Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: qdtwvmNFHSbZAcRmovGctrOHDt7ZMViAlQ5pgsA8AmQ=
Subject key identifier: 41:9A:24:D7:D1:3A:7C:9E:46:3C:D9:F1:06:BB:7A:89:32:CB:D3:E9
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 019A50072B91D2A6C1747751B5856187D56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 18:00:38 +0000
Manifest this update: Tue 04 Nov 2025 18:00:38 +0000
Manifest next update: Wed 05 Nov 2025 18:00:38 +0000
Files and hashes: 1: Df7DTn2zEEq5-3nYcXjduzyZcpE.roa (hash: K9WfaPyx3uuwdfYwGbIQG2MYAnUVk/3ZAaJt4gKJZ0M=)
2: aYuOMRleQsCQtZg3X-RrYGmlGWU.roa (hash: MqwbamaP+A+XdjoWsCuBh8Vc+mp43ckOX8NYE92d8oY=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: JggqaqEnn6px7kDID/LNKD+0twtzzt04p16mvXP17kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:2b:91:d2:a6:c1:74:77:51:b5:85:61:87:d5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Nov 4 18:00:38 2025 GMT
Not After : Nov 5 18:00:38 2025 GMT
Subject: CN=419a24d7d13a7c9e463cd9f106bb7a8932cbd3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:0f:60:e2:bd:9e:16:07:6f:a5:97:03:5a:
de:c8:c9:7f:00:d3:d7:bf:8b:57:aa:17:fc:e9:c0:
c6:c1:77:db:e4:91:41:18:12:1d:b3:4e:b2:08:33:
9f:51:0a:ab:30:ed:50:f5:99:6b:f6:02:4a:66:2b:
90:ae:03:d2:29:78:18:f7:11:1b:f3:87:7b:e7:1f:
ee:5c:c3:71:80:20:35:67:9b:18:fc:27:0b:eb:a7:
07:91:1c:b8:a8:2b:40:6d:94:59:4d:56:50:48:41:
0e:02:05:ed:a2:e0:04:6c:a3:16:85:80:ed:86:e4:
da:ce:56:c0:fa:9b:45:24:01:bd:49:6e:8f:a9:6f:
fb:d4:54:77:63:c8:4b:1a:56:ae:41:0c:97:a8:5c:
e4:7c:09:d6:5e:83:f6:50:6b:73:6a:3c:a0:29:cc:
b5:59:c4:1d:0b:04:4d:b6:48:86:ba:a9:dc:0b:01:
c2:2a:1e:a1:06:05:40:28:ab:47:08:a8:db:c5:9f:
48:13:b0:8c:68:3b:79:2b:f9:a5:72:8f:e6:2e:9d:
86:be:f4:ba:ba:2e:54:38:23:13:1e:5d:80:4b:fe:
21:54:26:2a:a7:fe:68:0f:bf:c3:1c:e6:5e:0f:3d:
aa:74:50:d1:0d:59:b4:e9:90:cf:e0:c1:55:ad:af:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9A:24:D7:D1:3A:7C:9E:46:3C:D9:F1:06:BB:7A:89:32:CB:D3:E9
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3f:e9:ba:ea:c4:2f:d6:9d:a6:17:21:e0:74:bd:9a:bb:fb:
11:2e:e9:96:4a:fb:14:38:ff:96:e0:e9:e6:6f:1b:66:cd:83:
db:b8:48:39:a7:e3:76:55:41:bf:51:5b:11:15:53:77:35:6f:
21:66:88:42:bd:22:d1:b5:41:2f:b0:cb:9f:a4:c0:d2:20:d6:
f5:fd:24:26:7d:4e:d5:1d:0b:57:0a:c1:14:dc:f4:45:56:c9:
ad:51:f5:d7:03:60:94:53:29:6f:dc:30:54:da:a9:49:1c:2d:
6d:04:15:1e:dd:da:01:87:34:a9:ef:f0:ef:36:e8:ea:13:bb:
99:0f:e1:a7:53:da:f6:13:66:48:9a:ec:52:17:bb:08:8f:29:
b7:40:2e:43:a2:b9:7c:7f:c4:00:47:47:00:58:34:05:34:8c:
ec:03:ec:12:ea:ad:80:fb:a1:c2:e6:d8:2c:26:aa:db:f8:e7:
15:f7:96:73:71:1a:ee:6c:d8:81:c9:39:3a:ae:8e:9a:62:ff:
70:4e:df:14:83:a6:cf:3b:49:9b:1d:4d:d2:e5:27:dc:75:49:
68:16:24:c9:0c:d7:e3:19:c7:6c:5d:02:fd:52:bc:b3:62:4a:
8b:44:a6:64:e3:1f:72:db:32:ad:39:f6:c6:a9:6e:b7:18:1f:
e3:68:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:31 2025 by rpki-client