Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: kb2+5r1yBpxqhGzIy8dIDlusAPDujNNwclHMKqxAEe8=
Subject key identifier: 54:86:81:40:EE:B3:F1:84:18:0D:AA:E1:76:5F:A7:91:62:23:0C:9D
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 0199FBEB6924D2D1387E5A37518A54A80F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 1608
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=)
2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: uvJKpLBQsOMHFaAQNr2qdcivuM37ysoC5lnEc2xNToI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:69:24:d2:d1:38:7e:5a:37:51:8a:54:a8:0f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=54868140eeb3f184180daae1765fa79162230c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:fe:ba:9d:dd:81:18:3a:50:79:45:e4:75:
1f:3d:19:d1:8e:8a:38:11:e1:5f:77:10:8d:00:a1:
22:08:68:d6:da:6f:6d:2f:98:e4:cb:fc:5b:b6:1a:
7c:7c:3a:77:24:d4:69:53:06:7f:78:2c:bc:ad:04:
4e:02:39:b1:ed:09:df:98:10:02:cd:2f:2e:62:0b:
ae:bf:24:82:2e:2b:e3:1f:f6:1a:27:a2:e0:a0:6a:
4a:d6:4d:05:4c:f2:98:16:ca:98:09:97:9b:75:14:
3b:d5:45:e0:e0:21:51:51:2b:c3:89:60:a8:13:5c:
79:6d:cc:d6:d3:f1:15:e1:52:c5:22:af:b0:2c:af:
db:59:48:72:3a:fb:51:77:aa:50:be:42:be:5d:e4:
22:81:de:e9:26:0f:1d:23:cc:18:ce:cf:9e:d3:1c:
b0:a3:f5:ae:c8:f6:ef:98:54:1d:14:6d:f1:4f:07:
36:cb:d5:43:33:70:d2:7d:29:ad:5b:8e:35:3d:4a:
03:85:b3:05:88:93:7d:6b:54:7d:27:0f:83:44:65:
44:9e:ba:bd:e8:92:44:04:ad:08:4c:cd:ec:0d:43:
da:ce:fb:ce:af:ab:37:40:4c:76:cb:3d:bc:d9:f9:
94:6b:e6:e2:b9:4e:de:a5:9f:16:57:06:00:d4:71:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:86:81:40:EE:B3:F1:84:18:0D:AA:E1:76:5F:A7:91:62:23:0C:9D
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b7:73:66:bd:cb:ee:ff:06:b8:8f:c6:1b:18:16:51:0e:2e:
6a:e8:78:e3:46:10:44:cd:cc:66:83:54:36:16:eb:31:a5:52:
ce:04:bf:9f:25:1f:cc:c4:d6:02:14:46:d8:5b:83:33:25:59:
28:ba:f3:11:43:d9:89:67:15:b6:75:64:12:4d:4f:f5:d9:75:
99:f7:21:4a:d1:da:5a:62:c7:ea:aa:9c:33:fd:e6:d6:e8:cb:
50:18:ad:fa:b3:37:56:f1:bb:b8:3e:0c:d0:59:b1:45:99:c3:
61:a9:54:b5:3a:b0:5e:9f:31:3c:8c:0a:5a:d4:97:20:8a:b3:
eb:83:96:9a:db:8e:c0:e1:68:3a:e7:60:f9:ae:87:63:2e:ea:
2e:35:78:b4:49:dc:8b:4e:df:62:7f:a8:c5:7f:0f:29:3b:72:
d7:50:79:3e:13:90:c7:62:8c:07:56:fc:bb:f7:f5:5e:d7:99:
30:9a:b3:82:f3:36:9b:37:98:2e:2c:b7:e6:0b:e9:56:e2:d9:
34:ea:e5:f8:ac:11:90:fa:87:a5:64:e0:b8:e4:72:e4:05:d2:
2e:2c:4c:e3:ba:94:af:80:9c:1b:e1:d0:98:21:d4:b6:13:20:
cc:2c:9b:ba:07:e1:14:ec:21:e1:a8:28:15:4e:78:86:7c:f3:
60:56:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:03 2025 by rpki-client