Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
File: k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json)
Hash identifier: HYUQjz2kzLyRvShur5GhC7UgNkF4ktVz0xqTfW11Dkg=
Subject key identifier: 00:02:0C:CA:BD:18:BD:49:88:A7:9A:C4:49:5C:C1:76:14:6C:9D:CB
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial: 019A4D73F2FEE499FF94A85C97FB7A42F75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
Manifest number: 14D2
Signing time: Tue 04 Nov 2025 06:00:35 +0000
Manifest this update: Tue 04 Nov 2025 06:00:35 +0000
Manifest next update: Wed 05 Nov 2025 06:00:35 +0000
Files and hashes: 1: FwydALoErM6-8yE8TcsoXe9fkyI.roa (hash: S5UsOTTZ1j9ByeHOH+4PHSRQbib1Nk4JqrfciZPb4Cc=)
2: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: gOz469ZneTfWXwlR87BCH/TcM09WmiC/ykiER5gt1XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f2:fe:e4:99:ff:94:a8:5c:97:fb:7a:42:f7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Validity
Not Before: Nov 4 06:00:35 2025 GMT
Not After : Nov 5 06:00:35 2025 GMT
Subject: CN=00020ccabd18bd4988a79ac4495cc176146c9dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:26:26:f3:44:f0:ff:c2:dd:1c:c7:0a:a3:
2c:8e:0e:09:3e:83:b9:f6:2c:f3:da:df:fc:62:4d:
e6:f8:c4:b0:ab:93:76:31:c2:bd:58:80:5f:f9:04:
1a:ab:d9:e3:73:19:19:58:09:c4:b7:9a:05:07:d1:
6b:08:01:30:04:c6:3e:c5:fc:fc:a6:14:05:ad:b2:
40:81:dc:5e:4d:b1:53:3f:3c:5e:c5:a6:c9:76:e2:
2b:b8:3a:09:3c:bf:65:8f:a6:7f:a5:47:f7:40:46:
00:cd:35:70:f6:01:46:28:21:85:1b:81:9a:d4:f0:
e1:6a:cb:06:a3:79:08:34:72:0b:b4:cd:60:8a:1f:
a2:30:76:ce:5c:81:6f:cf:1a:42:eb:1b:c9:8c:37:
70:35:8a:70:c6:7a:db:5f:07:30:db:72:a9:08:9c:
39:0e:64:74:97:dd:f4:d9:8a:51:ad:b4:74:d0:31:
d5:9d:a5:eb:ba:2c:a2:52:c2:54:40:da:bf:01:08:
66:9f:d7:66:a1:68:c5:31:fa:a4:15:4f:e6:63:a0:
2f:9a:d9:7b:29:64:97:01:d0:65:6b:4e:22:d6:4b:
b7:a2:66:b0:de:c0:77:49:55:92:4f:bd:63:8f:5b:
e7:2d:22:7e:9f:a4:04:e6:96:b4:cc:45:c6:b7:dc:
fc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:02:0C:CA:BD:18:BD:49:88:A7:9A:C4:49:5C:C1:76:14:6C:9D:CB
X509v3 Authority Key Identifier:
keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:94:5f:48:f9:39:cd:81:77:36:5d:83:a8:ff:c9:37:de:f8:
91:d3:49:f1:51:8f:f8:d7:50:c9:48:4d:3c:9a:c3:ee:7d:20:
f6:a6:f1:9d:d1:06:45:b4:0a:be:e2:5e:3b:7d:ad:d4:f3:6e:
d7:04:cf:35:37:c9:7d:44:d2:4c:15:ef:84:78:3a:d2:a0:6e:
18:e6:33:77:97:7c:9c:f2:03:cd:10:68:7d:3a:f5:c8:12:48:
c6:a8:8a:06:5c:d8:6d:6b:c3:f3:34:7a:d4:ac:62:71:f4:f3:
01:03:e1:87:95:6a:30:af:63:47:a4:6a:09:1f:66:92:d2:5c:
f1:f6:dc:3b:43:9f:bd:4e:3a:1b:09:80:ce:92:df:59:d3:6b:
61:f4:51:91:7b:16:8f:9f:39:47:94:b3:bc:0b:d9:01:d5:89:
c5:f3:ea:95:13:c6:89:87:29:8a:25:7d:95:b1:ac:a2:eb:6c:
f7:94:29:bc:ce:ed:ce:a8:cb:27:5a:f3:cd:93:f0:6c:b4:e3:
82:62:bd:86:3a:a3:05:42:46:0e:22:34:f8:41:af:dc:1a:1e:
4b:a1:83:79:ff:a0:61:0c:ff:21:97:c5:fc:d3:bc:2a:9d:6f:
e5:04:ce:64:ba:e3:92:74:e2:1c:05:fb:7e:70:17:3f:2c:5c:
97:86:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:28 2025 by rpki-client