5:22:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:36 2025 by rpki-client