Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: 5Ae6gQ0GxknfaViOoTpT0xsKeEdDmLCGjzRKMOnC390=
Subject key identifier: 7D:7B:D7:FF:33:6C:B2:10:EB:E4:11:78:21:F0:B6:70:91:3F:E5:1D
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019A4E4FBC05150A052B5974A06E6F3CACAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 174D
Signing time: Tue 04 Nov 2025 10:00:39 +0000
Manifest this update: Tue 04 Nov 2025 10:00:39 +0000
Manifest next update: Wed 05 Nov 2025 10:00:39 +0000
Files and hashes: 1: DiJ0fCyftot3hCrWwMuOrUek3kc.roa (hash: m0X/W4piYV3wJW/UAdsh98UiHEu6BRphSEq+YAi7Fy4=)
2: NXi6BiEUeLmLx0EnK11CHUUboHU.roa (hash: S/TsUoCXZkfTfOOKvUTF8Zz4Fuiobz4qRMGvcIUvZaQ=)
3: QhST770mU_k1AKU7JTmNX07pC-g.roa (hash: I0ps4EgOCuYlxmbadbpNOL5J1zbCIQQa4lBfcKjlcdI=)
4: UkCQdP3RrZAe6U2EZsGgmUYM6T4.roa (hash: v1eSSUjEmDBKjFNO3CwwmScWxLPiyY9bodIun8a3QK4=)
5: _BA7tm8EF_tbwBM_8Y5W_eHYfic.roa (hash: db4l1hxQOgB+o48kmvSgTfCUsHPyWt6jnE1LZ4z2tb8=)
6: gt3jbvK7kO8d_xTYIGYJD2cUiGE.roa (hash: 4UbuDpyze6Z3g+LOHqr6qp0gaoTqf6iKQVEolNVaZbk=)
7: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: yDJ8YGCYmFhtcbs5siTm2KisT/l70XAgQY4lhQ6tN5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:bc:05:15:0a:05:2b:59:74:a0:6e:6f:3c:ac:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Nov 4 10:00:39 2025 GMT
Not After : Nov 5 10:00:39 2025 GMT
Subject: CN=7d7bd7ff336cb210ebe4117821f0b670913fe51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:f1:8e:6f:92:67:f7:4a:b6:68:81:bc:9d:
0d:2e:19:44:cb:ef:a3:57:33:0a:9e:4c:79:98:c2:
ae:a3:e4:b6:46:75:3a:97:de:f0:26:e7:a6:7d:e4:
10:5f:4a:57:01:2c:f2:b6:05:20:4e:1a:b5:80:37:
62:20:b3:32:c0:da:af:6a:80:7a:86:6d:31:8e:b2:
f7:0c:dc:6e:99:87:23:33:c7:0a:a9:48:33:73:1e:
30:b1:81:22:79:3e:55:d7:ff:f3:cf:3e:8b:fc:8b:
7f:a3:40:4d:5f:bb:a9:c3:0a:c0:6f:e5:0e:e6:e9:
eb:59:d7:b2:d2:65:2d:08:65:f4:a2:06:81:43:86:
00:a2:a6:e6:24:4d:c2:4f:c1:c7:c3:96:60:77:2a:
e2:ee:32:5a:7a:5d:f4:b1:b5:9e:f6:01:33:b8:f1:
49:25:13:12:42:dc:8d:5c:8f:4a:25:f9:7f:ab:38:
54:1a:32:98:8a:48:84:8a:10:f8:29:c9:37:1e:8f:
e2:ec:ca:15:1c:a9:22:e0:0a:5b:d0:0d:66:f4:44:
2f:a8:5a:a9:df:fb:4d:e3:dd:d3:ea:e3:a6:df:40:
3e:a8:a0:fe:09:97:e5:d6:77:c5:58:7d:e3:8e:9b:
8d:e1:55:ec:6e:2b:e9:df:bb:b3:bc:3e:6f:f0:f8:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:D7:FF:33:6C:B2:10:EB:E4:11:78:21:F0:B6:70:91:3F:E5:1D
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3e:a9:b1:c7:ff:ba:31:9f:20:06:ee:cc:f5:b1:07:cd:08:
f6:3c:7e:94:c7:8a:c6:6d:62:8b:2b:71:14:53:3c:c1:1c:3f:
3e:7d:4c:49:16:d2:bd:04:f8:40:c3:e7:b3:00:01:4a:5f:3f:
61:76:3d:ec:6c:53:3f:13:c6:19:1a:cf:c9:7c:a1:96:95:f7:
f3:f2:85:76:41:37:75:18:74:82:ca:90:f1:dc:db:2c:eb:43:
e8:1e:4d:04:1c:30:03:f2:37:0c:6c:c1:a7:79:b6:35:81:5c:
14:00:d0:47:16:ab:6b:bd:07:11:8c:32:25:0d:ff:88:74:7f:
92:06:a8:ae:25:26:a5:a7:d8:83:a5:02:5e:87:06:73:46:fe:
0b:d0:8a:32:91:c8:62:80:88:43:ad:d6:ed:c0:79:3f:e5:db:
8b:a6:eb:f0:f8:2f:c3:9d:fc:c4:c4:e1:9c:8c:7c:0a:14:d4:
3a:80:21:73:28:e0:25:95:85:99:1c:8d:f4:e6:8b:a7:b3:7e:
e1:43:09:b9:cf:d3:86:5f:d3:50:81:f0:e1:0b:43:92:93:89:
6b:66:80:e5:32:cf:04:ad:cb:8d:2b:5f:21:08:51:ad:cf:50:
0b:a4:46:c0:a2:9b:76:05:f5:aa:9d:35:75:e4:7e:ad:dd:61:
22:e2:a1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:00 2025 by rpki-client