Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: iJupdgikbVkfc5DMJzzFk4NUTeR4nEYY71rELT3MFJM=
Subject key identifier: 5C:55:D8:7D:19:4C:AB:B7:13:3E:18:28:40:CD:46:9D:11:59:15:67
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 019A4EF53F9C270E8BF79E1CCAA144451875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 086C
Signing time: Tue 04 Nov 2025 13:01:26 +0000
Manifest this update: Tue 04 Nov 2025 13:01:26 +0000
Manifest next update: Wed 05 Nov 2025 13:01:26 +0000
Files and hashes: 1: GdYDqrOhgB8exVYYyIqPRX61C-I.roa (hash: NWfhvpFN96SLGPQqqCOWVE/72vTziFHwtrYFSPDHX60=)
2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: 6MeXV33NgusU9TEPLwEHQFV9dG7XF77YtTC/Y8FXQFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3f:9c:27:0e:8b:f7:9e:1c:ca:a1:44:45:18:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: Nov 4 13:01:26 2025 GMT
Not After : Nov 5 13:01:26 2025 GMT
Subject: CN=5c55d87d194cabb7133e182840cd469d11591567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:d2:df:cf:1e:db:2e:2e:09:e3:c7:4a:e0:
af:97:9d:13:c8:72:db:a1:b2:bc:f0:b1:38:03:e9:
bf:9f:52:06:aa:95:6f:a8:e2:d6:d9:cf:47:3e:bc:
6f:ea:9b:1a:b2:a3:3c:ac:f6:62:8c:09:1d:e7:9a:
4b:64:f8:24:2d:bc:c9:f6:51:0e:15:cd:66:bd:c4:
fd:41:93:5a:a2:41:e0:5a:d8:37:06:62:4d:10:fd:
8d:d5:be:9e:27:2e:7a:1c:80:b1:b6:19:49:e3:d2:
25:87:e8:ab:c3:28:ee:6f:22:0f:9b:92:4d:47:17:
f4:fb:03:33:e1:36:58:c8:47:8f:89:3e:52:4c:47:
74:f6:8b:a7:09:56:ac:39:e3:7b:18:a6:c7:6b:23:
cd:2e:72:33:2d:25:c5:57:64:b4:75:ae:61:78:c7:
0e:e8:e1:ef:39:57:5c:f0:fa:76:ad:e0:8e:e3:8b:
54:c9:70:c7:b3:83:b3:ee:09:c2:a8:0d:68:9e:d5:
f4:0a:7e:44:f9:af:b2:fe:56:22:7b:68:f7:4e:94:
80:e4:e6:38:77:8f:6b:8f:bb:30:a3:d9:72:33:fb:
70:b5:d4:8e:2b:94:41:f3:7d:92:2a:ae:63:34:5c:
ad:d8:85:b8:fd:d2:63:53:6c:37:62:3c:87:03:7f:
b7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:55:D8:7D:19:4C:AB:B7:13:3E:18:28:40:CD:46:9D:11:59:15:67
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:76:14:03:8d:e1:90:dc:b0:c4:95:b1:c5:0d:ff:d5:82:e1:
de:97:d0:00:73:71:ec:4e:91:17:44:ca:cf:94:5f:cc:16:5b:
a8:dd:ed:b7:98:ee:e3:c5:8a:79:52:b0:a0:6f:51:2e:5a:2d:
a5:39:03:47:39:04:11:6b:43:2b:00:bf:da:bb:d9:6c:33:29:
61:d9:30:b0:35:5f:8d:39:41:71:c0:11:65:a1:09:85:1a:e4:
30:d9:24:fb:93:78:31:7b:c0:6a:07:6f:0a:c5:3b:5c:02:d4:
ec:c4:eb:30:9e:6c:8c:e4:b0:ec:10:6e:4c:e5:9a:80:46:3f:
17:3f:fa:3f:d3:ac:a9:8f:5f:8a:a5:f9:40:13:ed:42:8c:89:
62:c2:51:90:4d:23:3e:bf:7b:07:53:ab:f6:9f:fe:49:f3:58:
8a:ed:ab:dd:cf:cf:18:5b:d5:43:81:df:34:95:eb:8c:94:63:
2a:bd:55:2d:7b:b4:55:ec:b8:57:86:94:7b:1c:25:fa:be:c4:
db:33:96:7a:fe:a3:c4:10:76:cc:92:0c:50:50:c4:5e:6a:d2:
a3:ca:35:ea:7d:43:d6:89:4d:27:67:2f:a5:98:10:8a:7b:79:
e3:ea:63:34:8e:b0:d7:46:49:3a:3a:8c:2a:3d:f3:28:f1:0f:
ce:e0:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:57 2025 by rpki-client