Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: 3UgUdwFWhHYdq8b7jOcWgOMLE3i0Hzs7Sb3JMucXEAc=
Subject key identifier: 51:55:C2:B9:9C:84:31:6F:1E:9B:A4:2C:8F:0E:0D:8A:72:C9:AB:1C
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 019A4F62974A80BAE69148F0C5A514A48160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 1172
Signing time: Tue 04 Nov 2025 15:00:52 +0000
Manifest this update: Tue 04 Nov 2025 15:00:52 +0000
Manifest next update: Wed 05 Nov 2025 15:00:52 +0000
Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: hwsnuao7C+cmJszyGMd1Wzd19st+oovRhYuX9JMAeco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:97:4a:80:ba:e6:91:48:f0:c5:a5:14:a4:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Nov 4 15:00:52 2025 GMT
Not After : Nov 5 15:00:52 2025 GMT
Subject: CN=5155c2b99c84316f1e9ba42c8f0e0d8a72c9ab1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:bc:76:22:f5:dd:fa:3a:b6:4b:9f:17:e8:
4e:6f:8a:ad:6d:d9:e9:a6:12:4f:1c:b8:f9:a6:dc:
dd:e6:95:1c:af:4e:a0:88:54:65:d6:85:e0:d1:8a:
47:71:ff:60:2e:1f:f0:ec:62:71:b5:eb:fe:f4:48:
7d:ab:c0:2f:8c:83:e7:63:a7:06:5a:22:f8:c8:ff:
fc:29:9e:d1:1d:eb:db:74:a7:d2:37:cb:f6:57:5c:
6f:f9:4a:c7:42:6d:ac:c5:3f:01:92:fd:82:8b:44:
56:61:ad:0e:7f:64:d0:be:2c:b9:d3:6d:00:ba:bb:
ac:15:38:39:29:96:f2:0e:b6:ed:a6:ee:c0:dc:e5:
a5:e6:7f:17:4a:a7:b0:0c:cd:65:14:3b:ba:5b:84:
4a:27:35:8c:6b:a6:02:6a:ad:b9:51:1a:12:75:76:
ce:ea:42:f8:a6:87:4d:4c:f5:4a:26:03:66:e4:82:
fd:a9:8f:e5:af:11:52:41:fe:ff:fa:17:7b:ac:0a:
3a:a2:6c:2d:bd:ef:0a:84:df:0a:8f:f5:76:d6:8a:
05:54:55:48:74:4b:63:33:da:d3:d9:0f:44:c3:5e:
5c:5a:2a:07:38:fb:9b:e2:81:b2:9a:4c:04:bd:c4:
49:5a:05:ef:6c:22:e4:49:57:05:1f:7f:a7:1b:6c:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:C2:B9:9C:84:31:6F:1E:9B:A4:2C:8F:0E:0D:8A:72:C9:AB:1C
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:40:5d:5a:0d:7d:e4:92:be:8c:6a:bb:0a:42:9e:da:ff:ad:
a3:e9:8f:7b:eb:58:22:b7:f1:3f:a5:c7:25:ee:f0:3b:ab:c8:
b4:54:67:39:34:b2:80:57:71:45:cb:2e:2b:6a:a0:cf:a0:9d:
16:1c:ee:af:8c:a7:78:e7:92:3b:46:11:9a:69:82:48:ea:ca:
46:19:8b:f4:03:3c:3a:9f:4b:b8:35:1e:99:28:cd:94:1b:3c:
f4:7f:61:b2:b6:a7:18:94:a2:24:50:52:bc:77:29:8f:3a:ec:
b3:fd:db:3a:6a:2b:3d:44:cc:5b:68:a1:cf:e9:ad:e7:2e:79:
c8:53:7a:98:73:7a:66:a2:e9:31:4c:75:d2:ff:1a:61:fe:b8:
f0:77:5c:b4:4a:ee:20:8d:4d:83:20:2b:3c:25:21:33:b2:98:
64:a7:f5:b9:8b:c5:e0:fd:34:94:1a:33:b7:46:62:36:3b:10:
25:1e:b6:45:10:85:ae:f5:2d:23:eb:7a:b5:25:b3:a1:72:ff:
42:bf:1d:90:91:38:d9:0c:6d:b1:46:19:dc:4f:64:54:d4:57:
85:f1:3d:b4:f0:ee:66:42:40:a3:45:c3:fc:eb:55:c4:6c:ea:
f8:78:f0:86:1f:5d:2b:6b:a6:32:91:8f:08:ba:46:64:f5:3a:
8b:57:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:01 2025 by rpki-client