Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft (raw, json)
Hash identifier: bKs0rQWH8ozWMcAs/zyWxZbVg5UCwqiGrsIfLlDpXfM=
Subject key identifier: 4C:97:18:CB:23:EF:5B:51:CE:44:0F:90:95:61:D5:37:66:ED:0E:8A
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 019A4DE201DACE77BF095828CD313C7F5981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
Manifest number: 139E
Signing time: Tue 04 Nov 2025 08:00:48 +0000
Manifest this update: Tue 04 Nov 2025 08:00:48 +0000
Manifest next update: Wed 05 Nov 2025 08:00:48 +0000
Files and hashes: 1: OI99xasONPPF-hb_rfYbSQdFoLY.roa (hash: UeUlGFKe3vD+30DqhoTEBeaxMmrZwFQuEXKIyXR/8V4=)
2: k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl (hash: Q3omYYFBghC7UdfG5QldhVxFC7htohJhVLx7K8P9EnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:01:da:ce:77:bf:09:58:28:cd:31:3c:7f:59:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Nov 4 08:00:48 2025 GMT
Not After : Nov 5 08:00:48 2025 GMT
Subject: CN=4c9718cb23ef5b51ce440f909561d53766ed0e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:f7:91:0c:91:d1:aa:d0:21:fb:b0:e5:8d:
dc:e4:12:fd:91:c2:9c:0e:78:55:60:45:46:1b:a0:
0f:87:8a:31:7d:f9:9e:07:7c:45:d3:7c:97:43:8b:
ec:29:65:a1:03:1b:45:84:bc:db:5f:9f:5c:79:20:
27:84:a0:2b:47:50:07:a0:cc:49:d7:75:dc:d2:5c:
a4:13:90:ac:e6:a4:25:23:57:12:ac:db:d0:d9:ac:
a6:26:f0:7a:26:87:5f:31:58:b7:9c:4b:bf:41:b8:
d9:bc:e2:76:87:61:f1:53:f0:2f:e9:df:ec:f5:40:
96:ba:0a:0b:21:35:a3:85:68:47:3f:a3:5f:08:42:
97:a4:5a:7f:5e:22:23:0c:49:59:0c:b1:4b:12:35:
b4:29:13:4e:8e:fe:57:9a:60:c0:cb:27:52:da:d0:
36:42:9c:13:01:85:1e:cf:15:ef:6d:4c:61:9a:83:
e9:90:c4:ef:63:ef:4d:cc:1f:66:f2:6c:70:ab:98:
7e:be:76:1a:00:74:40:2e:9e:e2:a9:1a:66:39:d6:
8e:e6:90:2e:6e:09:9c:37:0e:e0:31:a1:31:98:43:
be:82:ee:2d:87:f9:7c:f2:70:e5:ab:a6:15:e1:0d:
83:ad:32:31:20:24:2a:77:2a:1e:53:fb:f9:f7:c8:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:97:18:CB:23:EF:5B:51:CE:44:0F:90:95:61:D5:37:66:ED:0E:8A
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:29:fc:2a:f5:63:79:c7:69:50:a0:eb:4c:05:60:ca:47:6e:
14:be:0f:2a:06:5d:35:99:31:e6:8e:0b:27:55:33:cf:83:17:
b5:ca:3d:a5:0a:3d:b3:8c:ee:e4:51:73:c9:f8:15:e0:dc:38:
1c:da:ff:d7:1e:bb:9b:19:ab:de:df:15:3f:5a:a2:dd:46:85:
56:bb:ec:3c:6c:e0:ba:56:2b:c7:0b:7e:3d:b6:ce:98:64:17:
e1:45:fb:6f:9e:f1:de:80:6d:95:1d:a9:6b:47:3b:4b:31:df:
a3:ec:60:55:75:8c:3b:65:03:47:11:01:44:84:8b:c3:e1:fd:
2c:c3:7c:ea:be:67:6f:37:63:8f:85:07:dd:da:eb:cb:74:ee:
2c:0b:3a:bf:62:24:f1:07:ed:e6:76:80:f3:43:45:c5:0b:47:
eb:fe:0e:8b:68:7d:6c:64:06:2a:4d:17:f2:5d:8f:a1:54:62:
0e:0d:b0:12:5d:a0:07:dc:c8:dd:d0:c9:96:ac:b7:9c:9e:72:
4b:24:c7:8c:1f:39:64:4f:77:4a:31:25:e7:87:36:e1:02:34:
19:11:71:29:92:25:3a:a7:8c:ff:76:e8:86:f9:24:f4:20:55:
ae:6a:f1:f7:3d:3b:16:22:9b:95:bb:4c:8a:35:71:39:12:18:
14:0d:dc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:19 2025 by rpki-client