Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: YFjw1z/amqP/b0Hoc6FMsyoZbem29zNTT+IWiaH8CYU=
Subject key identifier: 72:0D:FE:B0:86:E1:AE:CA:C8:53:BE:84:1A:75:00:23:09:FC:1B:0D
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019A54C08A5CC8B095D77910BF8BFD6E8CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 0185
Signing time: Wed 05 Nov 2025 16:01:35 +0000
Manifest this update: Wed 05 Nov 2025 16:01:35 +0000
Manifest next update: Thu 06 Nov 2025 16:01:35 +0000
Files and hashes: 1: dlXIk7WimVWVHc3ungqiNoZMusw.roa (hash: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: ToMJjaljnucTRFHISv6Vy7cFEqbGDHTWGJm3HqD69a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:8a:5c:c8:b0:95:d7:79:10:bf:8b:fd:6e:8c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Nov 5 16:01:35 2025 GMT
Not After : Nov 6 16:01:35 2025 GMT
Subject: CN=720dfeb086e1aecac853be841a75002309fc1b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:3a:b2:48:d1:a7:4f:0c:09:95:7c:0b:e0:
f4:66:06:46:c3:5b:c7:a7:f2:80:1c:0b:1e:4d:35:
89:74:a1:c1:5a:8e:ca:63:12:7d:6e:0d:26:24:2a:
a2:a3:10:63:57:24:b8:a5:30:b5:23:1c:42:25:2b:
bc:a7:09:c1:e4:ef:aa:b9:0e:b2:40:3c:4f:01:0b:
08:da:b5:28:16:9c:3f:31:1c:ae:d3:70:15:8c:37:
d2:ee:ee:86:6b:25:0f:cb:40:23:77:b6:39:b2:f5:
fa:3c:5e:81:30:9a:43:61:7d:85:5c:6f:ca:f2:3e:
c8:34:a9:60:96:fb:65:3e:b0:f3:53:3f:a9:86:fd:
cd:4c:b6:51:fe:e7:ce:ea:e6:12:89:4e:05:76:ae:
49:60:43:e4:80:88:54:dc:08:4d:e9:b3:82:64:34:
2c:f6:0d:ee:27:ae:9d:20:87:b0:89:78:7a:0d:28:
7e:fc:48:44:02:74:80:be:3f:42:86:63:8b:59:d7:
a7:5e:ab:66:d5:54:67:ff:e0:56:a2:98:c9:0c:b9:
a2:2f:8d:7d:ad:f9:9c:9a:56:95:f2:2e:c7:9a:a2:
71:10:03:e1:a6:80:98:8f:93:20:06:02:2f:e7:70:
8c:32:d5:94:a0:5e:cd:f8:42:16:8f:bf:75:ea:5a:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0D:FE:B0:86:E1:AE:CA:C8:53:BE:84:1A:75:00:23:09:FC:1B:0D
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0a:0c:ed:56:f0:a2:4e:b8:83:60:d5:8c:21:d9:b4:35:2b:
35:4c:b1:34:78:90:f2:d4:d9:38:7f:dc:6d:2f:e5:62:82:6c:
0e:53:c5:ed:c3:2d:d7:db:ca:31:3f:69:44:8f:06:a9:50:a5:
9d:c2:33:d5:2d:4b:a7:09:22:60:a2:e5:09:d4:ec:1e:60:25:
40:0d:43:8a:b1:29:4f:2b:07:13:aa:53:06:63:3e:a2:86:1c:
94:a0:a0:e7:87:45:b6:dc:2d:71:1e:f7:fb:be:5a:f3:9f:46:
30:24:6b:c0:14:26:e1:35:47:db:67:ac:6a:91:a7:ed:2f:97:
88:23:d7:64:04:06:60:85:8d:36:75:99:88:08:b2:93:27:2e:
d7:a0:21:59:05:31:f0:6e:11:b6:af:e3:9e:63:4a:ef:84:9d:
3f:6b:40:f4:c8:f0:b1:85:55:d0:66:3f:df:18:52:98:71:f4:
65:e1:c0:74:eb:ae:b0:55:18:df:17:8c:f4:72:e0:cb:2c:53:
50:fd:21:83:50:17:ec:97:63:fe:45:ae:0a:a1:23:2d:39:6d:
6e:0a:fa:91:28:02:96:cf:ac:50:57:f6:e3:b4:b4:84:94:97:
6b:63:85:0b:63:12:5b:81:cc:94:a6:92:1f:f9:34:b8:ba:20:
4d:d1:f5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:53:03 2025 by rpki-client