Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier: Ztxp8V1QD81D5dARKuB4G7PT28wG0bMiQmBkpadxl+g=
Subject key identifier: C9:C8:5F:84:C0:A5:B7:6B:8E:DC:55:3A:4B:8C:41:5F:A6:65:A8:73
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 019A4DE15CE9DD311C9B8891B4ACE187C7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:06 +0000
Manifest this update: Tue 04 Nov 2025 08:00:06 +0000
Manifest next update: Wed 05 Nov 2025 08:00:06 +0000
Files and hashes: 1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=)
2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: nTbsJBBLm0jyt28ew0dncUmVXThDKABeGUvAe3Mk38Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:5c:e9:dd:31:1c:9b:88:91:b4:ac:e1:87:c7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Nov 4 08:00:06 2025 GMT
Not After : Nov 5 08:00:06 2025 GMT
Subject: CN=c9c85f84c0a5b76b8edc553a4b8c415fa665a873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:3d:05:bd:87:b1:89:88:22:8f:07:c7:c0:
82:c0:5c:6e:75:b8:ca:60:e8:1b:ec:e9:de:b0:b0:
c7:6c:ae:e1:13:a4:80:b4:91:63:cd:ff:ad:20:4d:
a1:b1:bd:1d:1e:3e:52:91:8c:e3:03:d2:39:d4:6c:
15:5b:a2:2a:66:27:63:af:d7:02:5f:26:8f:b7:8f:
dc:07:8f:1d:07:2e:a0:52:40:2b:9f:6a:28:b8:58:
b8:a4:6b:83:6d:75:d7:87:66:da:e7:9b:95:2c:d1:
0a:40:62:a5:e3:be:5c:65:9f:e3:53:08:fd:0e:2e:
e3:12:19:c7:01:18:c7:41:06:17:5b:52:ee:bb:c7:
ff:5a:e0:78:ff:dd:89:84:15:50:35:6a:7f:71:79:
3f:ce:ba:ee:02:65:a1:f1:62:8b:64:63:6e:89:d7:
72:cf:e1:2f:19:c5:78:28:64:6d:93:92:3b:ee:8f:
b0:5f:d3:5f:3c:7d:f9:d1:d3:6e:a0:41:d1:ff:ed:
42:09:9d:78:8f:fa:30:14:f6:07:26:de:1b:8c:11:
2e:21:ae:06:a9:52:15:0a:4e:1c:39:a4:34:f0:1b:
f0:c1:aa:a6:30:b8:07:a5:01:bf:23:ed:a2:06:86:
51:7e:f5:10:41:48:1e:5c:f0:ad:38:a2:99:ce:bc:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C8:5F:84:C0:A5:B7:6B:8E:DC:55:3A:4B:8C:41:5F:A6:65:A8:73
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:db:40:49:f3:99:07:1c:13:c8:ad:98:0f:23:4d:e3:fe:8d:
12:2a:66:ba:64:2c:60:2b:c6:eb:ed:bd:86:2b:9f:d1:69:8e:
77:49:0a:7c:41:94:a5:e4:54:e3:42:91:4d:91:6a:8c:82:05:
20:2c:3c:45:4c:1a:40:12:19:96:49:a1:82:91:f6:0c:9f:76:
6a:bc:75:2a:dc:b8:24:56:e9:2e:7b:b6:87:7a:8b:08:f7:1b:
c0:bf:28:3a:3a:bc:97:c7:cf:d1:4c:9b:12:f5:7b:cc:1c:b7:
fb:f0:46:df:fb:d9:bd:77:51:28:7f:15:ae:51:d7:8d:f9:fa:
3c:b5:a0:6c:0f:05:5f:ae:c0:bf:cc:76:b0:59:34:40:bd:ab:
13:e7:2e:14:17:67:06:bd:06:db:f2:c3:9a:2b:e0:d5:75:5a:
f0:75:71:93:cc:e2:3c:01:d9:e7:54:0c:b5:e6:2e:a4:df:bd:
7f:c1:fa:52:1a:c3:96:50:ae:38:43:90:ff:18:16:b7:8d:fe:
81:cb:ab:2c:a9:75:76:37:19:43:2d:25:0f:20:e9:69:9a:1a:
37:fc:94:9d:e8:b5:ec:22:80:9f:55:39:cf:27:d0:64:b7:82:
55:ba:93:c0:e2:7d:64:14:12:41:72:54:eb:72:7f:ae:9c:01:
8a:56:f5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:23 2025 by rpki-client