Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File: RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier: yM2YEI2HceShC1NCI/0m1kWiVerJSIfwZMpOZ1g37Qs=
Subject key identifier: 2D:C6:86:4A:A2:7A:25:E4:90:15:A7:15:CC:7D:6F:A5:A0:C3:CB:F8
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial: 019A4FD01D62D98F6D889DA12A1C6AAFE5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number: 0AFD
Signing time: Tue 04 Nov 2025 17:00:30 +0000
Manifest this update: Tue 04 Nov 2025 17:00:30 +0000
Manifest next update: Wed 05 Nov 2025 17:00:30 +0000
Files and hashes: 1: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: 6eoovzOw+84mjdkmm9AO5QzYxruf9m/j+cEKGrjTU6c=)
2: lbF_l02xwlPuqyIyhvc-CUJUU3g.roa (hash: 7hIs2Gkxh47foaseC5DC1sFgdBVuaxJrQVf2xLhJkbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:1d:62:d9:8f:6d:88:9d:a1:2a:1c:6a:af:e5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Validity
Not Before: Nov 4 17:00:30 2025 GMT
Not After : Nov 5 17:00:30 2025 GMT
Subject: CN=2dc6864aa27a25e49015a715cc7d6fa5a0c3cbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:ad:19:ff:b7:94:66:2d:54:d2:1b:cb:56:
26:85:85:ea:ff:49:0f:44:04:e0:94:64:eb:6e:c7:
4d:aa:68:c8:70:a2:f7:20:ca:cb:da:c0:5d:70:fc:
3a:4a:3b:e4:d0:bc:4d:1f:7b:b3:a5:eb:3f:d5:ac:
75:fc:e0:41:82:11:62:a4:b4:03:77:8a:28:99:73:
7b:1e:35:8e:2b:49:00:69:f2:d7:6b:6c:15:24:ff:
5c:ef:90:34:3d:66:98:4b:9e:c3:51:79:91:8a:4c:
e2:4f:49:83:dc:e7:10:2c:5c:1d:f7:e9:81:82:25:
a5:04:c3:5c:94:1f:5e:09:bc:57:9d:85:23:db:0d:
26:98:d3:90:c3:e4:88:7b:53:67:6c:eb:0e:bd:f3:
b5:22:c5:c4:c5:53:2e:70:0e:e1:f3:50:79:63:26:
f4:53:4c:98:b5:6b:95:45:e4:77:01:8e:01:75:85:
c7:03:0a:bb:4a:ee:e0:c9:45:d5:5f:cc:f2:e7:83:
9a:83:85:50:12:24:75:b4:a7:0a:13:86:87:53:3e:
de:4a:34:f2:b4:5e:df:34:60:7b:25:57:fd:47:04:
ab:2a:a7:9d:b4:ec:7c:75:9d:b0:5a:d1:59:96:9e:
ba:6e:2d:ba:e3:db:99:a3:74:5a:64:b2:85:0d:a0:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C6:86:4A:A2:7A:25:E4:90:15:A7:15:CC:7D:6F:A5:A0:C3:CB:F8
X509v3 Authority Key Identifier:
keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7c:1f:a8:a3:21:7c:e8:ff:32:0f:fc:7b:4c:84:7d:85:dd:
7a:30:4f:e1:c3:57:19:fb:4a:c0:b0:4c:33:d3:1a:f4:18:d6:
c4:e9:1c:23:06:b0:77:0f:d8:6b:f0:87:6e:55:2b:dd:61:16:
3a:e2:6b:14:d1:2f:3e:bc:99:ca:28:e8:b9:6d:5f:1a:1b:eb:
c6:e1:52:a3:0a:cf:7b:d7:9b:a3:a1:35:7e:cd:14:58:b2:d8:
3a:6f:1f:ba:01:16:20:f9:6a:aa:cc:76:07:ad:b7:20:d1:a9:
7b:22:79:e9:0f:e2:71:8d:96:b6:8e:d9:93:32:1a:7b:c9:95:
95:a4:0e:eb:69:ff:19:a5:5d:5b:0e:2e:63:0c:10:91:7a:04:
ad:b3:56:cc:79:8d:cc:d8:d8:bb:a1:9c:e3:ce:0b:4e:e2:de:
d5:73:d1:c4:64:2a:db:05:ce:2c:99:75:e4:2a:88:71:68:4e:
8e:cd:a4:ef:be:36:fe:0d:9b:31:15:6b:2b:3d:4d:c7:56:85:
39:8d:13:e7:3d:83:1c:3a:13:43:2a:ac:ff:09:47:17:78:23:
be:16:28:dd:4d:03:63:77:63:e4:61:66:45:03:b3:d6:03:7b:
77:d5:71:8b:d0:bd:54:d0:76:c6:a3:0c:91:95:a9:fe:8c:dc:
6c:b1:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:08:07 2025 by rpki-client