Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier: sQ6K6urW7mcNe0y1vTJ5xLD0BGeDS9fQzCvpMjC3OCo=
Subject key identifier: FD:25:BC:F1:66:F2:C4:B8:25:85:36:77:4C:9A:50:DF:95:E7:91:1B
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 019A541AE8180CF0F46E9A494816072F4CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number: 126C
Signing time: Wed 05 Nov 2025 13:00:40 +0000
Manifest this update: Wed 05 Nov 2025 13:00:40 +0000
Manifest next update: Thu 06 Nov 2025 13:00:40 +0000
Files and hashes: 1: Qm0v2QB0N6w8qGQL8ta92rDkpA0.roa (hash: aEK3PYUQq1E1pzkJ/CLkmP6YwUe047cyT3qoeHQ2dn8=)
2: dS8Rkw8dzyED62hL_7OXnHLvH04.roa (hash: qEmro5fJia38aDC86kQ3vNKBrJLyPDYdvwDe7Qknl6I=)
3: jIx4n0qvGCMbvZ4nZHfe7AlAvc4.roa (hash: PbvVUSgN0dLFWz6bc4odaxxggERGNNwAo8M1AiayrEs=)
4: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: bsZeIKfIZrP38uRtV72epVlz8edovujTpRpj1389jwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:e8:18:0c:f0:f4:6e:9a:49:48:16:07:2f:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Nov 5 13:00:40 2025 GMT
Not After : Nov 6 13:00:40 2025 GMT
Subject: CN=fd25bcf166f2c4b8258536774c9a50df95e7911b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:18:51:76:ae:da:53:6b:d4:62:43:9c:78:a8:
8f:58:07:d0:81:f5:10:d2:fb:92:5e:4e:db:7e:95:
12:37:6b:de:1d:dc:78:56:48:4d:f4:92:09:0b:7a:
b0:5e:9b:92:22:29:fd:d3:06:47:3e:9c:fe:83:81:
e1:11:df:9f:8f:e1:f9:e1:fa:31:bc:e8:ff:80:6a:
ad:e1:39:d0:ff:24:f2:9e:65:53:20:38:58:3b:55:
03:d6:cf:7f:87:09:65:81:e1:cf:09:3f:35:4f:da:
9e:6e:02:9d:9b:6e:82:cc:d3:bf:ee:6e:33:36:fc:
db:04:cf:94:23:db:3a:16:18:ce:1f:c1:eb:34:f8:
5e:b4:f6:68:6e:f3:17:3c:79:7b:20:76:c0:02:a8:
3f:d0:2e:60:51:f3:5a:c5:b1:dc:a2:35:3d:d1:6a:
f7:f0:e2:67:6f:0e:56:90:50:1a:83:9e:36:5e:1a:
1b:72:f4:b9:17:cb:85:81:30:6b:44:28:b6:34:6b:
3c:72:f2:ef:23:a2:cd:52:31:44:5c:7d:cf:9b:c2:
63:5d:d0:7d:98:33:78:f8:99:fe:37:d3:ec:de:c7:
67:6e:70:36:31:34:93:1b:04:f0:af:5f:04:ee:a4:
39:14:77:f6:46:05:16:92:65:c5:b4:09:30:12:ae:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:25:BC:F1:66:F2:C4:B8:25:85:36:77:4C:9A:50:DF:95:E7:91:1B
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9e:75:70:07:8b:2c:e4:0c:c1:4a:39:9a:75:fe:55:ce:2a:
a1:d1:57:40:26:94:e3:b4:a5:de:a7:38:04:bb:4a:26:26:31:
bc:ef:2c:49:56:04:a0:55:a1:1a:6b:41:95:13:7d:d3:a3:f5:
36:12:8e:53:68:3e:a1:09:d9:65:0e:6e:da:e4:41:14:2c:6e:
da:cb:ca:4c:10:e2:88:9a:a5:1a:bd:91:8b:48:de:71:0a:b6:
d2:70:41:ac:f2:1f:88:67:4c:54:58:89:aa:7c:bf:38:92:89:
39:0d:47:f5:49:2e:cf:ba:ee:d9:d5:28:c5:f2:62:c2:29:7f:
36:f0:ca:38:36:43:dd:aa:ad:c0:bc:c5:15:f2:b8:86:c1:81:
57:c1:12:0f:f7:f8:6a:23:f9:b0:28:28:32:ce:e3:fb:44:73:
10:74:ae:3d:c4:5d:11:56:b0:60:a7:ed:0c:4d:46:6e:16:bd:
77:08:16:6c:98:63:86:1f:d0:cc:4b:07:d6:de:5d:62:59:fd:
af:8f:3a:87:5b:6e:cd:a2:b2:f2:06:90:10:48:1e:11:88:4e:
32:95:9b:42:93:95:f8:f9:12:33:a8:e9:ff:8d:3c:a4:c9:7b:
12:f6:43:3d:6b:5c:82:e0:bb:50:96:bd:3f:81:71:6b:38:e4:
40:c5:f6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:21:13 2025 by rpki-client