Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier: bBSb7xUpEYAGpbdhcvQ1Ts66D7xvMQafqVyyxbSOB+w=
Subject key identifier: 05:BC:42:E0:20:D8:73:9E:78:60:45:D5:88:CA:67:58:08:57:22:95
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial: 019A533FA32C1D52F62797603587D8A179ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 09:01:10 +0000
Manifest this update: Wed 05 Nov 2025 09:01:10 +0000
Manifest next update: Thu 06 Nov 2025 09:01:10 +0000
Files and hashes: 1: 4MUCYAZCB6NVOKQFb7pDQIHNpgE.roa (hash: J62BqBqvWBCAmGxGxzXNfz9RxMyKPvmpSv0G2g6PRts=)
2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: 2Iu6a9KrGf9OZdpgI6ALQIe0OM/UGUsABddUpPxMH9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:a3:2c:1d:52:f6:27:97:60:35:87:d8:a1:79:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Validity
Not Before: Nov 5 09:01:10 2025 GMT
Not After : Nov 6 09:01:10 2025 GMT
Subject: CN=05bc42e020d8739e786045d588ca675808572295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:57:52:85:67:f9:8e:1d:1f:03:be:a3:4b:
65:8f:7a:1e:40:0f:34:b5:08:a6:98:67:30:94:2f:
70:bb:dd:9f:be:72:98:2c:34:c6:e6:4f:18:fe:e0:
47:39:22:e8:54:10:4f:f9:c2:fc:1f:42:67:37:8e:
1b:c7:26:a5:da:eb:98:42:af:3f:c5:8b:de:c9:8b:
7b:10:ca:85:31:7c:a1:a4:eb:f6:3b:3a:00:d1:11:
bb:13:d7:03:d0:13:5a:8f:d2:84:ef:ad:35:50:83:
58:39:ef:69:b3:9b:06:b6:7d:2d:35:54:1c:bb:dc:
a9:cf:34:4f:28:f2:20:cd:2f:f6:d0:61:ea:3a:80:
7d:3e:90:b0:d3:a3:3d:5c:ec:a7:15:b9:31:75:b4:
ea:e1:49:89:9f:cd:36:89:72:69:82:be:3e:a4:b7:
89:f4:3f:8e:90:bb:40:95:a4:b0:f0:1c:b5:10:c6:
c9:60:8d:85:dc:90:b4:fb:81:72:28:e8:d0:22:bf:
75:02:63:b9:d4:ee:fe:5a:83:2b:ac:b8:a5:fc:a9:
84:fe:b6:c7:da:3d:58:00:cb:0e:d3:b8:bf:6a:39:
cf:c2:d4:24:bc:47:f7:a3:72:cf:6e:ac:91:33:b8:
af:f8:02:62:8b:89:0b:af:2e:97:ac:6f:5b:f6:65:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BC:42:E0:20:D8:73:9E:78:60:45:D5:88:CA:67:58:08:57:22:95
X509v3 Authority Key Identifier:
keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:91:75:00:71:d7:ab:b4:28:b5:69:02:5d:68:19:78:13:a6:
cb:57:12:f9:b5:4b:05:40:87:25:59:68:c1:68:79:71:53:25:
fb:c7:b3:c1:39:01:9d:46:46:01:08:7f:ff:c8:e8:55:46:bc:
b4:c7:3e:35:2c:eb:6e:dc:91:56:1d:83:c3:bc:af:95:57:8f:
e6:38:a6:58:30:a7:9d:6b:81:35:f3:5d:dc:7c:69:1d:58:bb:
d6:5b:d2:bb:b6:c1:a5:fa:4c:f1:88:80:58:d5:01:8b:b2:68:
2c:30:4f:99:ca:49:b6:d5:36:7a:de:4e:57:d5:0a:46:a6:42:
11:78:46:22:79:70:a5:ab:02:f2:2b:14:20:c7:f5:af:09:57:
bb:1d:e7:54:cf:20:01:b5:8a:fb:7b:44:e2:49:ca:42:1c:e5:
a7:68:19:56:f8:76:b3:d6:6e:88:36:3f:81:15:68:60:45:d1:
04:69:83:14:4c:09:58:33:0e:93:30:91:7b:87:bc:ee:28:d5:
59:dd:72:86:b4:43:dc:66:14:aa:62:52:d4:f7:b2:46:5b:f0:
e8:e4:d2:9b:25:f8:55:24:3e:b2:0c:e3:b8:7f:f7:b7:e8:6c:
06:56:7b:3f:ad:a1:3c:31:d6:f2:ff:77:34:c5:3f:40:d6:14:
0f:d4:28:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:07 2025 by rpki-client