Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
File: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json)
Hash identifier: CgXMN6nhBW5cNm13tmkxd3xf1zbW9P3xWNenrSBpgoI=
Subject key identifier: 9A:61:31:5C:4D:9A:02:E4:0D:23:D4:EA:AC:55:71:ED:AA:AA:6E:C9
Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
Certificate issuer: /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Certificate serial: 019A4DE173187C84D2503C280CF87256F80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
Manifest number: 15A7
Signing time: Tue 04 Nov 2025 08:00:11 +0000
Manifest this update: Tue 04 Nov 2025 08:00:11 +0000
Manifest next update: Wed 05 Nov 2025 08:00:11 +0000
Files and hashes: 1: SX3vKCIesg7brXNXKPon4jGBLVQ.roa (hash: QbCrUZtkCCzMgLc9gxL+FBpDYE7YV20lMwm2mk5wzSk=)
2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: zQqkeW6Xij3jlfbN46ALgCN7Zr3LCNDP2B9uK5pupw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:73:18:7c:84:d2:50:3c:28:0c:f8:72:56:f8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Validity
Not Before: Nov 4 08:00:11 2025 GMT
Not After : Nov 5 08:00:11 2025 GMT
Subject: CN=9a61315c4d9a02e40d23d4eaac5571edaaaa6ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:b0:19:b6:74:00:03:1e:f4:2e:33:fe:9e:
53:4a:34:a3:cd:b9:43:b0:4e:75:e8:36:21:9e:7b:
f8:d5:ef:0d:79:91:33:e8:96:90:b7:76:1b:da:2a:
c2:67:b4:69:88:ab:7c:94:29:0b:1d:c8:5b:0e:72:
4c:89:3d:5e:a4:36:69:20:69:04:98:b9:60:60:eb:
2b:7f:c3:02:cf:c7:8d:49:73:ee:7a:41:43:70:1c:
ea:8a:89:a9:7e:01:c8:a1:c8:eb:bf:38:79:9b:a2:
61:b1:cc:b8:10:25:a5:6e:c7:2f:82:9f:32:3c:2a:
b5:36:3a:a2:e5:10:e6:10:de:e0:00:7e:7d:97:d9:
b6:48:55:6f:1e:f9:87:b3:60:4c:02:41:3e:6b:bc:
ea:42:e8:4c:50:73:6f:76:d4:cc:78:71:f9:a5:49:
a2:45:be:2c:cc:b1:ef:bf:57:62:b0:55:b4:34:39:
4f:58:12:24:a6:c9:29:d9:29:d7:ea:24:63:00:5d:
b1:25:74:1f:3d:bc:15:9f:d1:1c:8f:78:ea:18:88:
b1:8c:8e:ff:e4:a7:c5:a1:0c:8d:c6:1c:b0:ce:2d:
f0:46:2e:35:7a:d3:4b:e7:c7:91:27:00:48:62:84:
4b:a7:3a:5d:f1:15:74:a1:ee:7f:81:6e:f6:e6:73:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:61:31:5C:4D:9A:02:E4:0D:23:D4:EA:AC:55:71:ED:AA:AA:6E:C9
X509v3 Authority Key Identifier:
keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:1a:b6:78:3c:f6:9a:7e:2f:ed:b4:78:fd:fe:b8:d4:61:d1:
a0:72:8d:0d:9b:ba:79:95:93:fd:f6:66:18:fd:40:b9:5f:fc:
43:9d:02:12:d4:ff:21:d8:6d:48:e0:5b:eb:b6:bc:d5:b4:a3:
e7:4a:f5:99:59:4d:f5:3e:2f:0a:28:70:ae:25:6b:e5:4b:46:
f0:0a:0b:df:a2:a4:4d:80:ee:ac:e0:08:6a:32:5f:f0:67:bf:
b7:3c:79:b5:ef:9f:a2:51:89:ce:a0:87:29:bc:cd:bb:16:1e:
da:1d:d9:c1:87:84:67:14:9b:05:fd:db:67:44:b5:e5:3a:9d:
af:fc:9f:ff:40:79:1a:a0:5c:cc:df:fc:4f:01:59:4f:88:c8:
6e:6e:d6:09:09:d2:94:d2:72:77:51:75:57:3c:55:5f:b7:21:
00:36:98:da:07:01:0c:91:ff:90:46:1d:8d:2f:57:cc:75:7d:
7b:e6:c3:ea:92:b9:56:db:90:1a:7e:12:58:c3:8b:f7:c6:4e:
af:03:6c:9a:d5:c7:19:57:f9:93:4c:49:e5:dd:fe:a2:64:0e:
89:18:10:5b:f5:f7:e6:4f:7e:76:2c:b2:d6:a5:c5:c7:6c:d4:
fd:e3:06:55:c1:3f:50:ea:da:9f:a3:ed:82:0a:ac:21:ea:6c:
13:75:74:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:21 2025 by rpki-client