Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: sQDFj3Ud04kxa7rr8t82Ho5Sr+8rGcqUtee/0IMLMDE=
Subject key identifier: EB:4A:D8:CD:39:B9:6C:BA:3F:4E:EC:77:73:7B:63:D8:8C:8A:B1:F5
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 019A4E1909BAB1248780C91500F56F81B0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:55 +0000
Manifest this update: Tue 04 Nov 2025 09:00:55 +0000
Manifest next update: Wed 05 Nov 2025 09:00:55 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: HM56DIajRyHuvRdMPdiOVS9KpJQ6jw1qjDgaS4QDf64=)
2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:09:ba:b1:24:87:80:c9:15:00:f5:6f:81:b0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Nov 4 09:00:55 2025 GMT
Not After : Nov 5 09:00:55 2025 GMT
Subject: CN=eb4ad8cd39b96cba3f4eec77737b63d88c8ab1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:55:17:db:94:1d:d2:50:2c:f8:2d:9f:1f:
41:71:25:9d:b8:b8:65:14:17:06:48:e8:ff:4c:a1:
fc:cd:b5:65:0b:03:64:d5:44:18:55:b9:f2:cc:2f:
27:6b:9b:57:04:c3:7d:4a:08:84:17:bf:17:c0:7e:
bd:3b:39:6a:0b:04:ef:87:9c:1b:00:78:53:1c:ac:
99:f7:9c:61:25:ec:aa:7f:f4:25:fb:eb:e5:9c:65:
45:9d:08:e9:6d:5d:fd:f2:14:bd:7a:42:08:39:4d:
d4:4c:b7:40:d7:33:4c:65:97:6e:3c:00:ab:c9:ba:
ed:f6:7c:20:36:a0:2f:fb:f0:84:73:e6:a8:bf:df:
f5:cf:b5:71:85:d3:cb:ea:f3:60:d4:68:83:b6:8e:
79:f8:04:08:41:53:16:96:e7:f9:68:f5:86:35:1e:
52:55:ec:a7:41:83:38:61:dc:dc:8a:18:10:d0:16:
7e:56:75:a0:ef:6b:e1:4e:f7:0c:71:58:90:08:ae:
d1:7b:64:67:46:ed:64:1f:e1:2b:bf:10:d7:c9:7f:
a1:fb:7a:f3:24:ed:25:44:9b:c9:34:26:1e:9f:e8:
6b:89:37:73:36:49:92:0d:88:0e:57:0d:9e:91:65:
5e:b5:11:2d:9b:21:ce:78:fa:a5:76:74:8b:64:ff:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4A:D8:CD:39:B9:6C:BA:3F:4E:EC:77:73:7B:63:D8:8C:8A:B1:F5
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b9:25:13:10:13:e4:37:3b:0c:20:07:5e:74:8e:80:4e:fa:
2b:cb:72:22:7c:1a:88:7f:0b:13:40:99:ba:59:51:45:6e:b8:
6b:a8:f1:88:9d:28:f1:06:4e:f4:7c:8b:a2:12:85:bd:36:ac:
6a:d6:64:dc:c7:94:15:7b:51:7d:2a:17:a0:9c:c2:06:e6:26:
6b:4f:2d:34:97:18:c5:c0:93:32:82:61:c3:ea:9e:dd:d0:e4:
ad:55:e7:c6:b6:63:3c:ea:c4:9e:09:37:f1:d4:f6:c0:52:44:
52:92:da:e1:97:49:d6:63:79:0a:2e:7f:83:2e:ea:76:ad:f4:
77:21:9d:77:43:7c:80:ba:cf:c4:0d:9b:4d:23:a1:2d:2b:43:
e6:79:d8:74:cd:b3:aa:65:0d:0a:4c:cc:06:f4:73:5c:3f:00:
32:71:a2:35:14:41:38:f4:0c:e4:fe:fb:a9:24:b0:b9:23:24:
77:cb:f7:cd:0f:67:3c:6f:0a:26:6c:7c:d0:8a:53:b2:2d:3c:
8d:b9:d0:c4:38:34:9f:20:37:19:93:2a:87:53:ce:b1:15:cb:
ca:3f:15:b9:e2:3b:d6:20:ec:1d:bd:c2:89:c1:b2:ab:80:93:
ef:2d:8c:dd:96:9a:e0:34:01:20:8f:95:58:a2:8e:61:c4:4c:
44:09:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:40 2025 by rpki-client