Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: Lo2/beZAMyFqUjDZ2fv1g7idtkoSNJ5ZzNWzV72NewA=
Subject key identifier: 68:B4:FD:57:76:AD:D6:4E:F4:1E:03:22:25:80:44:33:BC:0C:C0:BE
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019A4EF45E494BFF58401E9DA441598DFDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=)
2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=)
3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: k/esQjWc9dM5GdY1Q4+vd2kbOqdiME6ztMknXarD6bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5e:49:4b:ff:58:40:1e:9d:a4:41:59:8d:fd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=68b4fd5776add64ef41e032225804433bc0cc0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:e9:51:76:19:86:2c:da:45:fe:8f:2c:b1:
b6:13:c9:64:e0:44:e9:b8:2c:c8:d5:82:25:0c:06:
33:b4:bf:b7:0f:d2:00:6e:57:db:87:a6:5b:0e:30:
43:f1:40:aa:9d:61:a6:1b:86:4a:d5:5f:d5:6c:8e:
79:8e:02:da:47:0a:1b:f6:2d:c7:49:b5:70:c8:68:
45:10:fe:36:4a:2c:8f:19:e0:c3:8d:8c:6a:f5:23:
03:ae:1c:30:57:23:6a:e8:ef:08:1b:3a:1f:79:4c:
f4:88:ed:89:06:8e:2d:56:ad:e3:d5:bc:98:0d:9d:
98:a3:32:88:f0:2f:14:fb:7a:99:90:49:a1:2f:ba:
67:cc:de:34:be:9d:50:9e:2d:82:58:6a:e3:2a:e7:
f7:36:b6:a3:76:b1:bb:d8:fb:a3:ce:34:d3:64:8e:
bf:2f:43:6a:d7:4c:f3:f0:d0:58:38:bb:89:8b:8e:
b3:5e:bd:a8:d0:0e:b0:3c:f5:fe:a1:b1:40:0f:b0:
d7:d1:a5:2c:6b:b2:e5:cf:e9:c6:30:d0:09:33:ca:
1e:6c:35:f7:e1:59:3a:2f:97:e6:01:7f:c9:58:cf:
65:17:3e:18:4d:f2:f2:a7:82:b3:8d:ca:36:b2:87:
a9:3f:d7:d7:fc:e3:49:f7:cf:1e:21:4d:3d:b5:b3:
cf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B4:FD:57:76:AD:D6:4E:F4:1E:03:22:25:80:44:33:BC:0C:C0:BE
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c4:02:07:40:fc:96:f1:ca:e9:1e:14:b2:65:bc:2d:ba:1b:
28:7e:2c:6e:c4:40:82:aa:c4:a4:41:02:b2:bd:75:81:30:44:
a1:bb:8e:f6:dc:fe:45:83:99:d9:cc:84:7c:9e:67:ed:1d:97:
e7:47:3b:0c:94:bc:d8:9a:d8:69:76:c4:ca:1b:cf:19:af:2a:
bd:5d:eb:fa:48:33:07:60:6b:65:62:e3:4d:28:21:27:61:1e:
68:29:1a:3a:fc:8b:ba:68:6b:fe:a4:36:a1:1b:02:20:d0:7d:
14:bd:29:db:ed:14:fe:e4:b4:93:5c:34:0d:e6:09:9e:24:56:
2d:e2:ae:55:4c:ab:45:2c:f9:91:08:af:d3:aa:69:3c:6c:c9:
2a:34:ce:92:38:98:ae:4d:8e:87:2e:cd:ee:34:32:69:5b:1f:
ef:3a:15:bf:db:8a:3c:98:f8:37:35:1f:7d:84:68:d6:34:e9:
aa:2e:36:4a:a6:3e:31:fb:3d:a2:6a:e5:ed:a0:45:16:03:cc:
22:5e:a8:a1:2e:fc:95:24:98:6f:a9:03:66:51:5c:3a:31:f0:
f9:18:66:3d:6b:1b:5e:a7:93:ae:82:11:37:27:cb:ec:c1:ce:
cc:a9:6f:fb:8e:7b:69:da:58:53:8e:b0:70:04:c7:2c:45:73:
ad:2c:5f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:17 2025 by rpki-client