Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
File: kKBl7vQNwBahvn8o1uZsp6h-f-U.mft (raw, json)
Hash identifier: tQAFW9snNxpkx02f3q8bxibh9ESxDBgiF6M6NTkUuQc=
Subject key identifier: CB:56:D9:9E:AC:E1:45:A3:27:3F:07:3A:D3:CD:48:0B:DF:B0:F2:70
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial: 019A4E18899D6B96E2CD8D13881F5C5CDBD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 09:00:21 +0000
Manifest this update: Tue 04 Nov 2025 09:00:21 +0000
Manifest next update: Wed 05 Nov 2025 09:00:21 +0000
Files and hashes: 1: FXtyRxy310ujzM3-FcQZ1xIE8BM.roa (hash: sjb/b0eSiH//cLJ9qvCys98Peom21sTpufoCnNtl4os=)
2: kKBl7vQNwBahvn8o1uZsp6h-f-U.crl (hash: 1dZEngJT8oLbuLq7N1sN7YHUw1VskHTXP+B9uY6Cqgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:89:9d:6b:96:e2:cd:8d:13:88:1f:5c:5c:db:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Validity
Not Before: Nov 4 09:00:21 2025 GMT
Not After : Nov 5 09:00:21 2025 GMT
Subject: CN=cb56d99eace145a3273f073ad3cd480bdfb0f270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3b:6a:32:80:45:d8:dc:95:55:48:9e:2d:d3:
6a:41:e6:89:99:1f:2b:6a:0c:a3:b8:97:20:3f:e8:
4b:55:7c:c8:14:9e:e7:2b:dc:98:c0:d1:1d:ba:7f:
0d:cc:85:c7:58:0e:ce:cf:9d:dd:96:1a:75:00:cc:
ba:b7:8b:59:d5:2f:05:1b:53:3b:1c:a4:ea:b5:78:
fc:d4:48:49:2a:f0:35:3f:2a:f5:7b:b0:a0:63:ff:
8d:aa:0f:32:1a:b9:9c:45:73:2a:f4:86:54:da:50:
b5:4f:14:19:61:0e:0c:5c:37:4c:0e:76:f3:45:e6:
84:67:38:3f:dc:e3:2a:e1:4e:db:ad:63:85:02:3f:
a7:7d:3a:7a:da:fc:89:55:a1:e5:7c:a8:82:c8:42:
46:6c:6f:a6:c9:70:1c:b4:03:cf:ce:69:c1:5d:5d:
63:63:5a:22:62:eb:fb:80:c3:09:eb:b8:9a:28:01:
11:8e:3d:23:b6:a6:cf:34:bf:d6:a0:a3:c9:c5:f2:
8a:09:4f:96:5c:e8:92:57:fc:9d:76:d0:7d:06:ac:
d2:e8:1f:8e:fb:81:70:57:72:f7:ef:56:33:91:bf:
f5:91:3f:c6:7d:d2:d8:fb:47:1a:61:37:03:6d:ef:
67:bb:4c:08:fb:e0:31:bc:d2:44:29:69:23:55:3f:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:56:D9:9E:AC:E1:45:A3:27:3F:07:3A:D3:CD:48:0B:DF:B0:F2:70
X509v3 Authority Key Identifier:
keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a1:a4:41:39:56:f5:bf:74:f3:cd:27:b7:6c:11:56:36:cd:
42:eb:10:25:93:20:56:d9:60:b0:19:de:03:9c:0a:e0:d8:fe:
49:2a:0d:7c:25:ec:f6:1c:2f:01:b2:0e:4e:d9:83:5c:80:1b:
4d:ea:8c:85:c7:88:8a:47:b9:81:c0:d9:29:71:4a:af:22:aa:
7d:56:64:08:a3:07:b4:55:f0:3a:78:de:b9:7e:7f:0c:ab:02:
c0:97:ef:90:e8:7f:02:e1:16:e8:65:9a:fa:fe:5a:09:b9:d7:
dd:7c:db:8a:4b:c7:b6:ce:a0:03:75:da:18:12:d1:5a:c3:73:
ef:71:74:65:48:9e:22:34:25:22:bc:8f:70:ca:27:fa:89:13:
c8:f5:8e:27:48:d7:5d:ee:c3:0a:be:9f:20:fb:0a:16:50:a5:
2d:1e:ea:c2:82:96:bf:9c:0f:01:8f:44:87:96:91:66:c2:ab:
94:3f:de:73:05:ed:54:50:36:b4:78:ef:ce:0a:7d:df:a2:a7:
a0:1d:5e:10:7b:22:b2:6b:96:e7:9c:73:99:af:1d:d3:b9:e2:
fa:dc:10:ed:cf:5e:80:38:ca:e3:32:41:16:70:61:64:bf:cd:
b5:44:15:17:f6:d9:39:0a:78:a7:7f:a4:15:e2:22:15:3b:e6:
eb:18:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:25 2025 by rpki-client