Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: qEqFjyvLFsX6X0MBsjsui3FNbTaI9mLTwwWOm0mItkg=
Subject key identifier: 9F:25:E4:0C:91:3C:F4:59:78:20:DD:80:C7:78:BB:9E:7C:3F:9B:5D
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 019A4F2AFABAD1B0EAF5EB9AB9C40E57796A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 0FEA
Signing time: Tue 04 Nov 2025 14:00:08 +0000
Manifest this update: Tue 04 Nov 2025 14:00:08 +0000
Manifest next update: Wed 05 Nov 2025 14:00:08 +0000
Files and hashes: 1: X8wL7IEItggqG87hU2SRjhDFo0c.roa (hash: Z7Uz5pUQbhyO7q39OnET5F24kmKZzxNrZzpSD8G3ebQ=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: QsHUY1s4sLNqmwomz7CBEXcj3dzYstTHJTlX5krv32k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:fa:ba:d1:b0:ea:f5:eb:9a:b9:c4:0e:57:79:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Nov 4 14:00:08 2025 GMT
Not After : Nov 5 14:00:08 2025 GMT
Subject: CN=9f25e40c913cf4597820dd80c778bb9e7c3f9b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:c3:ab:51:b6:62:c4:dd:75:18:40:bb:b8:
45:cb:c4:82:05:5d:af:ef:00:7e:5e:c1:ea:c0:13:
be:ae:5c:63:2e:a9:c5:0e:5d:5b:1f:9e:67:85:d4:
d2:73:5a:5e:32:04:53:39:39:1c:cd:38:10:bf:75:
30:81:71:45:f2:fb:76:c7:34:0c:fd:3a:6a:15:96:
c7:ef:d9:99:e3:bb:7e:85:45:a7:02:f3:2f:0b:35:
6b:d8:3a:5c:3f:2b:04:0d:64:87:48:45:55:53:04:
b9:f8:46:47:d4:08:df:61:53:b9:9d:f3:a0:0e:5e:
5f:eb:28:45:78:43:89:4a:e8:0c:a8:10:b6:f2:7f:
0d:3e:7a:df:e8:4e:af:06:b9:95:4f:1d:37:bd:c9:
74:f3:75:79:20:91:6a:f5:66:cc:4b:9e:8e:06:1a:
ac:44:06:9c:c7:51:36:83:0a:36:6e:03:8d:6b:e8:
40:6c:0c:4a:bc:1b:48:e9:ec:5c:11:b7:42:a6:d6:
7f:0a:5f:1c:4f:6e:8f:2a:5c:e1:b5:f2:70:94:45:
7f:ae:33:6e:b9:59:73:15:ef:53:8d:e9:a7:dc:3d:
5e:5b:92:85:c1:b0:60:bb:43:cc:17:40:bf:ed:76:
46:6e:09:34:71:c5:f7:40:88:e7:98:5c:62:64:84:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:25:E4:0C:91:3C:F4:59:78:20:DD:80:C7:78:BB:9E:7C:3F:9B:5D
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:11:19:20:e0:ed:18:b6:ef:06:13:b0:59:10:14:cc:0e:83:
35:b8:6c:be:b9:3b:72:a0:c5:6a:ad:9b:99:45:e5:e2:55:fe:
ee:86:ce:db:fe:d9:02:bd:20:aa:ad:24:50:25:ee:20:99:78:
c8:86:9c:87:dd:9e:38:24:a9:6c:a5:d3:e5:f9:91:7c:be:21:
73:8c:9f:80:ab:0b:b0:43:6c:e2:16:91:7f:b5:cd:c4:68:e7:
ef:3b:09:07:4c:28:27:5c:3e:c3:52:d9:90:bc:4f:0e:9b:14:
a3:b4:33:c8:cd:75:88:19:3d:69:ac:3f:07:a9:96:16:e4:5e:
4d:ff:ce:68:ff:1c:5d:e7:c4:6e:68:5a:e3:67:e7:9c:97:c4:
e8:2b:49:e5:37:93:1c:15:87:db:4b:ff:f0:0e:1a:2c:c4:68:
01:fa:c5:3f:7d:12:33:1c:b1:3c:98:d4:5f:03:d9:06:44:c9:
db:9f:b1:29:68:37:e8:dc:50:55:e7:fd:a0:1d:b8:bf:47:96:
b7:3d:d8:dc:a4:bb:52:b2:9c:19:d0:8d:41:ab:6b:66:44:fd:
27:f9:4f:7c:60:cb:f9:56:fc:e3:4d:94:8f:d7:31:e9:48:c0:
d6:b1:24:e2:00:ca:47:ae:94:5c:81:75:60:15:14:ea:9b:26:
d4:a2:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:48 2025 by rpki-client