Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: Witsj6co1zhII2NTSQK5BheVxEzNMZleJJWxhlAq6vc=
Subject key identifier: BE:3A:75:9C:1D:24:56:AA:E6:CD:C7:BD:87:38:30:1B:36:D6:68:4B
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019A50E3295F0CF1091CA1FE64F392417A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 22:00:55 +0000
Manifest this update: Tue 04 Nov 2025 22:00:55 +0000
Manifest next update: Wed 05 Nov 2025 22:00:55 +0000
Files and hashes: 1: DWjeKEhsrCMQSkqXSu5F6-_lK2c.roa (hash: E/1JJ03/M4DXDyCYKLov4LZTD3sgsbYcGtynvXI+0ao=)
2: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: 0TDNxhpTYfJzCbQCOHCBNiQc3DXCq5kxX8iBa6BquxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:29:5f:0c:f1:09:1c:a1:fe:64:f3:92:41:7a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Nov 4 22:00:55 2025 GMT
Not After : Nov 5 22:00:55 2025 GMT
Subject: CN=be3a759c1d2456aae6cdc7bd8738301b36d6684b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:d9:87:92:f2:4a:d8:e4:ef:07:32:da:5f:
df:8a:35:f7:95:d3:9d:5b:91:95:13:47:3b:8e:09:
ed:2c:19:f8:17:25:23:88:2b:f6:5b:7b:0c:d4:3b:
e8:40:13:ac:fd:cd:fd:2a:2f:f5:86:7e:62:fd:8b:
8c:53:5c:7c:5f:f9:d2:d0:cd:e8:2a:fa:ce:8e:be:
4a:a3:80:75:a6:e7:9d:c3:f3:bb:5e:76:f5:14:49:
4a:28:a6:d6:cc:9d:87:e0:9a:ef:c0:a7:df:ef:1c:
0e:6e:45:28:94:d1:79:3c:8d:84:8f:c9:f5:ff:6b:
0d:c0:a7:5b:6c:09:cd:b2:be:77:6c:89:76:24:39:
8d:aa:5e:e3:fe:c5:dc:0a:16:d3:9f:18:95:d8:af:
78:6f:d5:0c:1c:b6:f2:ff:32:b1:9f:77:de:9d:92:
cd:2f:f4:ca:38:d9:21:08:c7:e2:29:20:2f:a1:69:
d3:2b:8c:a2:31:7d:c9:5c:80:ce:90:29:0f:fa:99:
a7:25:d1:20:0b:a4:7b:ca:8c:23:e6:76:0d:3d:ac:
b8:7f:76:aa:d8:24:53:1b:13:bb:91:ba:7c:d8:35:
ff:ef:4e:d7:65:07:61:43:72:e6:b7:91:d8:aa:ff:
db:9e:40:5d:ab:a0:26:fa:35:2f:ba:de:f1:63:fb:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3A:75:9C:1D:24:56:AA:E6:CD:C7:BD:87:38:30:1B:36:D6:68:4B
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:98:07:2d:52:e7:e4:30:85:18:b7:c9:32:c0:b2:90:69:03:
13:8e:ef:7c:f5:42:57:94:94:d6:dc:37:14:eb:8f:ce:31:58:
45:87:31:1a:0c:ca:6f:c8:6b:45:0a:a8:c0:26:94:90:c2:a5:
a6:85:4b:95:54:79:41:56:b8:bb:6c:79:0c:3a:8f:c0:64:8c:
1d:e5:9e:be:2b:d3:85:69:f0:13:d7:fa:b4:57:2e:68:f4:c4:
19:3b:0f:5d:9d:4a:26:16:30:6b:18:5f:b5:4e:7b:45:e2:1d:
e2:7c:bc:69:3e:9e:ab:50:1c:ba:2b:0c:18:42:b0:61:c4:30:
bf:6a:4c:42:3a:4a:c3:cb:64:06:16:d6:1c:d3:3c:e4:7a:2a:
a1:c5:32:0e:fd:5d:71:d2:7a:e0:97:38:1f:83:3d:55:d4:35:
19:f4:4a:c1:95:77:f4:21:b5:69:6c:36:8d:50:31:43:59:bd:
42:89:5e:09:b9:f3:b0:6d:24:37:db:e1:93:33:20:8c:13:64:
34:0d:fa:93:17:69:f5:be:8b:0d:90:30:66:09:6b:35:8c:56:
9d:fc:0c:73:41:95:be:2b:a1:1a:98:d6:24:64:93:08:7f:ce:
37:b0:ab:28:92:da:7d:ed:9d:8d:71:98:26:c5:6c:32:5e:31:
22:58:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:08:44 2025 by rpki-client