Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: HAYXQE5bXcbgjYSsuPWSd/Btddxm6glPS6nouNAHeQA=
Subject key identifier: 4C:49:E8:CC:25:48:56:B2:86:95:36:A8:53:4C:0A:83:D2:C4:C2:F8
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 019A5375EE5BF94C18E8269A50465FAB5119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 10:00:28 +0000
Manifest this update: Wed 05 Nov 2025 10:00:28 +0000
Manifest next update: Thu 06 Nov 2025 10:00:28 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: v1K08y2bYmbEJVkzzr6S5aru0xzhCq9Na5EL52NKk7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:ee:5b:f9:4c:18:e8:26:9a:50:46:5f:ab:51:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Nov 5 10:00:28 2025 GMT
Not After : Nov 6 10:00:28 2025 GMT
Subject: CN=4c49e8cc254856b2869536a8534c0a83d2c4c2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:4a:d5:3a:06:03:a8:81:86:e3:50:7b:42:
f2:8b:08:05:c8:a9:25:fb:02:42:e1:a8:d4:49:3b:
9b:62:e8:9e:bf:51:09:6b:15:83:fd:76:f7:a7:65:
b8:19:1d:c5:5d:2f:c2:cf:19:b0:c9:04:88:86:0d:
b4:02:63:84:5b:d1:b4:82:00:5f:00:9b:98:c0:43:
90:0e:26:fe:aa:bb:29:4f:62:6c:7a:38:7f:ee:64:
2c:e1:47:cd:48:61:85:01:fe:b7:f2:d0:b4:54:28:
fc:7a:36:43:f8:8a:e5:00:68:1b:06:33:04:cc:bb:
30:36:78:bd:13:0b:13:e9:1c:3c:1a:ce:29:49:56:
8d:95:6b:f8:8c:06:00:3e:1b:c9:2e:a9:57:62:6a:
56:35:dc:ca:07:af:33:09:58:f6:9a:f3:61:0f:46:
a7:a9:7c:8f:27:51:b0:3a:92:65:90:f6:df:d3:f2:
f9:57:9b:b6:8e:1e:f0:d7:ad:3e:a1:c6:af:47:e4:
38:96:eb:16:3b:75:42:bc:0b:40:17:90:37:4e:df:
ba:f8:b8:a3:f9:31:94:d8:34:58:20:6a:fc:68:04:
0c:2a:9d:37:44:cd:70:24:a0:69:5f:d6:d6:e7:a7:
98:6a:9f:73:2f:2e:d6:de:7f:87:71:47:87:1f:75:
14:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:49:E8:CC:25:48:56:B2:86:95:36:A8:53:4C:0A:83:D2:C4:C2:F8
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:93:2d:33:d1:c0:b7:ec:0c:eb:1f:01:06:1e:b2:3c:22:b8:
1c:48:32:56:09:cf:53:6e:d0:4c:24:94:e8:b0:04:31:3e:79:
b9:67:05:d6:6e:4d:29:aa:6e:9f:73:b7:6f:10:6d:06:16:fe:
98:bf:44:2c:61:78:9f:fe:fd:3e:a5:cf:3a:06:df:3e:a7:e1:
8b:04:b1:1c:ec:f1:14:62:76:30:f1:e2:e1:84:a2:f6:ff:22:
4e:66:d6:83:99:35:82:83:dd:3c:87:bc:d5:4c:76:75:4a:fa:
e2:49:9a:3e:ed:f9:8a:15:7e:24:24:58:a6:0b:f9:45:76:5e:
62:cd:cf:4c:55:5b:2d:d6:57:4a:f8:91:54:66:04:e0:da:20:
4b:e6:fd:cf:e6:f4:2c:1c:9e:0c:0f:7c:d6:87:0a:4c:75:60:
54:a0:8e:05:c7:28:8d:c7:7e:22:0b:3c:5b:68:73:05:98:89:
e9:ea:88:da:a8:d3:f8:c4:70:82:e3:11:39:76:00:e3:46:01:
57:50:90:6b:5a:87:7c:7c:96:d5:1d:e2:6b:ae:0a:a1:35:89:
2d:16:67:09:26:1c:7c:5b:cb:be:2d:72:78:2d:86:bc:1e:b7:
91:fe:c3:17:cf:c1:e6:f8:d3:1b:f3:e2:53:97:d0:a7:3e:94:
77:76:8c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:28:45 2025 by rpki-client