Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: Un7RaNav7Q/iUEEkokuxuaLWQ/fxsVWizfWmmTGlR1w=
Subject key identifier: 5C:0B:B6:E8:06:3C:A1:A1:72:40:82:9A:25:F8:18:92:DE:0A:DF:CF
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019A5150AFB84EADA32791EBEC7B8CA10DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0B02
Signing time: Wed 05 Nov 2025 00:00:33 +0000
Manifest this update: Wed 05 Nov 2025 00:00:33 +0000
Manifest next update: Thu 06 Nov 2025 00:00:33 +0000
Files and hashes: 1: REM4mLJG7EnsBgBtsv162D0wKhg.roa (hash: lvlcTJIeXHpqeTqGfZTwiMwS8+bWAY5YDqELcR5epC0=)
2: Tkqht9ZvM7aeuWPx5RB29sIJQsY.roa (hash: GjW60rpkATBwTZcA2wdYPAVMSlJOCTBR0jsl1OrgYgE=)
3: XddNSlbeSdL2BDOBSBtXKwmbrLQ.roa (hash: YTwv2DMMu/UpDiaZkqxeVtYaDul2+Oka8KEh6z36NkA=)
4: b10-uyzSDsE84X1NxkfqXsdCqjM.roa (hash: 656/1JM/Gtv27/XvapYOtDJ81ebQFKIEF9n9ARvTwoo=)
5: bXzPu6L2HXchD9ZujQmLXPM_bDM.roa (hash: KqR406WMI/nRws1aNrGcGP+z2vKLl1H8bxnYaFt2+LA=)
6: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: pSeS+16OsZ6XkPdONzoqDc7USXRPcwrYm50e52H2aCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:af:b8:4e:ad:a3:27:91:eb:ec:7b:8c:a1:0d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Nov 5 00:00:33 2025 GMT
Not After : Nov 6 00:00:33 2025 GMT
Subject: CN=5c0bb6e8063ca1a17240829a25f81892de0adfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:4f:fd:ce:bc:04:85:bd:18:6e:2c:5b:05:
02:57:11:58:0e:e4:a2:b6:d2:2f:b0:4b:5e:01:4b:
16:09:46:02:32:06:53:85:52:25:71:69:24:02:b3:
49:bd:f8:ca:fb:a4:d7:1c:6d:67:72:c1:c8:be:5b:
b5:bb:8f:80:8a:b3:d1:83:8e:aa:bd:45:cd:02:79:
76:b4:45:6b:72:35:f5:4a:30:39:5c:4f:14:66:12:
94:6e:43:b7:e2:a1:f7:36:7d:0b:f9:1f:b4:b0:d1:
e5:29:a5:57:e1:b7:ec:f0:b9:1b:27:eb:90:af:97:
df:ca:53:a9:07:8b:16:67:81:66:1c:c3:27:3b:92:
13:e7:10:de:dd:d9:fc:18:39:38:4e:f7:02:2c:1e:
f7:87:0c:64:2f:8c:38:81:2e:7e:12:7e:d7:e4:ff:
81:db:56:12:6c:bf:63:c7:f8:6f:9f:5b:c0:27:08:
20:eb:04:72:a0:23:ee:d4:6c:9a:38:b5:c1:0d:0d:
e7:da:4e:d3:69:92:a6:6c:77:e6:12:5d:45:d5:bf:
ca:df:df:ba:cb:bc:12:95:81:1b:ca:bf:aa:84:54:
c8:bc:e2:73:38:4a:56:28:80:8b:f0:c3:23:9f:d6:
68:2c:66:c0:5e:94:79:27:46:e1:29:5e:66:ed:82:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0B:B6:E8:06:3C:A1:A1:72:40:82:9A:25:F8:18:92:DE:0A:DF:CF
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:23:08:f1:6d:f0:af:43:60:ea:f4:8a:4b:09:12:d1:cd:f2:
3d:c6:73:d2:74:d7:ea:bf:ec:43:6c:ca:bd:8e:0a:eb:7b:12:
1c:4d:59:d3:3f:73:f4:6e:47:96:ff:d1:30:1e:a3:6c:30:8b:
98:a1:9b:b5:46:01:ee:56:7f:7e:42:0f:8b:4a:c6:db:f4:f9:
8e:08:80:86:94:a3:5d:5c:17:04:b0:23:4a:2e:f0:b7:27:75:
2e:46:10:34:f0:02:fe:2f:ed:76:cc:7c:95:d4:cd:f8:de:9b:
b1:13:5a:12:fa:84:de:6c:f2:bc:c0:6b:a2:f0:98:ed:14:6b:
97:81:27:a3:81:0f:0c:0b:c1:4c:9f:30:c7:af:44:7f:8c:81:
ee:c0:9f:c7:8d:9b:1a:92:e2:9f:84:02:29:02:b7:67:21:a3:
60:ec:0d:5d:b5:2d:d1:bc:d9:06:7a:fa:ec:79:b2:3b:73:b1:
6b:b8:29:b4:c1:c1:c7:96:c1:f9:19:33:06:47:4c:d8:e1:1f:
92:42:0b:b4:9e:1f:99:7e:8a:f3:23:35:ab:42:b9:1e:7d:65:
3e:89:71:ca:5c:02:d5:e2:cf:9a:d5:a2:4d:7b:d2:76:d2:f4:
15:d7:10:c5:86:46:87:22:a6:e0:64:a3:88:31:99:d5:4b:28:
6e:0f:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:51:28 2025 by rpki-client