Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File: k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier: hVxqxCyUwvYwL/2fI8xfKxksLAu05oS7D7CtDeAZm3A=
Subject key identifier: 07:62:33:06:07:80:EB:D5:8E:79:16:89:47:08:8A:F2:82:4A:BF:3F
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer: /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial: 019A4F2AF68A964C1F8634E88A1933297E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number: 0645
Signing time: Tue 04 Nov 2025 14:00:06 +0000
Manifest this update: Tue 04 Nov 2025 14:00:06 +0000
Manifest next update: Wed 05 Nov 2025 14:00:06 +0000
Files and hashes: 1: 3mhUHTDwirkASDro6wKMo1llreY.roa (hash: QT1aX+pCloLwOlM8acjw8SNDGfs+bhgEOJUGdyQm/5A=)
2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: 8n7wlc7267pG0+wByjIqNJ7oPNw4EZHXSnFABlp7gKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:f6:8a:96:4c:1f:86:34:e8:8a:19:33:29:7e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Validity
Not Before: Nov 4 14:00:06 2025 GMT
Not After : Nov 5 14:00:06 2025 GMT
Subject: CN=076233060780ebd58e79168947088af2824abf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:7a:ba:80:49:1d:57:a4:21:45:ce:c2:b6:
06:56:c6:60:46:90:fa:17:bc:48:ca:26:65:86:23:
96:28:81:f0:74:66:85:68:9f:18:78:e0:90:c3:e4:
9b:8c:a2:1e:68:78:ae:b0:a0:66:cd:3e:4a:6f:53:
9e:64:75:a2:35:76:61:5c:f7:7d:8f:72:0c:b1:46:
7f:b7:54:96:34:7a:27:3e:2d:e9:bd:57:c2:05:22:
d1:86:ab:ca:9d:96:60:2a:64:33:b3:14:0d:32:df:
cf:4e:42:64:ad:bf:52:3f:f1:c2:d9:fc:9d:a1:cb:
88:a5:59:19:58:8b:6f:66:d1:05:56:98:50:d6:b5:
fa:fa:49:2b:f0:ef:06:d7:96:2e:29:39:7f:26:ab:
b2:cb:b7:c3:c6:d3:74:51:0c:66:5a:65:3d:49:90:
e4:7c:64:23:56:1f:9a:e1:17:d4:dc:c5:23:75:85:
78:50:08:81:47:1f:d2:e1:5c:00:9d:8c:da:2d:5b:
0b:a7:b2:6a:b0:75:ab:86:23:63:ca:f3:bf:cc:26:
b3:bd:27:b7:17:d5:28:b0:dd:6d:e1:38:b6:ab:9d:
9d:3f:e2:f1:df:d4:d3:ac:46:32:64:c3:ab:b5:c8:
aa:db:73:eb:e7:0d:ae:89:c3:09:c4:60:22:17:5e:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:62:33:06:07:80:EB:D5:8E:79:16:89:47:08:8A:F2:82:4A:BF:3F
X509v3 Authority Key Identifier:
keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3a:33:98:4e:47:68:26:5d:6c:7a:39:29:01:8f:29:59:1c:
5d:63:90:06:1f:f7:15:1d:54:49:ae:17:f0:ea:25:1c:07:5a:
83:ab:a7:f1:d7:ea:14:17:9f:79:fa:58:63:f5:1f:8b:5f:d4:
eb:b9:7b:33:6a:f0:73:e9:8a:18:c0:63:46:e6:32:05:f6:29:
b6:63:63:35:8d:79:57:fa:a7:df:08:65:96:99:f8:83:52:c4:
6c:6b:f6:7c:14:57:e0:6e:7b:38:7f:e4:4c:39:fe:76:5c:0c:
bb:19:01:d6:65:2b:9f:7e:dc:f6:6c:cf:46:9c:07:01:11:2c:
78:be:a1:ca:a1:0e:b2:6d:ba:da:b5:17:75:38:96:21:e4:93:
58:2b:20:9d:f0:24:06:c0:03:09:f0:59:97:51:a6:be:0a:c7:
95:f7:19:25:d7:e3:de:98:60:2b:2c:f0:64:d3:bd:98:c9:93:
08:0b:81:15:d3:c7:e1:9c:14:28:76:bd:0d:2d:28:80:5a:db:
75:98:ba:74:53:98:fc:4a:b9:2b:0a:76:6b:3b:6d:ec:d8:18:
23:fe:3b:ef:c7:eb:b5:2f:69:9b:34:18:cb:b0:8e:74:70:d4:
26:93:67:f5:91:fa:a1:5a:50:9a:8d:e0:0a:7c:54:60:d3:36:
b3:09:14:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:11 2025 by rpki-client