Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: 7LUjfpFhi4FdE9I2/dD+PWC1Fn7ZVSru3w/9EKltE3o=
Subject key identifier: 31:D3:A5:A0:93:87:DE:DA:A1:9E:CA:BB:C5:79:F7:A6:BE:2F:E4:10
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 019A503DF69F656C729BDB27EFEFFEC4A3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0FD0
Signing time: Tue 04 Nov 2025 19:00:29 +0000
Manifest this update: Tue 04 Nov 2025 19:00:29 +0000
Manifest next update: Wed 05 Nov 2025 19:00:29 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: UsIwIvwH00kWdhmdsd0klxBXAvrvczknt82vHPkQ+os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f6:9f:65:6c:72:9b:db:27:ef:ef:fe:c4:a3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Nov 4 19:00:29 2025 GMT
Not After : Nov 5 19:00:29 2025 GMT
Subject: CN=31d3a5a09387dedaa19ecabbc579f7a6be2fe410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:a3:6a:51:18:f8:c1:25:dd:01:6e:34:45:
56:e1:17:20:08:92:7a:b9:b3:ae:03:c3:67:2f:b1:
a0:cd:b6:42:b1:8e:d4:04:d7:f5:59:14:51:ca:eb:
a5:78:51:58:e0:59:41:de:26:0b:78:40:c2:e9:6f:
f7:ce:97:c3:24:1e:70:ae:d4:de:a0:fe:af:7e:af:
28:93:06:32:9c:c8:5e:9f:47:24:75:34:11:db:8c:
32:83:96:9b:27:da:ff:ce:cf:93:76:fa:79:1c:e9:
97:a9:ee:47:77:8d:18:97:4b:4b:7f:12:14:aa:57:
ce:f6:65:c2:e5:87:83:c0:be:ad:90:f3:a2:56:f9:
80:b6:09:f7:76:c9:61:45:2a:92:b6:13:4a:44:64:
24:51:71:82:3b:c8:43:d3:c9:4f:d6:29:40:47:45:
b9:db:96:3b:ba:38:bb:2e:22:de:25:d9:a7:81:99:
df:76:17:a9:0d:fd:f8:74:9d:42:0a:ab:b5:67:bd:
b9:d5:cd:e0:75:89:6c:22:6b:2c:17:49:cf:8a:31:
a2:cb:08:40:1c:6c:e3:71:e2:cb:75:87:7b:ac:43:
6a:53:39:7f:a6:86:f5:d8:4f:85:a2:01:29:bf:f1:
8b:28:53:e1:34:c3:22:fc:e6:38:18:c4:ef:b6:7d:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D3:A5:A0:93:87:DE:DA:A1:9E:CA:BB:C5:79:F7:A6:BE:2F:E4:10
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fb:7c:8a:04:a3:6f:ab:0f:78:17:29:6f:2c:c6:9b:cb:b9:
31:7c:24:af:c1:6a:86:f1:4a:a8:88:8e:1c:e7:1d:ba:da:93:
9d:ec:5f:9b:57:94:e6:d1:75:ca:54:e8:5e:18:29:a0:fe:f2:
5e:ab:9e:45:26:53:4d:64:96:dc:fd:92:92:c3:be:32:14:b6:
2f:25:80:cf:b3:95:86:53:3b:19:8b:0b:1c:88:df:cb:bd:93:
42:fe:75:89:a5:2b:6a:a7:61:a4:29:5e:c5:d1:b8:04:85:95:
80:60:09:f8:1e:59:a3:b1:2c:86:da:81:c6:ec:17:13:70:df:
ae:df:03:fe:db:a3:1f:4d:9d:c1:d5:7f:a0:65:ae:4b:f3:20:
8c:dc:7b:04:d3:46:d1:40:87:2a:b5:0a:e2:03:85:f2:5e:6e:
e4:a0:da:91:b1:ae:1a:b5:53:d7:0a:dc:51:fd:fb:8c:f0:6f:
5b:13:e3:ac:46:01:95:ff:18:b3:df:ce:8a:cd:6f:e3:7c:6f:
b3:4b:f2:47:ac:62:82:0e:49:af:66:1f:64:99:c4:86:5c:93:
04:3d:1f:90:70:52:40:2d:91:c9:fe:18:d0:41:cb:d3:97:47:
dd:3b:7c:3c:8d:84:ff:3c:90:d3:83:cc:25:80:1d:1b:e0:05:
4c:cd:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:10 2025 by rpki-client