Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: /cBzZVhWjmDtR8Ru3jJO0CsW5cxWwqtSD/ZxagWRQa8=
Subject key identifier: 15:5F:FA:49:8A:E5:A3:55:49:60:FF:5C:81:F2:5C:BC:E3:56:21:A4
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 019A4F62772709E354B544BC4C3D0764EEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0E44
Signing time: Tue 04 Nov 2025 15:00:44 +0000
Manifest this update: Tue 04 Nov 2025 15:00:44 +0000
Manifest next update: Wed 05 Nov 2025 15:00:44 +0000
Files and hashes: 1: TNPcdBpnbKooEgmUt2YrkLdYDmQ.roa (hash: WQcIls3E5pX4tymrsMPubCPP31sHiDGN5xYJkHTcWEg=)
2: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: cQXAopV2GShIajAmR7Gs9nbaiBKzE8n3pxDwzq3srzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:77:27:09:e3:54:b5:44:bc:4c:3d:07:64:ee:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Nov 4 15:00:44 2025 GMT
Not After : Nov 5 15:00:44 2025 GMT
Subject: CN=155ffa498ae5a3554960ff5c81f25cbce35621a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:84:9b:9c:04:a0:9b:83:7f:de:0d:6b:ca:
01:13:f0:79:03:68:c8:a0:e5:37:b9:1e:4f:a2:0b:
46:1c:ca:63:34:78:80:3c:02:07:a1:31:2d:63:59:
9f:4a:20:fb:47:db:0d:9e:56:06:29:43:3f:36:24:
29:78:06:93:91:b4:c3:86:33:52:1b:18:eb:a1:d2:
e1:16:19:99:69:29:fa:43:c7:51:28:f7:69:61:f3:
df:8e:38:c3:e6:7e:72:76:83:85:40:35:d9:31:76:
3a:a0:85:36:a7:d5:0e:9d:e2:e6:69:82:dc:b1:20:
8a:3e:93:b2:34:bf:c4:05:4c:5c:38:1d:73:82:66:
63:66:de:9b:29:f7:3b:c1:08:05:1a:84:aa:45:c2:
dd:57:7a:27:69:ef:7c:70:50:63:27:6d:9b:b0:5c:
62:f9:40:d8:82:8a:c7:cd:bc:19:0a:d8:e7:8d:58:
32:8f:ae:13:ad:54:5c:4f:05:05:e5:bb:4e:fb:0a:
c5:06:90:82:6b:1c:68:4e:f1:9b:96:28:7d:ad:7f:
52:e2:0b:e9:09:1e:13:81:e8:05:4f:37:bc:d2:99:
de:07:58:60:11:ad:3b:1e:1f:33:ea:92:a3:fb:35:
d0:52:2a:9d:db:fa:bd:3f:ee:9e:1f:3f:77:14:f5:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5F:FA:49:8A:E5:A3:55:49:60:FF:5C:81:F2:5C:BC:E3:56:21:A4
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3c:47:b9:35:73:13:2f:cc:de:85:61:9a:0a:34:36:a7:45:
2f:1b:9e:19:4a:ac:ca:37:6f:c3:bb:f1:9e:24:e2:d4:ba:e0:
e5:54:ac:a3:8c:74:06:0f:3d:e3:8f:d1:6a:57:d6:10:55:3c:
aa:01:3a:11:74:d5:0b:1f:29:43:a6:5b:a7:fa:c3:b2:f4:04:
4a:89:84:2e:4b:2b:e3:d6:91:f7:4d:34:55:32:e7:6b:9f:f6:
a4:a4:12:70:f6:f7:98:71:4d:78:7d:3d:41:42:cd:d6:b3:a8:
c2:d3:d4:70:12:a6:eb:91:66:2b:70:87:00:ca:1f:15:11:b2:
93:75:14:4c:10:a6:ab:b8:a1:f0:dc:97:48:5c:e4:f7:f9:fa:
2a:3b:ea:1e:e6:6d:d2:6d:b0:f4:ef:aa:7d:43:1e:03:57:34:
d2:00:49:a5:9c:48:5c:a4:b4:f8:8c:b0:a7:eb:f5:4a:87:65:
29:f4:14:1d:d2:ed:05:17:08:3b:0c:57:c4:e7:cf:5c:de:19:
94:c4:40:27:ba:fd:43:be:de:77:39:9f:86:d8:b4:74:fd:5d:
2c:4e:72:f0:19:15:4c:39:2e:df:38:3c:30:f1:08:8d:18:48:
bc:a7:a7:be:92:e5:d9:81:44:ee:bc:7b:fd:84:ef:e1:04:23:
d1:20:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:59:48 2025 by rpki-client