Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
File: k1x7dikZzzbcFCY_XllV6P-jXTs.mft (raw, json)
Hash identifier: iyV/q9OmEaJt652w/jhL9o4hNwI8l4+P/i+UZB25wZc=
Subject key identifier: F1:BC:FB:62:E2:ED:AB:B1:B5:E7:19:7C:F0:87:03:C9:11:03:CC:45
Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Certificate serial: 019A4EF4C1E6AB018711703B859F1778AC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:54 +0000
Manifest this update: Tue 04 Nov 2025 13:00:54 +0000
Manifest next update: Wed 05 Nov 2025 13:00:54 +0000
Files and hashes: 1: k1x7dikZzzbcFCY_XllV6P-jXTs.crl (hash: JPyTbgF+NqYMWXKCR5aXYWNZ3ILo+6lFBVPWwfQUQ+Y=)
2: mPtwMPDBjS-jkWgS9uuTF9_ZOaw.roa (hash: 2rJnzrY1kifgjd6LuERI+YOBEpbALMoWfYZ9TooQij0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c1:e6:ab:01:87:11:70:3b:85:9f:17:78:ac:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Validity
Not Before: Nov 4 13:00:54 2025 GMT
Not After : Nov 5 13:00:54 2025 GMT
Subject: CN=f1bcfb62e2edabb1b5e7197cf08703c91103cc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:19:77:40:92:a3:c8:b7:4f:f6:d7:e9:3c:
38:12:29:32:59:e9:a0:f1:a3:4f:14:c6:5b:ef:0e:
82:5c:7a:67:7d:d7:9b:a1:31:0c:2d:54:97:7c:3a:
68:ba:94:07:48:73:b4:e2:86:f4:17:c1:d4:1c:43:
f6:b8:16:9b:c3:ef:9a:56:3e:68:15:8d:4f:68:84:
4b:88:57:38:ab:68:14:9e:98:20:57:b0:56:a5:36:
17:48:19:d1:22:37:04:c9:bb:07:75:1d:1e:3d:eb:
63:1f:5a:9f:81:02:87:5c:5f:72:2f:53:36:5f:71:
86:6c:ce:f8:9f:13:58:1d:1a:b0:1f:c0:b2:ce:8f:
a3:ec:f5:d5:18:fb:fc:74:e8:f4:80:21:09:d3:84:
29:bc:e3:08:91:3d:40:5a:c1:79:a0:90:20:14:69:
66:a0:0f:45:bb:36:1c:a8:81:a3:dc:84:b0:09:5f:
55:b3:7c:d2:28:f9:24:1f:4e:de:67:df:2c:57:98:
d7:56:ea:f1:da:cc:e5:e6:8a:de:24:cf:78:55:c4:
77:92:8e:96:a6:b9:fe:65:52:da:55:8d:ce:7c:c0:
29:4d:41:51:5a:f3:bf:38:da:6e:d4:75:56:33:07:
bf:29:8f:63:fc:92:d1:ee:25:e5:61:de:5a:5f:c4:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BC:FB:62:E2:ED:AB:B1:B5:E7:19:7C:F0:87:03:C9:11:03:CC:45
X509v3 Authority Key Identifier:
keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c7:21:9f:48:7b:52:90:8a:e6:5e:a5:24:91:b5:41:83:27:
ba:c9:fd:54:85:7b:7b:21:67:2c:33:87:01:32:90:5a:d8:a3:
3c:3a:4a:16:af:e7:54:be:48:97:cd:dc:f4:75:bb:cd:81:5e:
7b:83:24:94:42:ef:8f:de:33:60:3a:2d:be:e4:21:91:8e:35:
c3:ee:6b:55:09:96:a1:be:5a:12:9f:e5:ca:73:db:03:67:de:
bd:f4:d2:a5:71:8e:8d:54:26:1e:2c:a6:91:f8:a3:db:2a:3e:
80:ae:99:bb:62:74:8c:81:8c:fa:f9:a7:6c:30:18:6e:ab:b3:
ff:8e:8f:b0:db:4b:f1:fb:e4:f7:e5:5d:14:e7:8e:36:8e:83:
fd:f0:31:ba:ff:0a:8b:a1:75:4e:38:a5:f5:05:9c:5e:1f:d8:
6e:c1:b3:27:93:1a:87:14:fd:f0:51:4a:06:8e:de:37:c4:cb:
b3:a7:58:cc:e5:a3:a8:bb:4f:1c:11:a5:49:ee:26:56:4c:78:
b2:93:f5:4f:6a:76:bf:4c:64:b9:31:33:f5:66:6e:3a:ff:55:
dd:60:7d:19:0a:df:13:28:d6:f6:14:d7:db:c7:5d:f4:23:00:
d2:c5:e4:10:8d:29:28:9a:52:de:d4:d0:6d:5f:41:ab:86:33:
63:a8:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:01 2025 by rpki-client