Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
File: kF3q_qO62SSCF7FinkLP_H5JG9k.mft (raw, json)
Hash identifier: +BBpnVB8VKTZbc3JhLvZgRUVy1tEX9XiyYRJlbc5Zc0=
Subject key identifier: 97:4E:E9:53:59:B1:7F:2B:9F:AC:E0:96:9F:96:EB:65:EC:7A:B3:5C
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Certificate issuer: /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial: 019A4EF575A8A982F60E23AEC33FDDED413B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:40 +0000
Manifest this update: Tue 04 Nov 2025 13:01:40 +0000
Manifest next update: Wed 05 Nov 2025 13:01:40 +0000
Files and hashes: 1: F6NVdh8A853FlObS61QBXhYoWUw.roa (hash: bTYe6HPxoy2DgVEr4roCOuCgASU45dN4RfTtGTEfBzY=)
2: kF3q_qO62SSCF7FinkLP_H5JG9k.crl (hash: 9B9wOdYu9bQV4/y7IQ3/vdGjhe7v5kLRE7lOkOUIHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:75:a8:a9:82:f6:0e:23:ae:c3:3f:dd:ed:41:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
Validity
Not Before: Nov 4 13:01:40 2025 GMT
Not After : Nov 5 13:01:40 2025 GMT
Subject: CN=974ee95359b17f2b9face0969f96eb65ec7ab35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:7b:9f:54:bf:2a:a6:21:9f:0d:d3:27:7f:
c0:54:d3:e9:2c:b6:b3:29:75:65:0c:42:7c:9c:81:
c7:9d:e6:62:d8:93:60:a3:cf:ea:9c:ef:0b:79:a7:
41:1d:a4:ae:30:2e:cb:25:2b:23:50:34:f9:31:9a:
af:ae:d5:99:7a:08:3f:55:bc:d1:c8:a4:d1:f0:16:
c5:03:97:b2:00:78:fe:ea:6d:ec:7f:05:2d:08:17:
4d:1e:4c:db:a6:bd:1f:10:61:28:d5:d9:50:be:eb:
c1:39:c2:a2:c3:8b:75:47:75:6b:a8:4f:18:70:cf:
10:87:ed:68:47:f1:6d:7a:96:d3:91:26:b6:ca:94:
66:15:be:8f:0c:09:eb:79:bb:dc:b4:f5:42:2a:94:
bc:35:6a:73:de:7c:e1:17:01:3c:49:8b:eb:ab:8c:
ef:94:2f:7a:7a:27:92:1e:3a:f5:48:cd:32:00:0a:
63:87:e3:cd:93:19:7c:3d:24:ea:26:53:f5:b0:5f:
ff:fc:40:5b:9e:26:dc:47:00:dd:d5:1a:d2:d6:f9:
e8:a3:68:c1:cc:1d:3c:e3:ba:32:39:e5:8d:2e:b8:
f4:88:3a:b1:92:7d:df:aa:63:84:c9:b8:9b:bc:e4:
f0:23:6a:7d:9e:f3:01:8f:1e:b0:46:67:bb:02:26:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4E:E9:53:59:B1:7F:2B:9F:AC:E0:96:9F:96:EB:65:EC:7A:B3:5C
X509v3 Authority Key Identifier:
keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c8:0c:f6:77:b7:3a:5d:b5:74:ac:61:ab:cd:25:76:dd:3e:
19:3e:6a:bb:0a:f8:8e:f9:b5:64:59:a6:67:58:74:d4:78:fb:
38:6b:c9:b0:dd:16:db:cf:57:21:38:5f:f7:01:ad:58:b7:ae:
76:a1:b4:29:fd:7b:f5:06:01:f3:ef:81:f9:d7:ed:84:bb:1e:
1b:1f:89:ea:a9:5f:0c:2c:3a:de:1a:96:0a:05:a3:54:34:97:
2c:b1:d6:e6:6c:f6:ba:f3:ee:af:2e:51:02:2e:89:d6:46:c2:
4d:26:73:9f:a8:03:40:d5:a4:48:17:ce:12:38:54:4f:c9:3c:
fc:dd:38:8a:a4:0e:d0:6c:e7:13:38:e6:d7:92:f9:5b:78:25:
e3:ec:2f:b1:76:3f:f9:87:0e:de:e6:b7:98:b9:b4:97:52:eb:
80:d0:48:12:3a:4f:aa:b2:81:62:5a:43:75:63:ce:13:c1:09:
d2:00:da:41:11:a2:96:18:fa:bf:18:01:cc:06:d8:59:b4:f3:
47:58:20:e2:39:96:5b:b4:cf:12:eb:98:23:65:22:be:21:aa:
40:7f:57:5b:26:b3:77:cc:c5:78:90:46:cd:2f:de:3d:68:45:
67:37:a1:33:46:50:29:ea:fd:5f:a8:3e:58:72:35:8f:02:54:
80:2b:d5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:31 2025 by rpki-client