Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: uegCBzE0WObz3m4fBwTTtAaoiEDJDGd5qtYmG9nVhoE=
Subject key identifier: 76:AF:95:20:25:51:2C:04:95:5A:F9:77:BF:08:76:C6:25:0F:B9:DF
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 019A50E41AEB6633348B8872859C2D5AA615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:01:57 +0000
Manifest this update: Tue 04 Nov 2025 22:01:57 +0000
Manifest next update: Wed 05 Nov 2025 22:01:57 +0000
Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=)
2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: XDXnxL7H1R364yEgrqIqiDpxSqUBKKgHZG1p2P5QrRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:1a:eb:66:33:34:8b:88:72:85:9c:2d:5a:a6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Nov 4 22:01:57 2025 GMT
Not After : Nov 5 22:01:57 2025 GMT
Subject: CN=76af952025512c04955af977bf0876c6250fb9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:84:46:35:85:89:c2:81:4c:b9:06:73:41:
ab:4f:31:b6:ef:e8:63:7c:fe:5b:03:47:93:61:92:
c1:6a:37:56:04:95:5e:83:cd:ea:77:c2:a0:12:df:
e2:ca:a9:b9:4d:a1:85:64:a3:36:cb:10:77:25:11:
1c:45:71:6f:83:80:5e:fa:ce:8b:72:fe:ab:2b:20:
d5:66:8d:90:cf:37:f1:78:1f:f8:71:e7:d6:6b:c9:
b1:0c:e1:af:f9:e9:4f:fe:e7:61:5c:b5:36:5f:83:
0c:61:ad:81:c4:48:2e:79:5d:04:c0:6e:52:62:a1:
fa:26:14:76:d7:d6:22:5c:a9:cf:ac:c2:e9:8c:59:
1e:71:13:b5:71:7f:e7:bf:c3:68:79:d6:89:fe:7d:
54:e0:23:ae:b6:bf:0d:81:cc:91:69:d3:80:60:c6:
f4:5d:a8:17:52:1e:00:74:00:f3:55:6f:4d:7e:98:
1d:7a:43:19:53:33:9e:db:87:04:6f:84:c7:68:de:
ea:a8:9c:6a:16:93:02:5d:b8:a3:2e:7a:1d:1c:da:
e3:2b:9f:ea:1f:11:ea:27:81:2a:90:51:0d:d5:00:
e7:95:10:78:51:eb:b5:85:85:19:83:97:9b:1e:33:
54:f0:18:15:6b:6b:0e:dc:79:f8:1c:d2:5a:d1:6b:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AF:95:20:25:51:2C:04:95:5A:F9:77:BF:08:76:C6:25:0F:B9:DF
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6e:47:35:6f:9a:2b:fa:77:92:c3:e3:55:4b:92:02:ba:a7:
32:fe:27:8c:08:a3:d8:b2:02:7e:e6:1e:80:41:0f:29:c3:0c:
9b:ff:4b:f3:05:17:cf:d8:4c:f6:91:bb:f7:ca:48:4d:cf:02:
09:ac:83:95:07:9c:18:a9:a6:d4:53:04:af:d2:ef:52:4a:72:
29:d1:41:e2:fe:ad:90:c4:ec:c0:e2:3a:9c:cd:cc:2f:67:ea:
49:d6:b0:24:e2:f5:2c:40:da:d4:9e:78:c1:50:8c:a6:16:da:
16:91:a8:a4:f1:82:ed:b2:f3:7d:e6:bc:20:63:ac:cb:14:91:
90:54:06:fd:d0:a6:55:7d:a7:98:35:92:8c:fc:32:a7:be:85:
10:02:50:fe:dd:2c:f8:76:e4:f3:af:02:3a:9e:4f:c4:24:39:
19:44:fb:ff:67:6e:88:91:d4:11:2f:cc:8a:42:ec:52:57:c3:
00:9f:d2:e0:54:36:0d:ce:cc:2e:2a:fc:ce:96:23:07:42:7a:
c0:05:b6:47:93:3e:7b:0b:84:c1:d6:78:a6:f3:40:36:dc:9a:
a6:9a:a8:f0:60:0a:84:f6:c9:ce:96:e9:6f:cc:c6:17:c2:49:
38:b3:c1:f6:6c:8e:73:4a:16:45:12:d2:bd:41:a8:36:fb:68:
e9:6e:83:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:13 2025 by rpki-client