Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: 1Qay3IVLFxaXYk1NcOpqnogFPaKQtH1XstwreuUbpGw=
Subject key identifier: 60:C3:6A:F5:B6:10:81:E5:6E:0B:1D:F9:9A:2C:DF:C8:FF:80:85:62
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 019A4EF570E19B4E8355FDA0047960673516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 0601
Signing time: Tue 04 Nov 2025 13:01:39 +0000
Manifest this update: Tue 04 Nov 2025 13:01:39 +0000
Manifest next update: Wed 05 Nov 2025 13:01:39 +0000
Files and hashes: 1: IlzfTHCX--ryHCCh1ym927r2NiI.roa (hash: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: 03JmqZXgCtPADE4w9ho3KJYGT7ZYhRPteUkCp537Zbk=)
3: LA9bx3k0C7Na4-u8OH3eVdW5a1M.roa (hash: kQiZYiCrBnh88ITE24ugea51DvkHaqRGnV+SPvNj+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:70:e1:9b:4e:83:55:fd:a0:04:79:60:67:35:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Nov 4 13:01:39 2025 GMT
Not After : Nov 5 13:01:39 2025 GMT
Subject: CN=60c36af5b61081e56e0b1df99a2cdfc8ff808562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:5d:de:0c:da:ae:fc:5c:35:1e:ee:74:91:
2f:a1:73:1c:f4:75:76:c9:74:fa:67:8a:fa:e4:a7:
b6:1a:62:7d:6e:1e:38:7a:6d:9d:5d:c6:c8:71:45:
6b:6d:46:1c:42:ad:23:35:c7:5f:4f:47:f1:fc:77:
ae:3b:f7:4f:54:64:25:6b:60:f3:b6:76:a2:ec:c7:
e2:27:64:81:52:35:bb:33:8c:9f:0b:ec:75:2c:e8:
92:5d:30:61:86:5c:3c:d6:43:98:4a:3d:2c:50:2c:
c3:f9:87:aa:57:35:ee:c2:e0:5a:f9:e5:0c:a8:43:
c0:4b:1f:fe:3d:6c:64:84:4c:81:ba:31:1f:08:a3:
19:3f:14:67:4c:3a:cd:ec:99:35:ca:96:30:12:22:
4f:6e:a5:46:b8:92:2b:88:49:92:d2:89:2a:14:d3:
57:53:5b:c5:f0:0d:68:9a:72:bc:64:f1:fb:74:ce:
37:49:a7:87:24:18:43:a5:97:4f:69:3f:c0:56:a1:
46:73:c3:7a:fa:05:43:e1:ae:86:4e:97:cd:66:32:
6f:5e:cf:78:62:11:8f:09:35:70:93:96:19:eb:33:
a5:e9:ae:3e:4b:fb:1f:81:de:57:db:72:47:7b:d8:
ee:e8:e1:ae:0f:37:9d:fb:bb:f5:65:7b:23:4e:28:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C3:6A:F5:B6:10:81:E5:6E:0B:1D:F9:9A:2C:DF:C8:FF:80:85:62
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6f:35:b8:b4:31:61:b7:47:04:9a:9a:a7:e8:b1:32:d5:cb:
98:83:39:d4:9a:f0:a3:0a:b5:ed:34:e2:1c:0b:ca:1e:75:cc:
07:35:65:67:81:4f:55:a0:ed:bb:2d:4f:c8:6a:19:db:de:a2:
a5:20:40:03:84:41:a9:b8:0b:b7:20:b9:a4:f4:46:08:fd:7d:
a1:4f:1b:07:fd:23:b9:9a:de:32:8a:36:66:b0:cf:59:d9:07:
cd:82:ab:2e:ff:7c:09:13:bd:86:1c:f5:26:9a:3c:24:4a:df:
07:d3:fb:ed:1a:5c:7d:67:da:8c:98:f7:00:f2:ae:43:f9:59:
09:63:72:15:09:61:19:5d:74:f7:a1:85:ca:b3:77:a8:1b:20:
ca:bb:86:c8:d2:d2:1c:22:a9:db:7a:1b:59:36:a6:b3:7a:9b:
3b:b7:e3:75:ff:97:16:23:fa:3b:9a:08:9a:de:7c:d3:16:2c:
4f:3c:e6:50:f7:b2:0b:6a:ae:89:22:2c:4d:2a:04:7a:c9:a8:
de:18:79:bf:e4:5d:4c:bb:7b:67:39:2b:2d:17:03:73:3d:66:
42:85:85:fd:e1:0d:a6:1e:5e:99:90:65:71:f4:e8:09:94:bd:
ba:fd:fa:e1:6c:3e:d8:f2:15:f1:8a:44:f9:c5:9d:91:e7:da:
d0:a8:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:53 2025 by rpki-client