Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: 8cgo8+X01u3+WPxCfhk4NYbwNJL7sYWUTp5jHgRtTMg=
Subject key identifier: C1:3B:D7:FA:A7:3E:22:C1:F7:59:92:54:3B:F3:60:D8:26:6B:57:25
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 019A5074BB0FDC53CC0896EA6B769065FCD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 11AF
Signing time: Tue 04 Nov 2025 20:00:18 +0000
Manifest this update: Tue 04 Nov 2025 20:00:18 +0000
Manifest next update: Wed 05 Nov 2025 20:00:18 +0000
Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: QnQKr6KynPAFHUR3hy9mBycA75PwEZS9FCyngPMyiWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:bb:0f:dc:53:cc:08:96:ea:6b:76:90:65:fc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Nov 4 20:00:18 2025 GMT
Not After : Nov 5 20:00:18 2025 GMT
Subject: CN=c13bd7faa73e22c1f75992543bf360d8266b5725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:6a:f1:6e:ae:40:f8:ff:90:60:45:05:fd:
63:33:32:b3:48:65:a1:39:ec:6b:41:7c:3d:68:13:
19:62:f4:69:57:3e:eb:80:64:27:40:56:06:0b:d2:
0e:fe:28:f1:97:d8:29:a3:db:84:58:f0:12:7b:a8:
82:16:9f:1e:fa:ff:b2:6b:d5:05:4b:b2:48:d0:8a:
6c:92:35:02:b9:51:72:9c:48:82:35:09:97:4c:b6:
4c:0a:15:ea:8e:e7:d8:22:08:e0:86:e2:d3:6c:55:
b1:24:57:94:fb:95:b9:b2:f0:f1:3d:5d:bd:89:ca:
e8:86:62:9c:86:0e:28:9d:34:bb:f9:8d:b8:b3:04:
a5:a6:93:28:3c:cc:74:66:50:02:d7:be:af:d3:73:
9a:0c:ce:db:69:d7:39:cc:8b:a0:00:bb:1a:81:58:
da:67:85:aa:27:3e:66:72:53:fe:b0:9a:69:57:78:
a7:4d:2e:0f:46:b7:e4:08:9a:a2:07:fa:d9:79:d3:
37:fa:ad:f4:77:cf:55:e6:f9:23:b5:f1:c7:f7:bf:
82:0f:3b:a1:8d:35:d1:33:a9:2b:6c:71:d9:ba:e1:
db:0f:29:80:e4:85:f0:8f:d0:40:3a:03:0d:c4:31:
1c:e7:13:f5:0a:7a:a6:dd:f5:93:96:4e:1d:e5:e3:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3B:D7:FA:A7:3E:22:C1:F7:59:92:54:3B:F3:60:D8:26:6B:57:25
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e5:df:63:08:d4:3e:a7:48:89:94:d4:a2:b6:65:25:f9:04:
8e:c4:d5:0c:60:57:88:e4:c1:c2:92:88:bb:a2:ba:b2:17:b9:
d5:15:45:89:84:9a:72:de:28:53:1a:02:2d:82:c2:1f:5d:72:
83:a7:3d:8d:ef:e0:ce:56:e7:2b:b3:1b:f8:9f:e0:1c:7d:70:
11:d7:e7:ca:40:a7:4b:02:d9:e9:28:d6:b7:8c:80:b3:02:4d:
c9:90:0c:40:8b:c1:27:ab:63:c0:d3:5a:8c:28:fc:61:f6:3b:
e9:38:83:39:88:fa:cb:3f:dd:c5:b3:d3:e9:0a:cc:ee:35:87:
e5:9e:eb:11:42:ad:a2:a7:90:55:cd:54:be:80:43:56:9f:47:
ac:b6:62:73:56:25:bf:5d:03:b7:2a:96:d9:a8:a8:d0:1b:c3:
ea:d0:0b:45:53:cd:fe:e2:86:ab:dd:b5:3d:25:c6:59:66:0f:
b0:29:bb:ff:48:45:87:cf:8e:40:f0:95:20:cb:e8:13:7b:56:
25:6b:0b:28:50:20:ea:24:ac:0d:cd:00:bf:2a:8d:1a:2d:1b:
cb:e0:da:30:4f:1d:53:e1:81:1c:08:97:63:5b:5f:62:70:f7:
4e:f3:78:e4:b5:40:90:e3:01:47:0d:39:ef:ad:f6:16:95:57:
05:66:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:13 2025 by rpki-client