Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: M+/IVyLkXoAAAHH1VRhVy9na2M2WLsPT3tMis9nmAQU=
Subject key identifier: AA:43:63:09:CD:C1:88:85:BB:A8:6A:B4:4B:5B:D1:1D:A0:BB:36:1E
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 019A5150CFEE6D049E10303D57704C142841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0D0D
Signing time: Wed 05 Nov 2025 00:00:41 +0000
Manifest this update: Wed 05 Nov 2025 00:00:41 +0000
Manifest next update: Thu 06 Nov 2025 00:00:41 +0000
Files and hashes: 1: 25RJ6ZVs0Rq2vgAnn5qDuc50gBc.roa (hash: E2CGstsnfAcGk1lBYwpyCPeNPt0F4yT/sEC2c5F9t8o=)
2: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: Rw5rjkC1dzm8THoct5Fe/YzSVWTHM861yITjKTvTdzc=)
3: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (hash: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:cf:ee:6d:04:9e:10:30:3d:57:70:4c:14:28:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Nov 5 00:00:41 2025 GMT
Not After : Nov 6 00:00:41 2025 GMT
Subject: CN=aa436309cdc18885bba86ab44b5bd11da0bb361e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:1e:cc:52:00:47:39:99:a9:0b:11:1b:1e:
d2:fd:a5:8c:c9:b7:b2:92:7c:f9:55:87:1d:56:be:
b7:0f:0f:aa:15:e3:f0:1d:5d:8f:26:a3:02:10:23:
f7:f1:15:95:71:70:16:76:2f:86:d5:70:ae:a5:ae:
b0:45:1e:93:25:4e:52:a1:33:b1:39:1d:f6:84:de:
b4:47:df:7e:e5:52:73:69:76:27:50:e1:f0:34:3d:
4e:6a:92:93:a4:60:97:e1:80:6c:1d:14:bb:31:bc:
67:21:ee:cc:84:00:a0:3b:e3:3e:cc:63:00:8a:a0:
e3:d1:cd:fd:0e:04:a6:b6:43:68:00:2e:aa:b6:ed:
49:50:42:02:80:c9:f1:56:df:00:9a:c7:74:d9:56:
ab:3b:a5:32:94:80:c0:9c:44:73:a0:01:9f:f7:85:
95:94:b7:52:b2:9b:97:30:c3:e5:6a:81:00:4e:51:
2f:56:83:b4:87:48:a1:79:3f:18:21:f9:df:34:5f:
e9:e1:c9:88:ff:dc:57:86:c4:de:af:1a:9a:a8:c4:
c2:6f:5f:7f:f3:90:a0:49:90:a6:9d:ee:a2:c4:19:
10:fb:7d:ee:46:2a:12:f3:a8:ab:8f:80:6e:a4:37:
79:71:61:34:8c:82:b4:47:50:16:6d:37:dd:a0:3b:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:43:63:09:CD:C1:88:85:BB:A8:6A:B4:4B:5B:D1:1D:A0:BB:36:1E
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:60:8b:66:08:b5:b2:aa:22:1e:0e:c5:77:7a:b3:ff:0e:f0:
27:a3:9a:e3:a2:37:77:37:5d:fb:0d:35:9b:49:1d:a3:88:d2:
e0:9c:81:20:a5:81:21:69:43:53:75:c2:4f:3a:5b:db:43:1f:
be:d1:c4:72:cf:57:3a:6f:63:29:cc:96:95:74:46:b7:1e:e5:
b5:3d:9f:36:77:ff:fa:0e:ea:48:63:fa:37:7c:f6:bd:bd:45:
3d:33:22:bd:77:a5:b7:9e:a0:71:e8:1f:c9:84:fd:d1:de:d2:
de:bc:06:39:64:88:bb:84:71:83:9f:3d:3a:9b:02:d4:88:cc:
3a:b2:c9:a4:1a:8a:40:f3:0a:97:69:4b:44:2f:d5:12:71:4d:
7e:67:44:00:67:7e:76:e6:93:f0:7d:f7:29:91:35:47:63:f4:
b1:a2:c4:a9:42:4a:40:93:06:de:7b:6c:d2:d8:03:01:47:dd:
b0:06:44:48:a3:50:a1:d6:0c:2e:42:e4:87:5b:37:30:21:fe:
4d:e0:87:30:5d:8a:d7:18:c0:7b:49:66:71:92:93:94:ec:41:
e7:39:21:85:32:85:4b:cf:c4:92:a4:1b:43:06:da:57:ae:58:
92:f7:a6:cc:00:39:f3:44:d8:42:e5:84:86:a8:d2:b4:69:09:
d8:5c:8a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:30:46 2025 by rpki-client