Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: GOqIeldmZ4w3O6IJwAJIMYroPTqpIf4MnA6T3fvd8Sk=
Subject key identifier: A6:95:40:6E:77:4F:C5:22:E8:60:12:23:1C:58:88:34:CA:36:1D:36
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 019A50071531001921AC9923161240C4DE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 18:00:32 +0000
Manifest this update: Tue 04 Nov 2025 18:00:32 +0000
Manifest next update: Wed 05 Nov 2025 18:00:32 +0000
Files and hashes: 1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: n4HEFkBRsD0z05ONosWiVpkkl6LjE+cy0la39+kaRCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:15:31:00:19:21:ac:99:23:16:12:40:c4:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Nov 4 18:00:32 2025 GMT
Not After : Nov 5 18:00:32 2025 GMT
Subject: CN=a695406e774fc522e86012231c588834ca361d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:ca:4a:19:ca:4c:f1:37:a3:59:87:9e:45:
42:a4:cd:ea:d4:a7:6b:05:b0:14:45:91:23:8a:64:
b0:f0:16:0d:ae:c1:0d:25:b4:ed:57:78:e5:45:33:
a1:48:85:13:3b:79:e9:39:85:55:7c:41:1f:8a:56:
0d:e0:56:7d:8c:d2:f6:dc:b8:2d:93:bd:8e:33:51:
39:bf:4b:dd:ad:7b:30:fd:ce:d0:95:a3:2c:c2:ca:
1e:36:18:c6:88:65:35:83:4a:d5:e5:68:83:d0:d1:
28:f3:c3:61:57:32:a5:bc:10:3f:f1:9a:34:be:f6:
a3:2c:9e:1e:93:5a:32:05:37:30:85:55:0c:c4:67:
e2:0d:ef:de:d3:48:9f:4b:f8:a5:09:de:e6:1c:78:
b5:85:8d:bc:68:ae:af:f0:c9:4f:5a:e6:2c:2d:5f:
36:10:d4:ca:c1:f3:f9:d2:c4:9d:7a:61:e5:3b:3b:
24:4a:59:ac:e6:a5:55:0d:19:7f:92:66:9d:75:0e:
4d:57:4b:5c:52:f0:43:dd:56:38:44:b9:fe:73:04:
50:1f:ce:d0:f5:6c:82:cb:55:0f:e4:2d:14:f7:87:
59:71:43:cc:fe:2d:4a:1b:47:f9:6d:64:56:76:2d:
34:9b:1f:e6:07:ca:ef:46:39:24:76:da:c8:a2:d7:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:40:6E:77:4F:C5:22:E8:60:12:23:1C:58:88:34:CA:36:1D:36
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:df:14:69:a7:10:87:5f:65:43:d5:84:4b:ee:f1:91:f1:a9:
eb:ba:95:39:79:9c:17:3c:06:96:a2:04:c4:ef:20:ff:21:ab:
7d:72:85:16:8d:e6:15:f6:53:80:e5:43:fa:1e:8d:cc:35:f3:
26:9d:2f:43:4c:2d:cf:46:5f:81:2e:37:ec:4f:9c:ea:d1:8e:
e4:eb:a4:2a:11:64:b8:a3:d7:7e:d2:c7:c9:55:f4:4b:55:e1:
65:e7:27:a0:c6:12:0e:ff:63:e2:1e:ee:d5:3a:14:51:fb:9b:
59:11:f1:66:f6:3d:14:a5:60:3b:a1:a3:84:44:fa:3f:9b:a3:
92:e4:23:c2:5d:6b:9b:9a:aa:92:65:b3:46:75:81:49:cc:31:
0c:0c:5a:30:21:18:58:bb:c2:1e:e1:80:de:75:07:bb:ef:b4:
e5:fd:70:b5:98:5b:12:13:bc:1e:36:1b:07:67:e7:89:37:75:
a7:62:94:81:8a:fd:25:cf:6a:23:b0:b3:22:80:ee:d2:1d:d9:
1b:3e:8b:6d:49:95:12:4d:cf:56:ac:93:e0:24:cf:a7:6f:9e:
04:80:43:a0:a2:02:61:9f:19:a0:69:92:d9:40:73:c1:8e:99:
b4:3d:41:cf:c8:39:dc:62:b4:85:f3:e0:1f:7f:a6:ed:4e:ae:
4b:7b:fd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:20 2025 by rpki-client