Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: GS4o1bg9PaTTMmVsPkTpvlnV5y9TVV1VVPHJL8FUPJI=
Subject key identifier: 2A:B9:7F:D2:0F:BB:4A:24:DC:61:31:08:D5:00:B8:87:D6:DF:3A:0A
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 019A4E19150E1E33915C66AA8541649D6AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 09:00:57 +0000
Manifest this update: Tue 04 Nov 2025 09:00:57 +0000
Manifest next update: Wed 05 Nov 2025 09:00:57 +0000
Files and hashes: 1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=)
2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: GdESUh1PajGyAnzOs/WbLJkV5ZyCrqpJXwFmO5R8eTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:15:0e:1e:33:91:5c:66:aa:85:41:64:9d:6a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Nov 4 09:00:57 2025 GMT
Not After : Nov 5 09:00:57 2025 GMT
Subject: CN=2ab97fd20fbb4a24dc613108d500b887d6df3a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:83:e4:21:9e:b1:15:5c:27:8e:52:a5:0f:
7d:87:9a:a5:0a:2b:8d:0c:c7:43:b9:38:c1:8c:d0:
4e:ba:77:78:59:b0:d4:7b:c1:c9:1a:51:b0:15:ed:
1f:7e:f4:ff:74:18:cd:90:ce:13:69:19:9a:dc:76:
ca:84:c9:c0:cb:5d:7a:da:7a:fb:05:37:55:eb:23:
1f:99:89:c5:b3:e9:84:6f:33:6a:f2:ec:89:dc:af:
85:5d:ac:de:2e:aa:1c:6c:1c:dd:93:cc:8c:1d:cc:
59:4c:65:19:32:37:60:39:73:29:6f:79:8b:9e:6a:
53:e0:4a:74:77:be:0c:00:45:47:63:b7:b0:6b:f8:
c2:01:44:e8:b6:92:cd:ef:2c:bb:a7:0e:dd:fe:00:
b2:92:38:7d:e2:b2:fb:5d:46:e2:cc:b7:84:c7:76:
0d:16:1c:c0:d3:0a:39:7c:c7:d4:60:3d:97:3a:57:
65:b3:40:b3:65:b1:f1:89:9b:8d:35:f7:3c:1e:64:
47:38:dd:02:2c:0f:8a:a8:12:07:b8:6a:c0:fd:33:
db:fb:d0:0a:8e:17:b2:e9:67:62:16:e1:21:f8:ef:
ce:d1:20:8f:ea:8e:8d:8a:ab:ce:fa:a9:5d:66:9b:
ad:88:7f:a6:14:91:07:d8:20:b9:65:ef:b9:6d:5f:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B9:7F:D2:0F:BB:4A:24:DC:61:31:08:D5:00:B8:87:D6:DF:3A:0A
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ad:5a:14:35:6a:54:9d:82:13:2e:9e:c2:af:60:05:07:34:
41:f8:cd:bc:77:12:6a:38:0c:f4:4d:56:7f:f9:5d:db:f5:9e:
c9:9c:9e:d3:a8:26:9e:bc:3e:5d:62:d4:10:7e:4b:6e:07:42:
2d:ab:a0:24:e0:9e:79:d9:98:ca:38:a2:80:1d:4e:a5:ae:9f:
08:14:f2:06:98:75:34:e3:9c:12:f2:a1:98:36:3b:72:7b:64:
bf:8e:3e:1c:60:ba:c5:78:03:5b:5f:14:38:35:91:0f:7e:16:
fd:d8:10:f5:42:e5:5e:01:47:65:6d:3d:ee:7b:ed:08:a5:af:
83:f1:f6:01:32:19:cd:cf:21:b3:17:41:3d:44:a3:db:ae:76:
53:78:12:69:92:17:81:18:e1:90:bf:ca:e1:73:47:af:71:af:
fb:86:ba:f2:3d:d0:b3:f1:0b:c6:49:b5:d0:db:97:0e:e9:16:
50:f6:ca:86:8e:8e:9e:8a:05:f4:b8:93:3b:45:9f:68:14:e9:
68:42:d3:0b:1d:72:11:c2:ea:e0:58:ee:bc:fe:c5:3f:38:86:
af:62:22:64:81:f8:01:35:10:fc:bc:ad:ac:aa:53:0c:5a:3f:
83:3e:59:20:19:4c:34:4f:de:20:2d:5f:46:73:90:a1:0b:3b:
1a:83:6d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:29 2025 by rpki-client