Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: kuJoogCnV6ZPrdNd6yy9x6n0aMWCGgGXr75+9BaaZ9I=
Subject key identifier: 65:EE:C0:49:4E:00:D5:C8:64:A6:5D:C6:EC:21:D3:3B:F1:FB:D5:42
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 019A4DE1C3069B070E6A70A5E3167693746F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0DF1
Signing time: Tue 04 Nov 2025 08:00:32 +0000
Manifest this update: Tue 04 Nov 2025 08:00:32 +0000
Manifest next update: Wed 05 Nov 2025 08:00:32 +0000
Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=)
2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: xlD2v4h/8yNOScdYMiiLmvyBNvJbkTM+oUuEQKk96ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c3:06:9b:07:0e:6a:70:a5:e3:16:76:93:74:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Nov 4 08:00:32 2025 GMT
Not After : Nov 5 08:00:32 2025 GMT
Subject: CN=65eec0494e00d5c864a65dc6ec21d33bf1fbd542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:f5:2b:e1:35:2a:16:01:d4:44:8d:34:8a:
84:af:d4:65:1e:9a:21:b8:7b:c1:7e:02:4f:15:e4:
ba:4a:ca:1a:7e:71:4f:24:3a:05:fd:b4:d7:3b:2f:
68:61:b2:a2:6a:bc:11:7a:38:ff:f8:11:f6:a0:2a:
94:16:95:e8:63:43:a5:55:4a:2a:1f:7e:ae:15:d1:
0c:4d:81:eb:40:09:95:a9:55:0f:db:4c:59:97:2f:
c0:c6:ba:a4:c9:98:46:5a:98:1c:22:8a:3f:23:26:
60:27:4b:54:20:c1:13:5d:e6:23:db:d7:d6:ce:1a:
6f:45:cf:04:a3:59:b8:33:f1:84:a0:74:fe:b4:6f:
0c:82:78:e2:2d:f9:a3:8d:95:dd:64:5a:e7:fd:98:
ef:fb:7a:57:18:dc:77:36:67:7b:89:1a:1d:77:4e:
2a:91:5a:88:77:51:ed:51:47:9f:c3:60:ab:96:40:
b4:92:9b:40:7c:f8:75:25:3d:77:88:c3:78:ea:42:
03:ae:26:49:d5:b6:ba:56:fb:1a:29:64:76:43:28:
a4:eb:f6:57:38:92:6e:b7:fa:47:a7:b1:08:e3:8c:
86:6f:1f:ce:cf:00:f7:56:e9:4f:ce:4d:57:e5:18:
85:43:e5:84:17:1a:43:5f:a4:4c:01:3b:9e:8a:38:
a2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EE:C0:49:4E:00:D5:C8:64:A6:5D:C6:EC:21:D3:3B:F1:FB:D5:42
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8b:0f:e9:84:85:77:70:21:61:f3:31:0c:d3:33:14:12:e7:
18:3c:79:fe:48:81:ba:6d:62:d6:db:92:a6:84:9a:47:0c:4b:
3f:5e:c1:06:88:56:c1:da:99:91:61:66:bb:a8:1f:3a:1c:ec:
06:b4:72:40:4d:30:44:c3:98:83:62:bd:47:38:aa:5a:25:6c:
f8:79:8b:64:8d:0c:60:5e:86:33:d0:75:3d:d6:24:45:48:60:
ed:63:1e:65:5f:29:fc:31:fa:82:4e:0e:d0:ad:3e:93:b2:51:
f1:ef:75:05:9e:c3:c1:1d:83:9a:a9:2e:73:4b:df:43:63:2d:
a4:e1:62:1f:cf:a9:3c:25:09:94:54:57:54:b3:d8:8c:91:dd:
ed:33:bc:7a:89:62:18:ba:e4:ef:b2:d4:54:bd:24:cf:d2:c2:
19:9d:38:d7:71:fb:8c:7b:01:b3:1b:6d:cd:0d:be:d6:fe:d0:
18:e3:e5:b9:42:18:cc:f8:7f:93:30:5e:49:ac:f0:76:48:19:
68:06:1d:9b:1d:b6:37:46:bc:7b:e6:05:47:a0:63:bf:96:3b:
3e:d7:30:b0:74:f2:5e:a4:b4:8f:d3:f8:7d:91:09:54:5b:8b:
19:62:e6:69:04:70:15:69:f1:e2:06:ae:7e:4d:6e:16:28:e3:
54:80:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:03 2025 by rpki-client