Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier: zpjyrskxp/oJh4kc6KhP3SmuKiWc8+468g5hP1z0uxQ=
Subject key identifier: D9:81:00:0E:06:EA:67:A4:A3:65:AE:10:44:18:D6:27:53:69:13:AA
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 019A4EF4D8DD123F3AB10F025726196BC3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:00 +0000
Manifest this update: Tue 04 Nov 2025 13:01:00 +0000
Manifest next update: Wed 05 Nov 2025 13:01:00 +0000
Files and hashes: 1: eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa (hash: IgyAOYuvEIPEY/4VEwvCRv4xZp0QVNPeSnZmgWxYe1k=)
2: hSwwAZmeTaolcY9O9J-gjnCspyc.roa (hash: GT5DIH9LX8Y0Myj2ZdVG14Q8npex7JbrhTK4BHXYqYY=)
3: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: R3xQmSCCyX02bnr5rlzJhhCQfNXRtnppkG/ABn0ug3o=)
4: rPhc70wdg_DNFy8p_DFC0TNrzZE.roa (hash: izXtXZXXy5nvEOdPnUDtBt7NCMNBYID7xzPo2/E3HvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d8:dd:12:3f:3a:b1:0f:02:57:26:19:6b:c3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: Nov 4 13:01:00 2025 GMT
Not After : Nov 5 13:01:00 2025 GMT
Subject: CN=d981000e06ea67a4a365ae104418d627536913aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:7e:ec:25:20:fd:4d:d2:40:c4:0d:75:6f:
cd:5a:39:73:da:98:5f:2e:ca:9e:43:29:9f:7c:9d:
e7:d5:70:7a:05:24:36:93:ce:6e:6d:e2:9d:b5:b4:
6e:22:93:13:a7:a8:d8:2e:d3:f6:25:14:b3:84:f8:
2b:60:4e:57:a0:4e:71:a4:28:50:ed:3e:e4:88:9c:
bd:cc:f5:75:f3:0d:ef:7d:a7:72:9e:76:43:8d:17:
cc:e6:04:32:e6:e3:b9:93:a4:16:1c:58:70:5f:be:
95:ec:1c:e3:80:cf:7f:94:68:d5:08:9a:11:33:b9:
4d:60:0d:84:cb:fe:d7:b6:ef:ac:ba:e9:d4:24:5d:
ec:e9:ed:8d:9b:f8:17:fb:33:f9:79:56:f7:9d:25:
c4:44:6d:7f:a9:bd:1f:0f:35:bb:13:57:73:d4:d6:
bd:1d:a2:20:67:0d:51:08:ee:37:cc:2b:48:ee:66:
72:9b:50:a8:52:35:f1:e0:6e:2e:50:7a:fa:04:db:
99:66:11:3c:55:40:71:50:af:d5:1d:56:ac:99:1c:
bb:bc:68:a1:e5:09:e2:77:26:63:39:47:51:b9:17:
53:9c:7c:82:98:1f:92:3b:87:78:4b:44:b2:36:2c:
9a:f3:ed:4b:51:37:a2:93:c6:f4:38:fb:2d:11:16:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:81:00:0E:06:EA:67:A4:A3:65:AE:10:44:18:D6:27:53:69:13:AA
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f2:a4:3a:1b:a3:f1:7a:69:97:ef:95:71:e0:54:bf:ad:e0:
36:51:95:b6:f8:19:bd:b0:33:c9:5c:2e:04:cc:17:d6:5b:65:
7e:43:c7:aa:c7:1b:4f:85:f5:a5:15:cf:cf:c2:02:50:fb:a2:
34:28:70:d5:7d:44:64:a3:49:51:0a:7e:65:96:da:8b:61:10:
de:65:83:50:3d:eb:06:24:66:af:f1:c2:0e:d9:83:20:f6:40:
7e:e7:71:91:f6:eb:bd:ae:10:b6:5b:e2:24:fb:48:c7:a1:14:
17:92:ba:47:e9:35:9c:42:df:84:0c:99:1a:fb:18:ec:c1:90:
5d:f7:3d:7f:d2:ea:09:0c:e0:2b:75:88:75:27:4d:39:0f:27:
35:b8:0c:de:1b:a0:0f:cb:2f:cb:a1:dd:a2:8a:08:b1:9a:44:
55:17:f1:de:e3:8f:17:43:69:c0:66:b2:bb:73:7f:ec:0a:3f:
b2:40:88:ed:ef:ae:71:32:9c:27:3f:eb:11:38:21:c9:b4:b8:
df:b6:90:07:f4:ec:c3:c4:9b:9c:b2:20:71:c4:38:7e:68:7e:
80:a9:79:51:3b:fc:5d:f2:a6:ad:6e:7c:3b:5f:59:94:ba:ec:
b0:e1:7b:89:0f:41:e1:69:90:ec:80:9a:86:23:f9:8e:50:e1:
8f:64:10:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:07:29 2025 by rpki-client