Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: BB2aFHqc+E6ciCDUYu54jWZ1eA+oFKb/1+bpmu+wegQ=
Subject key identifier: 9B:6F:25:0A:3B:DA:2B:75:C1:AE:E7:DE:58:7A:FD:7A:D2:31:91:4F
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 0199FCFDBAEB10B111EF7CE7CD94B001A4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: 0379
Signing time: Sun 19 Oct 2025 15:01:50 +0000
Manifest this update: Sun 19 Oct 2025 15:01:50 +0000
Manifest next update: Mon 20 Oct 2025 15:01:50 +0000
Files and hashes: 1: I0tfv2mZoSq2ysFvBwfbBYWY0JA.roa (hash: yceQ2f4xBd7/pbAxmzYNJmFayAdTupB1EL529XI3SK8=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: T/vbaW38POWYy8DomhtHg266P8Ogl/ltNTa+WGo0kuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ba:eb:10:b1:11:ef:7c:e7:cd:94:b0:01:a4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Oct 19 15:01:50 2025 GMT
Not After : Oct 20 15:01:50 2025 GMT
Subject: CN=9b6f250a3bda2b75c1aee7de587afd7ad231914f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:a5:d7:00:d5:ca:c5:4d:cc:dd:85:4d:92:
77:8e:f7:cd:3c:71:2f:43:d0:9b:03:dd:96:0a:90:
52:e4:c0:af:f1:43:fa:9a:32:7b:5a:3a:f7:90:ed:
06:21:c7:26:05:7d:64:e2:c4:dd:03:25:3f:c7:a3:
d4:4d:b7:f4:86:0b:8d:c1:54:ed:6d:5a:b7:e1:f5:
0c:ed:d5:8d:d3:6d:f2:9c:70:3c:37:9a:0f:06:2c:
da:db:81:48:6d:2c:d5:19:67:0c:1d:1f:da:3e:45:
f1:5e:51:5b:bb:70:a9:9d:bf:23:ae:24:c9:b5:0e:
f5:89:b8:1f:2e:97:05:d0:2c:f9:8c:e3:0d:8b:0d:
3d:75:93:8b:d3:42:e2:ce:3f:6d:a6:41:a7:bf:8a:
49:ff:97:54:cf:3c:13:d7:2f:69:36:fd:25:55:67:
fc:db:f8:b3:ba:3e:2b:03:95:41:c4:da:16:40:f3:
9c:b4:5b:4f:cc:d8:49:7f:25:6c:b4:bd:9f:95:49:
62:6e:9b:65:ce:f7:b8:1c:bf:fb:a8:55:9e:87:b5:
f6:ba:38:24:e7:f7:34:8a:13:da:55:c5:67:e1:46:
57:ee:72:7b:e1:5b:33:92:06:6e:35:c7:31:51:bd:
d0:c8:1b:d6:a1:f7:f0:74:c3:99:3a:ce:05:f1:d9:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6F:25:0A:3B:DA:2B:75:C1:AE:E7:DE:58:7A:FD:7A:D2:31:91:4F
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8e:99:bc:fd:9a:b7:12:dc:27:56:1d:8e:56:4f:7d:88:3b:
65:bb:bf:53:55:45:d6:69:de:e3:a9:1d:6f:a0:a5:42:a4:4f:
c0:c1:85:a1:bd:c8:f6:f4:e0:5c:73:4d:55:6c:05:71:b5:6c:
99:24:0c:fb:dc:87:03:a3:78:a1:e5:ad:7a:a7:d5:66:21:45:
4b:b2:4d:cc:da:1a:12:c4:47:1d:8a:b4:4f:d7:11:8b:5c:37:
d6:f8:32:c4:98:c4:7e:6b:35:48:ae:b6:40:37:51:bb:d6:f8:
7c:5a:96:c7:cc:52:1d:b2:8d:11:a9:9c:f5:9f:b4:65:2c:48:
38:8d:8b:32:8d:37:42:ec:53:66:53:39:6e:1a:4d:af:cd:74:
ab:f2:09:c0:9b:b2:20:7e:c2:f5:94:d4:2c:de:48:d4:c3:b2:
4a:b7:ab:7f:76:04:e7:80:9f:48:03:19:45:10:79:cb:cf:7f:
df:fd:b5:9f:8a:78:c2:18:10:4f:ba:a8:6c:a1:14:2d:e8:94:
70:19:a4:a0:b4:ed:20:28:04:d6:26:ed:3e:e1:19:e2:5f:1e:
2d:08:5a:7c:9f:41:70:d8:14:39:e3:ad:1b:97:e7:1e:d9:2b:
6d:f8:60:94:ff:eb:cc:6a:23:d0:82:bf:49:fc:ca:b1:f8:25:
8d:88:ff:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:29 2025 by rpki-client