Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File: K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier: +fnhopwPpQEkTSg7HVQ1oxRgVk7drt9BfUw9madcMAc=
Subject key identifier: D7:AF:0D:C5:E0:69:2F:A1:D7:3C:45:FA:48:C6:B2:4D:D1:9C:30:AA
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 019A52637A6C40647B2091ABFB14D023FEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number: 159A
Signing time: Wed 05 Nov 2025 05:00:42 +0000
Manifest this update: Wed 05 Nov 2025 05:00:42 +0000
Manifest next update: Thu 06 Nov 2025 05:00:42 +0000
Files and hashes: 1: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: ecQiG2MU4Y8R8GRlT02wlCC1mAgV5EIu7cAwC6NQvaY=)
2: SG-oYWBeZ8PdnxfhbLJBRMxInjk.roa (hash: IQmUUHJFzP7J5Wi5OG22cXQ7JSU97X0TL3RWD8DykE4=)
3: Z2dM55D00aW3RfIUxB7Cn0s3y18.roa (hash: r2sGLOuiB3Y67DgBocYW+k6Ki76Sz1ifvXri1YzDX/Q=)
4: ahgAUM5M5NZzfBW0iQqq_x4yTBk.roa (hash: tYZ97cgI+SOXirQ9qolsOlp5bgffydesZkrQgwP6yTM=)
5: ogSoMdhdAk8uFwcOj4t323bCuLA.roa (hash: 6Rc+OF5CJCx6tSX2U3Orec6EhmGDrr319Qj50sk2tYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:7a:6c:40:64:7b:20:91:ab:fb:14:d0:23:fe:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Nov 5 05:00:42 2025 GMT
Not After : Nov 6 05:00:42 2025 GMT
Subject: CN=d7af0dc5e0692fa1d73c45fa48c6b24dd19c30aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:ff:db:03:fc:7c:27:b7:8a:ed:93:3f:c6:
ce:81:a5:86:19:c8:b9:8f:e4:5c:5e:1d:c4:16:22:
1d:86:55:86:93:29:87:db:d3:55:12:31:e5:fe:1d:
e6:b8:4f:0a:9c:0a:8a:2a:e4:23:f1:ad:75:93:42:
ee:7b:7b:a9:ec:48:1e:bc:3f:fb:51:d3:8d:35:1e:
51:64:51:d4:4e:15:e2:02:c0:77:93:e9:4f:1f:e1:
7f:2b:97:f7:00:4c:48:ee:c0:c5:4b:2b:6e:05:88:
54:fd:9d:91:80:b7:61:ce:db:6f:2b:96:d5:34:32:
64:20:f3:df:56:53:3c:1f:e4:a0:45:f8:24:2c:13:
d7:99:d2:77:1e:38:37:62:74:76:b2:e3:b9:03:d9:
ae:31:bf:4c:81:c4:80:17:dd:5b:bf:d6:07:74:59:
c4:f9:f6:ff:1b:b8:fb:10:0d:d8:29:1d:46:58:15:
31:5d:88:91:55:9f:8e:19:b9:92:d4:3c:3a:38:0c:
a6:88:19:23:11:96:f1:17:b2:b1:10:34:92:61:0a:
b6:62:ed:94:6f:87:88:4c:da:1c:cd:fb:a0:13:46:
4b:4f:6a:cf:7a:b0:75:24:ff:2d:71:f6:d5:5f:80:
18:73:56:8d:54:49:5d:b1:ce:49:4c:b2:7f:28:58:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AF:0D:C5:E0:69:2F:A1:D7:3C:45:FA:48:C6:B2:4D:D1:9C:30:AA
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:df:33:54:ff:5c:d4:54:8b:60:30:f5:4b:83:4a:98:fa:a3:
f7:a3:f7:ed:ff:f9:57:ab:3f:b5:68:d0:e8:d5:ce:f8:8a:b9:
e7:d9:15:d0:31:16:6c:40:ae:ef:b0:c5:45:fd:48:42:98:94:
aa:10:c0:0b:1f:7d:fe:8d:0a:71:f8:55:e7:3a:7e:c4:dc:81:
b5:86:a9:3a:96:4b:17:50:86:50:96:87:80:ad:a4:ac:41:78:
e0:4b:48:bb:ab:13:cf:b6:16:69:02:51:bc:a8:75:84:4f:f0:
92:27:21:c8:c9:d0:3d:f2:e7:8f:1d:8f:c5:90:2f:1c:78:e0:
28:3c:19:04:c2:d7:7d:6b:01:b8:bd:af:19:08:36:29:bf:20:
8e:9f:9b:fa:62:9b:91:f8:bf:99:23:aa:c0:10:fc:50:08:d1:
e0:29:91:7c:94:bd:44:99:73:e9:34:ce:53:79:56:2a:a2:f8:
51:d4:2f:60:f3:84:de:fe:cf:82:ee:82:7e:96:b7:2a:da:d5:
ca:0d:74:05:f3:8f:83:04:c8:a2:f9:52:9b:de:bb:5b:a0:11:
15:7b:a8:7d:ba:57:db:4f:e1:8e:9f:7c:b3:7a:8d:b0:02:5b:
fc:53:ef:54:a2:83:78:5c:19:02:df:62:10:4f:60:b6:a3:5b:
1c:e9:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:24 2025 by rpki-client