Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: eC9rY2md7DJYAU8OqlIznJqlIX2cceHuIpX1379ESEI=
Subject key identifier: 5E:5D:F0:2E:2D:E6:DE:39:25:E7:CE:12:17:FB:46:5A:3E:60:F5:B6
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 019A4D076F3BE85BF09D7FA5DB3DC517C773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 109C
Signing time: Tue 04 Nov 2025 04:02:04 +0000
Manifest this update: Tue 04 Nov 2025 04:02:04 +0000
Manifest next update: Wed 05 Nov 2025 04:02:04 +0000
Files and hashes: 1: 79LYqjKNTJN0ouKGzdcbqvTlAUQ.roa (hash: ql/wdfFz1qsER0EkZDThbVWptAlBg9mw+jziuKWlZyc=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: yVeZEJLwcJVsROy6M+SkOzs4/7MvwjY/Y/ZYJTs8WoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:6f:3b:e8:5b:f0:9d:7f:a5:db:3d:c5:17:c7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Nov 4 04:02:04 2025 GMT
Not After : Nov 5 04:02:04 2025 GMT
Subject: CN=5e5df02e2de6de3925e7ce1217fb465a3e60f5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:de:fe:c9:06:9c:e5:9f:32:1f:03:46:76:
15:38:d8:96:2f:04:4c:9d:cc:e9:63:fe:c4:9e:9c:
a9:c4:e1:65:4f:6a:e3:8d:de:b5:95:9c:ec:39:cf:
af:b6:ba:59:a7:04:22:13:9b:fc:06:d1:27:94:ea:
29:9a:f9:25:c8:7c:d1:35:1e:cb:7a:ed:36:fe:e1:
84:32:3e:28:3c:ba:e5:27:2f:83:4b:ca:b2:bc:3e:
8d:b4:18:9c:e4:1d:7c:06:43:9a:84:94:35:7a:75:
8f:b1:d2:85:fb:cc:c5:fa:d5:af:71:38:e2:19:e5:
fe:73:4a:ee:f2:e2:12:2b:5d:1e:dc:e3:64:12:1e:
d7:d3:a5:6b:a7:8b:42:ff:9a:e6:2e:37:0b:de:80:
a2:13:da:84:86:95:3d:74:46:c4:01:f7:77:7b:73:
90:10:bf:2d:51:d3:97:c5:5b:9b:64:78:37:a1:32:
fb:15:04:5f:65:80:05:2c:9b:c9:9a:f9:1a:f5:d5:
65:e9:b7:51:ab:59:19:e7:40:97:19:99:94:c0:89:
60:ae:68:52:49:bf:b9:43:0b:86:e8:78:5e:2b:2d:
02:99:d4:0d:66:89:2e:29:26:96:27:3d:c7:55:3b:
08:72:89:a0:e8:6e:9a:1a:0b:6d:9a:54:08:92:78:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5D:F0:2E:2D:E6:DE:39:25:E7:CE:12:17:FB:46:5A:3E:60:F5:B6
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:95:ad:7f:d5:30:e9:24:d5:f2:24:7d:0f:33:7b:8d:07:53:
45:5a:aa:00:94:5f:88:10:c8:a7:9e:f8:8e:1f:d4:e0:4d:26:
c6:b1:78:10:f5:08:ad:0d:90:92:03:9d:a0:33:41:ae:89:15:
c3:24:ed:3a:4c:d5:08:e0:ec:f9:41:45:f3:04:c8:6a:da:a3:
77:35:d7:98:7f:d0:c1:16:0f:56:ba:38:da:f1:20:b7:5d:3a:
9f:4c:fe:4c:c4:ae:52:a3:c6:41:51:91:c5:54:11:30:c7:bb:
b8:d8:70:98:fc:7e:50:da:7d:9e:7e:45:a9:06:c5:35:90:63:
0c:29:79:4b:45:84:37:21:40:de:78:75:d7:6e:98:63:97:a4:
5d:00:34:ee:88:fc:ef:5b:0a:71:4e:da:a7:e2:ed:6d:86:2a:
61:77:38:72:d3:0a:54:e1:fb:5d:d0:87:eb:f8:f9:97:11:f4:
41:a8:7b:bc:1e:1b:db:24:41:b0:0c:12:d1:f6:b8:e1:a7:c1:
64:ee:b7:12:ef:fe:d5:79:a6:bd:b6:82:91:a9:da:5f:1a:70:
cc:41:fd:38:35:ff:05:60:2b:64:84:7f:e1:a8:61:08:9b:85:
da:19:92:5b:61:92:62:5f:e4:6b:ae:fc:aa:9d:f9:40:87:20:
be:b3:16:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:41 2025 by rpki-client