Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File: K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier: 2eeCEUx3PTvdMhlVmqWc65wsYr/zcgygmW3wJJLsxs4=
Subject key identifier: 10:6A:CD:D3:A2:FA:E0:30:2C:B8:F9:FC:37:D0:BA:2D:08:F4:E6:7C
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 019A50E2EBB0B3248D36C19282615EE34FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 22:00:39 +0000
Manifest this update: Tue 04 Nov 2025 22:00:39 +0000
Manifest next update: Wed 05 Nov 2025 22:00:39 +0000
Files and hashes: 1: AmmERHoFL94GmD-TNoEsdCRoLA0.roa (hash: biK301TWdWY9asw86ndZF9AzE6I4gnsLDy1ooUih+WA=)
2: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: /zRYr7SIvBd0wCoRzGODBInnw2mvAYtcsed4u9NQCDk=)
3: Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa (hash: /+asFMl4xLs7yAsL3JI4lb0AzpjlX5T5v9MFr+IdWAw=)
4: uUIHLpHOzvZGAd44SZTSJe8l41g.roa (hash: fYWeKpFER5K7DmZGk625fBtbp6QjScVAI5NXZ5fqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:eb:b0:b3:24:8d:36:c1:92:82:61:5e:e3:4f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Nov 4 22:00:39 2025 GMT
Not After : Nov 5 22:00:39 2025 GMT
Subject: CN=106acdd3a2fae0302cb8f9fc37d0ba2d08f4e67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f6:9c:95:7e:f7:8a:e4:6d:57:15:7d:eb:e8:
a8:54:56:9b:9c:07:71:41:dc:cd:e2:4d:28:cd:9e:
19:4a:a9:3e:ee:d1:e5:9b:f2:05:f0:e5:5c:1f:5a:
20:a1:5b:33:6a:75:78:0a:0c:2c:1f:56:a8:5c:ea:
00:19:fa:43:40:96:1a:c4:15:bd:b6:84:9f:b4:bf:
e6:8c:fe:6c:3f:d1:38:98:ba:a0:4b:a4:ab:dd:22:
99:d8:8c:c6:fd:1c:d6:ee:a1:9e:05:bc:8b:3a:29:
11:6f:3f:e6:6f:7b:43:a7:b0:bb:a5:e5:8c:ad:f7:
be:23:5c:3d:10:63:af:8e:03:b9:af:29:99:c4:b3:
a0:21:e8:18:2e:9c:05:12:9b:c0:95:35:ce:fd:47:
f7:7c:7e:ba:35:8e:fe:db:29:87:d8:4e:40:63:ba:
2f:bf:bf:42:5a:3a:aa:a5:e8:17:e5:b7:9c:1c:b7:
b4:d3:c6:0d:0c:73:03:fe:c0:cf:65:5b:3f:87:fd:
f7:08:b2:27:f0:01:de:3a:65:a8:3b:62:5a:e5:83:
df:3b:3c:23:e7:66:53:e2:3f:2d:b6:c1:ea:64:66:
00:b9:4f:be:df:54:d0:70:cd:97:fa:2c:b0:a7:8f:
15:7d:d1:31:66:e7:4f:dd:86:26:fc:87:8d:c1:63:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6A:CD:D3:A2:FA:E0:30:2C:B8:F9:FC:37:D0:BA:2D:08:F4:E6:7C
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f5:57:50:26:c6:73:db:cf:28:11:c6:e1:86:e7:3d:38:71:
e5:07:fa:ee:60:f1:a8:ab:a4:bd:1f:a5:8b:ce:1d:d2:86:ca:
be:e0:ed:b8:19:42:65:06:33:22:cc:f7:4a:d5:f3:5a:7b:85:
9c:87:b4:ea:11:5c:d6:46:6c:d8:1f:41:aa:8c:cb:27:23:b3:
34:e9:7f:24:1a:2b:c2:57:3e:00:f9:f6:c2:d1:87:24:8d:90:
d6:e8:69:72:84:f1:e6:3b:ae:91:05:e4:4a:84:ba:3b:e7:fe:
44:06:4c:87:4d:df:0a:9e:3c:5f:6c:da:0c:0e:8e:26:b4:7c:
73:d7:9e:5b:c7:52:d7:9b:9f:c9:e3:91:a0:04:7c:25:f6:a0:
c3:a8:fa:93:44:26:71:30:e1:04:4a:db:84:af:67:37:8c:b0:
f7:b9:d4:e0:43:8b:fb:00:96:57:b8:4a:71:bc:c4:0f:76:21:
14:33:e6:9d:6a:cd:b8:e7:09:b7:0a:b5:67:94:f2:06:b2:f8:
f2:f7:fe:47:d1:cc:42:88:34:c0:98:08:58:02:c7:bb:49:e5:
8c:92:76:33:5a:e0:ff:03:0d:5d:49:da:0a:6c:01:5f:0d:50:
9b:0f:be:f3:24:5b:2d:2b:32:b6:b5:29:97:49:64:f8:15:c8:
47:8b:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:17 2025 by rpki-client