Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
File: kNPlNxtkq5QtbcugSt_yrnq3xxI.mft (raw, json)
Hash identifier: 75SAquxAHAZXvaCRyYhgLJmFr51Jt39+0R776DnSdak=
Subject key identifier: 88:A8:69:3E:6E:81:13:BF:32:2B:AA:0F:39:82:F0:73:BA:81:EC:89
Authority key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Certificate issuer: /CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Certificate serial: 019A4D069C0C9CAA49E97EE52C97AD5BF30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 04:01:09 +0000
Manifest this update: Tue 04 Nov 2025 04:01:09 +0000
Manifest next update: Wed 05 Nov 2025 04:01:09 +0000
Files and hashes: 1: 8qr5TNtGc99EM-QMiEzlHX-eukY.roa (hash: dcTHPs/n6VDmLIgcktF37rlPg3cwpYptx2bPoNDPRlM=)
2: kNPlNxtkq5QtbcugSt_yrnq3xxI.crl (hash: 86v+KEbRQu6wkLTqtB5/VKrPAAHVIY30ylJChuOSY3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:9c:0c:9c:aa:49:e9:7e:e5:2c:97:ad:5b:f3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Validity
Not Before: Nov 4 04:01:09 2025 GMT
Not After : Nov 5 04:01:09 2025 GMT
Subject: CN=88a8693e6e8113bf322baa0f3982f073ba81ec89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:70:46:2b:5f:39:4c:ce:48:95:75:85:84:
af:fd:c9:0d:ad:66:7a:d5:9e:21:cb:cc:a7:c2:47:
bf:5d:3e:fc:e6:1c:a3:08:e6:4c:9a:32:b8:61:c6:
e7:ad:2b:63:c2:ef:f8:f0:fb:ad:24:80:df:7a:34:
d5:6d:ee:9a:05:48:3b:02:de:21:bc:22:7a:31:70:
5a:79:44:14:a3:81:cb:c0:ab:44:f1:be:12:1c:f7:
40:1f:25:de:c7:98:14:f3:a1:ea:19:7f:59:10:0f:
57:db:ae:5f:69:54:ea:c7:ed:77:87:4a:b3:8e:ff:
db:bd:f0:b6:69:1e:a9:4c:09:6a:04:6b:ef:50:b7:
3c:69:c1:0e:aa:39:7d:4c:91:ec:ad:2d:c3:e8:13:
7f:ba:13:47:68:20:8f:bd:9c:96:18:3c:e1:bf:57:
70:b9:a6:9c:39:71:0f:58:41:47:fe:6a:50:9e:6f:
67:36:56:68:a9:85:d0:de:66:b0:2c:db:22:8e:79:
5c:f4:06:59:c0:4b:dd:83:8a:12:e9:4f:2f:4b:cf:
96:50:5c:0c:64:8a:fe:03:72:e9:13:d7:d6:79:a9:
ef:1d:36:a8:53:83:bd:45:d8:fb:78:2f:ac:7f:36:
b0:86:fa:6e:b0:76:ef:a0:42:70:56:9d:eb:ce:b8:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A8:69:3E:6E:81:13:BF:32:2B:AA:0F:39:82:F0:73:BA:81:EC:89
X509v3 Authority Key Identifier:
keyid:90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8c:aa:bf:c8:4d:31:46:47:1f:b5:67:ea:a5:82:03:b5:7b:
84:56:c5:01:f5:5a:a5:a5:0b:e2:b5:04:da:30:f6:30:99:ea:
48:6c:12:dd:d4:45:de:1b:af:30:00:cb:f7:b9:2a:6a:f2:25:
da:36:52:6c:87:89:21:3e:09:c5:48:ca:8b:e9:88:1d:25:f5:
f1:9a:52:f6:e3:a4:b1:3d:29:61:3b:66:f2:80:39:5f:98:9d:
3a:b6:76:02:22:be:76:ea:72:3f:76:25:4a:ff:69:de:0a:5b:
bd:da:ea:36:3c:18:01:4d:3c:b1:1b:7e:41:a9:cc:22:b9:45:
be:9b:00:26:d3:20:f2:69:53:90:15:cd:8d:58:8d:77:fc:b2:
de:f0:43:a0:bd:1a:98:68:e3:91:e5:ed:93:56:2c:6f:75:a6:
5c:94:d2:2b:04:d9:b4:af:11:5c:b5:6a:20:61:99:c3:c1:ea:
16:37:10:2b:0c:cb:be:02:7b:63:7d:44:3b:3a:e3:d9:bc:93:
50:26:07:7b:27:e5:12:58:dc:1b:63:92:64:af:21:1f:96:70:
ef:71:5b:a4:4b:85:8f:38:8f:76:73:aa:8a:6f:6d:31:63:e9:
25:a2:a6:87:82:42:ed:0e:af:14:53:eb:fc:f0:d9:29:ca:68:
64:3d:1d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:06 2025 by rpki-client