Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier: CKQZ+/jz0JwqJTLQxCSLs7dmoJJL9ntOa3IBLgg3uJ0=
Subject key identifier: 80:94:D5:18:D5:BE:3C:2C:13:63:83:9F:BB:C8:68:CD:21:AD:81:39
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial: 019A51BEDE9DC3B770FD0F2AFEFF356AB5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 02:00:54 +0000
Manifest this update: Wed 05 Nov 2025 02:00:54 +0000
Manifest next update: Thu 06 Nov 2025 02:00:54 +0000
Files and hashes: 1: ejRJ31S7gTZphcMPp--rX-fthA4.roa (hash: K6orC9qH9AXgz/q6yHBYuSENvrxco32U8VdUBQRxDgA=)
2: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: BXzDhb7ZicjJ41/RhTo7XmVUZ71Roe5Trsy2heuvOqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:de:9d:c3:b7:70:fd:0f:2a:fe:ff:35:6a:b5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
Validity
Not Before: Nov 5 02:00:54 2025 GMT
Not After : Nov 6 02:00:54 2025 GMT
Subject: CN=8094d518d5be3c2c1363839fbbc868cd21ad8139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:54:9e:09:04:16:a5:6f:a3:70:40:13:69:
08:6a:77:4d:2b:11:52:d9:d6:6a:cf:21:3c:32:20:
5a:8a:8d:f1:c0:45:da:6e:bf:87:21:19:3a:57:a8:
a3:df:52:59:04:cd:5f:cc:c0:a5:5c:9d:b2:73:e7:
43:80:fd:f1:12:0f:c1:af:fc:2f:61:61:1f:a5:ce:
1a:08:04:fc:54:e2:9d:7a:2c:68:0d:93:64:62:49:
7d:f2:61:29:f2:a9:c9:f3:d7:50:6e:33:83:38:63:
33:17:57:a6:45:18:9b:9f:99:8a:10:94:28:07:55:
13:2d:ab:79:3d:a1:64:36:26:f4:9d:af:7b:81:53:
0f:2b:f4:11:7a:fd:36:2b:b0:40:49:2d:19:18:a9:
a7:22:60:0c:a3:d6:05:55:31:21:89:98:e4:65:24:
95:03:c5:cb:e5:69:ff:0e:44:e2:33:eb:7c:09:91:
cf:8b:c5:c1:17:5b:ff:e0:e0:f4:9e:21:f6:19:f6:
b0:93:9d:d1:6c:33:7a:a0:52:b3:53:a6:e2:31:e3:
b5:55:32:af:d0:37:15:66:86:5e:67:58:19:2d:7b:
7e:6e:63:6c:76:c4:48:8a:da:c6:ae:12:aa:5c:9c:
ba:7d:80:a7:8d:01:18:78:0c:d5:61:5f:41:a8:0b:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:94:D5:18:D5:BE:3C:2C:13:63:83:9F:BB:C8:68:CD:21:AD:81:39
X509v3 Authority Key Identifier:
keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e4:71:e0:c5:b9:a6:54:2d:9b:33:5b:41:ac:f4:6f:08:2d:
88:56:14:05:e3:11:51:75:f4:d6:fd:71:14:1a:38:3c:87:a1:
31:61:99:bc:73:9c:a7:5f:4e:0d:30:0b:4c:39:5c:1b:c6:88:
9e:90:33:0c:77:6e:c3:d5:e8:db:09:6a:04:37:ac:29:9a:f2:
1a:1a:31:47:a6:a5:c1:a4:5e:0b:c7:72:37:a9:42:d9:74:57:
d1:22:86:e8:63:66:1a:0e:cd:fa:86:4f:3a:3a:0f:78:b9:d8:
42:b8:14:84:d0:d4:6f:bd:ab:91:9b:59:c9:6e:fb:bc:1a:c0:
7f:57:6b:5b:86:70:6a:17:99:ff:7a:35:62:38:70:36:95:44:
dd:e2:e4:65:7c:00:bd:84:c2:bc:5c:61:68:be:85:f6:45:97:
31:98:5d:ff:e4:c7:65:8a:28:19:14:fe:77:f8:06:22:67:9c:
2c:42:7a:84:f4:3b:e7:3a:61:90:5d:ce:e8:ed:73:5e:c7:1e:
98:0c:50:08:2a:40:60:df:25:d3:16:a6:32:31:96:90:88:70:
c2:f5:71:27:be:3d:fe:e2:c5:a2:3a:19:95:4b:36:21:a0:3e:
ad:74:31:93:a5:46:52:e4:bf:f2:a8:e4:4e:54:7d:40:13:26:
bb:c4:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:53 2025 by rpki-client