Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: AGBINoOQCXcHKnyYoMorcO0jJlEvsGBOpZhqVIL+sfg=
Subject key identifier: F3:CD:01:7C:C5:B3:CD:DF:F3:2C:C5:8E:4F:B4:58:3C:E2:8B:09:D0
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 019A4DE217E893316E73D008F958F74424DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0BB0
Signing time: Tue 04 Nov 2025 08:00:54 +0000
Manifest this update: Tue 04 Nov 2025 08:00:54 +0000
Manifest next update: Wed 05 Nov 2025 08:00:54 +0000
Files and hashes: 1: g5z8NV4dmlaKd11s7v3mxc0KYqU.roa (hash: bnZ9DFLSZGC/zi7MlcnpGi6LDIICQO79p3wjfCQfT+E=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: sAKct2UJjMnARmyLk/0P0wi48xBJgdie3Q9YPLRzeVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:17:e8:93:31:6e:73:d0:08:f9:58:f7:44:24:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Nov 4 08:00:54 2025 GMT
Not After : Nov 5 08:00:54 2025 GMT
Subject: CN=f3cd017cc5b3cddff32cc58e4fb4583ce28b09d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:9c:c0:81:6b:ea:98:31:66:9b:05:cc:7a:
1c:bd:f3:e7:90:f0:52:fc:31:2d:45:c3:ec:f8:fe:
4f:61:12:02:2d:62:5a:a9:f8:88:29:4e:8d:15:9f:
c7:3c:37:df:b8:d4:3a:73:2f:48:99:22:ec:f0:f4:
68:8d:1b:f4:e3:85:71:63:8e:32:b4:91:ad:af:6b:
83:04:70:7d:88:7d:2b:ff:a4:60:4c:cc:40:d4:89:
c0:c4:e8:61:4c:b8:5b:1e:af:e1:3a:dd:9f:a4:b9:
cf:56:3f:de:48:9d:a0:b0:bb:cb:0d:2e:82:a2:56:
52:89:b6:a0:69:e1:eb:79:c0:60:01:7e:7f:4d:10:
6c:a0:03:b9:c0:d6:96:58:0d:fb:c8:82:49:72:8f:
31:48:a5:f4:19:22:fc:47:7f:7f:2d:64:b0:41:49:
e4:73:a4:a6:5a:96:ec:ac:d7:c6:22:e0:e1:c8:4f:
6a:fb:12:ed:9a:be:70:b5:71:6c:05:f7:db:1d:4d:
08:77:bc:b9:30:53:05:16:a9:c5:37:a0:ae:74:31:
43:ad:d2:1f:05:e7:cf:e5:38:4a:9a:9e:47:52:12:
b5:af:5c:ea:18:82:a0:79:f9:e5:81:ad:cf:f7:d4:
c6:77:f6:8a:f2:ab:e0:1c:ff:9b:39:a2:21:48:b6:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CD:01:7C:C5:B3:CD:DF:F3:2C:C5:8E:4F:B4:58:3C:E2:8B:09:D0
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:31:2e:68:fd:e7:f7:18:83:b0:9f:0a:ac:b2:43:8d:0f:5a:
49:1d:6f:f9:ce:89:bb:52:e2:3e:cf:57:de:01:6e:44:4c:93:
fd:30:1d:ea:e1:b9:5f:94:54:c7:95:46:28:2b:c4:85:8b:8b:
e5:87:42:f0:89:76:2d:87:f8:ff:dc:cc:7d:4b:d2:f2:1f:f1:
fe:dd:1c:db:2a:e5:a2:8c:bc:d3:8d:f6:07:ae:0a:11:db:66:
a7:37:12:ca:af:52:b6:e0:29:e6:8e:7f:e8:f5:83:ec:e5:8e:
96:16:38:e4:c3:a7:7b:df:e7:7b:c2:a4:27:f2:86:04:e0:a9:
32:a7:d4:e6:5a:9f:6a:fa:d3:62:d3:c7:2a:7a:6f:14:95:e7:
20:24:5f:87:21:4a:c2:01:50:5d:6d:18:0a:71:d6:bb:12:6f:
f6:53:1a:c8:66:b8:24:16:09:7c:19:6f:d7:53:db:c1:ac:20:
59:ca:dd:48:3b:9f:92:1e:52:2f:50:85:48:8f:b7:1d:c0:d7:
5e:b1:0c:7f:9d:77:76:ec:3f:d2:cc:7f:54:a1:30:75:16:78:
19:03:b0:fe:ce:2a:89:51:03:70:25:6c:ad:e1:b9:f0:44:a6:
f7:8a:5b:bf:99:2b:a1:34:bc:9f:6a:3c:7e:a5:37:6d:6d:a0:
e2:00:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:28 2025 by rpki-client