Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: fRH8ZZKD9jppHdUlWoxB8zgl3sctaw5eMN6zm1n6FCo=
Subject key identifier: A2:52:B3:C7:B5:B7:D2:BC:85:49:24:E6:62:EB:C5:B0:EB:F8:D7:84
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 019A4EF41BAEF21277E18F0F324C35EEC13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: X7upkGtMR0xjYaZPKUqxKa90hc0NHLsydWe6OM3eEUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1b:ae:f2:12:77:e1:8f:0f:32:4c:35:ee:c1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=a252b3c7b5b7d2bc854924e662ebc5b0ebf8d784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:af:96:82:33:9b:52:d4:dd:92:b1:53:6e:
ff:d2:f5:18:24:4f:1f:1e:64:69:91:78:c9:d0:97:
c5:27:9c:56:e4:0e:f7:cd:25:50:10:4a:5b:d6:19:
22:8e:3c:b7:34:b4:59:fc:8f:c7:9b:12:09:bd:93:
d3:97:4a:fc:be:c4:6b:b5:c3:40:fe:4b:24:2d:be:
e0:10:0e:c1:22:bd:d4:48:dd:d4:e6:e0:51:2b:05:
a8:8c:fd:d4:cd:91:1c:db:ec:c5:79:bd:57:87:56:
13:71:24:3a:29:c2:a7:7c:38:25:f4:61:0a:72:27:
5b:1d:ad:49:a3:04:15:96:ac:6b:5e:e9:5e:23:68:
06:28:90:37:f9:3c:9c:2f:55:af:3a:74:a0:c6:71:
a2:11:35:82:75:2a:7f:fd:28:45:74:f1:bd:65:95:
c5:c5:51:4e:09:2c:62:69:f6:3e:e2:fe:3e:4c:3d:
b9:28:8a:3a:16:3a:38:2f:bf:64:0f:cf:90:12:41:
9a:92:a5:36:1b:5c:14:4d:84:b2:a4:3b:ed:4d:5b:
19:7e:f9:b3:51:a3:fb:10:74:94:b0:d1:3b:be:ca:
9b:31:51:45:71:51:21:51:28:3f:20:d8:b4:80:c7:
85:89:cf:54:b8:46:3e:f7:01:9a:5e:ae:70:8f:8a:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:52:B3:C7:B5:B7:D2:BC:85:49:24:E6:62:EB:C5:B0:EB:F8:D7:84
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:35:14:4b:00:a5:1b:39:45:1c:b1:7f:01:5c:72:1a:b6:e9:
3f:76:5e:7c:38:cc:a5:0a:ba:25:41:08:97:b4:27:43:b8:d0:
64:f6:b8:8c:9e:af:b7:51:84:46:7a:69:32:40:c4:88:14:5b:
f5:b1:07:1c:87:ac:ab:28:ff:aa:f4:30:f9:59:b7:c1:6f:30:
90:3d:cb:5b:a0:ba:d0:b9:cc:f2:86:3f:d9:28:4a:cb:45:17:
52:87:46:97:59:58:d7:4e:9d:00:7e:f9:06:e9:fa:6f:ff:40:
4c:c3:bf:e8:4e:3d:1f:d2:32:94:48:6d:79:d9:c4:43:ce:df:
8c:4f:b0:7c:73:20:e7:3a:3b:ef:e6:95:bc:f9:b1:d8:50:54:
24:86:0b:22:7e:15:1a:fe:b3:40:3a:e3:f8:c1:2a:0c:86:f9:
3f:dd:ea:35:43:0b:29:dc:3d:66:ed:0e:22:8f:d5:5a:7f:33:
f6:49:1f:ca:fe:12:66:84:2c:51:e9:94:c3:8e:b1:af:9b:71:
e8:a3:b5:78:8e:11:d5:85:b8:7c:02:86:bd:a9:07:13:08:08:
b2:c9:c7:37:18:83:ea:89:dc:0f:c4:3c:8c:ba:c3:a3:b8:f6:
78:52:0d:a2:f5:b1:10:df:c6:eb:0c:bf:c1:84:2d:d0:a7:6f:
0a:ae:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:11 2025 by rpki-client