Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: V6y1GlBnXpkdHeC7su+LbTNXFcRC0Q0/GgdHlkzG8a4=
Subject key identifier: 1F:B8:5F:D9:C5:58:B7:EE:6C:F0:FD:A6:31:DA:D8:26:E6:67:70:3E
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019A4EF4F275699ADA1A6533E02648CFD67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:06 +0000
Manifest this update: Tue 04 Nov 2025 13:01:06 +0000
Manifest next update: Wed 05 Nov 2025 13:01:06 +0000
Files and hashes: 1: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: p6HyjTCjQ8lBu+asHK2fHzu9Rj35sxtPUmSDL0l4/ZQ=)
2: LM4PEm0ffK75EUFTgpXPbuoAKZ8.roa (hash: d7gyd2tIHJ6HJ/7vl5EHNlkX+eVBttxlbWWHGFZ3xxQ=)
3: _w36PBooYvePauBkPOTldD_qNZc.roa (hash: hpJoX8luKbQz9GDhdRpg1rk5Zn+lxQz5UWYQbVjTs1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f2:75:69:9a:da:1a:65:33:e0:26:48:cf:d6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Nov 4 13:01:06 2025 GMT
Not After : Nov 5 13:01:06 2025 GMT
Subject: CN=1fb85fd9c558b7ee6cf0fda631dad826e667703e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:f4:b4:1e:52:9f:7b:9f:3c:04:fc:dd:1e:
45:cf:30:f3:34:9d:6d:a0:f0:d9:82:87:53:98:77:
04:a4:30:1c:ce:6a:37:17:2d:60:b5:b8:2a:68:89:
0a:07:df:df:cd:8b:7a:b7:8e:28:f9:98:db:43:10:
60:03:20:a9:6b:82:95:0f:7d:81:31:79:30:a2:cc:
69:d5:b8:c9:10:ef:ee:15:88:b2:8b:3f:c9:6c:17:
0e:f5:a1:70:46:fa:90:65:08:5d:75:67:09:e5:2e:
d0:b3:52:8b:c2:46:dc:44:63:4c:fd:e0:18:b6:98:
ee:4e:57:5d:3c:cf:11:a2:f2:6e:52:a7:d2:a8:db:
05:c0:85:59:5f:ac:ea:ac:13:6a:ee:4f:94:07:70:
d1:32:7f:df:0f:c4:5e:68:a5:79:a0:2c:3e:f5:63:
8b:d9:34:74:47:71:90:a7:7d:14:13:fb:77:eb:dd:
a5:36:3e:d3:1f:b4:b9:95:cb:bb:f2:99:1c:de:d7:
22:d2:f3:7c:9e:a3:4d:c4:cb:2d:a7:13:ba:a4:18:
e8:b8:6d:11:f5:7a:0c:71:2d:7c:bb:87:74:75:b2:
89:4a:98:90:86:1c:c3:75:b5:0d:2b:fb:7f:64:39:
bc:19:08:93:be:f8:00:d4:8f:17:cd:62:a5:15:e9:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B8:5F:D9:C5:58:B7:EE:6C:F0:FD:A6:31:DA:D8:26:E6:67:70:3E
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4d:33:ad:0c:2b:c1:75:fe:5f:18:6f:54:05:7d:f1:d2:5b:
c7:ad:e5:c5:f3:f4:31:5d:68:39:44:d2:ec:70:61:32:7f:eb:
67:c6:c9:9d:56:ce:41:48:e6:a0:c2:7a:bf:e8:5f:41:3d:13:
2b:9a:de:9c:e8:f5:f9:5d:4e:ed:df:ca:c3:2b:3e:a1:db:a3:
cf:e8:00:50:d4:e4:d5:b0:55:60:d4:dd:34:fc:a9:8a:eb:7e:
06:7a:0a:86:62:a0:1b:05:1f:24:92:e1:2c:16:39:22:f8:77:
00:07:78:c5:9c:22:36:3e:ce:11:9d:4c:28:e1:a2:b4:52:f3:
6b:61:0f:e0:61:95:8d:9e:ae:9c:29:5a:53:28:3a:dc:28:9b:
77:2b:de:7e:f9:8d:ad:3e:49:4e:b1:a3:7a:56:dd:8f:fa:92:
24:e9:bd:60:ba:3e:32:dd:b5:90:2a:32:06:e3:c1:70:cd:e7:
bc:34:4a:22:5e:3c:ce:55:69:8f:bc:87:e2:40:36:34:29:3e:
e1:bf:47:f2:f3:0c:1c:74:f3:71:6e:2d:3a:b8:61:8e:4d:c3:
cb:7c:7c:48:79:51:08:91:42:94:05:dd:b3:9c:a7:74:77:8b:
9b:49:88:05:29:52:e0:b5:81:0c:d2:20:37:0d:51:fc:92:6c:
e8:d4:97:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:59:36 2025 by rpki-client