Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier: j7vusT82Hjro1+XA2nR0IY09G0STPlcwGF6Uf3lx2/0=
Subject key identifier: F5:01:79:DE:7F:C9:EB:6D:2C:7F:7C:B7:27:23:86:BD:C6:A3:A4:37
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 019A5375D0377DB62A5AA4F7698DF89BFEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number: 1723
Signing time: Wed 05 Nov 2025 10:00:21 +0000
Manifest this update: Wed 05 Nov 2025 10:00:21 +0000
Manifest next update: Thu 06 Nov 2025 10:00:21 +0000
Files and hashes: 1: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=)
2: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=)
3: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=)
4: Xrf2BP79heZyPUnEjdoMN247jLA.roa (hash: OhXt9BoGAkGzW+9iunvXp7qfeztquv5rM9uBpdYNu54=)
5: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: agvwhh8lsQuVQog/erSl94M5WgiNUmYeCv4GUdVapKc=)
6: zlsE5y8ISkml9LwmthjQE4JtzdI.roa (hash: P7L80Xo0dmoEjCHpVucHdGzStrd3j71piAYh2Bx9HXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:d0:37:7d:b6:2a:5a:a4:f7:69:8d:f8:9b:fe:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Nov 5 10:00:21 2025 GMT
Not After : Nov 6 10:00:21 2025 GMT
Subject: CN=f50179de7fc9eb6d2c7f7cb7272386bdc6a3a437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:af:0e:8b:b3:64:82:5b:b7:14:45:9c:06:
96:09:86:b2:57:a4:b8:5a:4b:47:fd:a8:95:47:8d:
66:ae:df:b4:5b:72:14:f5:f1:54:54:98:c1:c2:d0:
80:e5:92:38:39:4f:37:d8:01:c3:38:54:f3:20:ae:
dc:98:df:7c:05:bc:d7:6c:cc:04:f4:06:6e:08:1f:
28:e0:7f:21:ca:37:3b:72:ad:0c:50:b1:6c:7b:3e:
5b:97:16:80:50:1b:b3:5f:56:bf:20:61:4b:1e:19:
98:9b:d9:55:ca:eb:5e:de:c3:91:16:5c:0a:82:67:
2d:d8:3d:2a:08:7d:05:52:a9:8c:c6:8e:5d:a5:39:
e5:f7:95:e3:b0:64:08:00:a5:1c:37:0a:83:38:3d:
fe:2f:45:ce:40:5f:07:65:0b:20:bf:83:87:b2:22:
63:56:b8:4a:da:5c:62:a8:64:c1:cb:31:3b:f5:f6:
cd:c9:fe:96:27:97:14:9e:eb:62:8b:24:79:7f:c1:
a1:6f:ce:dd:57:be:9e:61:27:a3:a3:59:16:34:84:
d6:a9:42:07:be:d3:eb:87:28:b3:a5:66:68:2f:e9:
a0:38:9b:51:49:5b:ec:fe:51:2c:6d:43:95:d6:28:
d7:fb:32:b1:99:83:40:d9:2f:bc:d8:06:2b:c0:3c:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:79:DE:7F:C9:EB:6D:2C:7F:7C:B7:27:23:86:BD:C6:A3:A4:37
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:65:bd:95:75:87:2f:f6:db:2d:a7:68:b2:60:df:a7:10:18:
22:30:22:bf:18:0f:22:e3:4b:75:54:9c:07:0d:e3:d7:f5:b8:
60:22:05:89:e3:2e:d1:7f:d5:b1:9f:ad:f8:b5:6d:b6:09:ab:
b0:9e:08:8c:02:1e:ac:a7:3d:58:02:47:78:04:5d:de:7d:72:
ed:25:ba:6e:61:9a:48:d9:0d:a1:ca:b1:20:37:1c:f4:f0:4a:
85:73:b3:56:21:ce:dd:64:31:40:f1:f4:05:ac:90:7c:41:ed:
c7:8a:d9:7d:bc:ac:d8:3d:5c:75:81:55:18:52:1d:50:8d:77:
85:94:26:92:bd:54:61:b2:d6:bb:5e:c2:54:49:c4:7f:1c:17:
1f:86:3f:68:77:83:57:f1:25:c6:4b:7e:2e:73:23:97:0d:0b:
bc:86:66:b7:2b:0c:c3:ab:1c:79:4f:ab:f3:30:a0:5c:56:69:
e6:2a:64:f8:b1:e4:06:dd:8e:fd:00:c1:76:61:66:97:5f:64:
db:c4:ce:46:aa:60:1a:70:00:28:6a:02:47:f1:23:86:0c:47:
90:f9:3f:a6:0f:52:2f:5a:7b:4b:d5:55:c1:0f:8b:59:79:9a:
3f:4f:25:14:a4:11:2a:ca:5c:ac:ad:d2:aa:16:19:c1:83:b6:
cb:31:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:41:52 2025 by rpki-client