Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: kE2zsQbP/6Pv545NQF+3mKZBcQykOaZGxCT00Lf9O90=
Subject key identifier: 5D:E4:66:E4:46:C4:4D:03:A5:C0:E7:D6:FB:77:B0:72:B7:2F:2F:E0
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019A4EF4DD6B432DACEA8DBB067BB0EBC317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=)
2: EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa (hash: sPo+QlStQLftRhFxrU43bCn4hciRtjvqBLkRQ+qUaq4=)
3: FCOMXnULUVL5uVnX_zvOHcdHJYc.roa (hash: 4uixJ9jDs2SwFvLmk4CIP+prYWqzHVN0aIW9iOFGL0s=)
4: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: XjtyfxGcyQT7SkJBMaZrxqg1CrRPMrUmO92gy7W8AAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:dd:6b:43:2d:ac:ea:8d:bb:06:7b:b0:eb:c3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=5de466e446c44d03a5c0e7d6fb77b072b72f2fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:f1:3e:ed:c4:12:e9:bd:12:8a:8b:a5:2c:
f1:81:75:1d:3a:7b:be:23:15:2e:0d:46:87:90:dd:
03:3c:66:f7:7f:9e:42:50:18:a1:8c:e4:95:dc:c7:
21:c7:34:b4:db:df:bb:1e:80:0a:6d:c3:cc:7d:ca:
d1:d8:cd:1f:e6:e2:47:9e:f5:71:50:e4:45:58:7a:
b1:c1:ae:bf:7d:d6:62:2d:81:aa:4e:f3:9d:44:1d:
00:d2:4f:31:ff:bd:d0:3a:69:83:d6:9a:e0:73:7a:
09:24:d8:e4:36:fa:aa:bd:c5:19:e2:a8:5e:1f:14:
8c:2d:8b:0c:1b:2c:3d:bc:12:09:34:3e:6b:ef:cb:
8e:ff:dd:67:72:a4:e7:1e:9d:0c:d8:76:f6:f0:22:
56:e4:ed:37:0a:d8:ea:a0:a5:df:31:6b:ee:5a:3f:
76:1a:70:44:91:13:51:44:27:48:21:9e:96:a8:a0:
6f:78:f4:2d:71:1e:4f:a9:43:a3:ba:80:7d:4b:cb:
b3:d9:56:ba:e8:af:1e:ca:7a:40:fe:e4:0b:6e:cd:
98:b6:4d:b5:f2:52:32:06:00:67:b4:ae:c3:4b:a4:
63:5c:5c:4a:c3:ca:f1:cf:0e:c5:76:70:7e:35:cc:
39:ef:96:91:cc:32:9e:48:42:7d:08:81:39:45:da:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E4:66:E4:46:C4:4D:03:A5:C0:E7:D6:FB:77:B0:72:B7:2F:2F:E0
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a8:92:76:57:44:7f:30:61:fc:39:9d:87:72:79:24:5c:1c:
ff:a3:d7:0a:58:a2:90:21:d4:10:d5:8a:9a:15:09:a5:f2:eb:
ed:59:08:55:ec:e6:de:82:1e:e8:fe:fa:ea:92:44:31:69:9e:
2b:b4:68:04:6b:22:2d:09:b3:12:12:01:b4:90:89:81:2c:39:
62:f3:39:57:4a:09:32:25:92:d2:aa:b9:ba:ae:72:b4:75:86:
fc:6b:29:8d:d7:98:80:ee:18:25:77:56:86:ef:1f:71:6f:6b:
07:46:b4:ae:3a:18:73:23:9e:38:98:f4:0d:7d:b6:f0:50:1e:
28:d3:4c:49:9e:09:9b:a9:90:1e:21:c1:dc:77:56:61:05:de:
c6:94:be:f4:9a:a0:af:e1:34:d1:33:9b:d3:33:99:66:9a:01:
53:7d:67:ed:54:17:ee:96:5e:ce:dc:ee:cc:68:49:56:5c:ca:
7a:8e:43:91:e4:d8:83:cc:75:07:41:a4:7e:10:80:fa:9f:82:
23:23:0a:d5:6c:e9:0c:b4:13:ce:cd:65:62:b1:4b:df:ff:73:
33:d4:0f:34:0b:11:38:aa:8b:76:53:81:14:0c:50:e7:d6:b7:
e2:11:f9:eb:8d:96:08:eb:9d:b4:32:fb:2a:46:1d:8c:08:ec:
b7:d7:df:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:39 2025 by rpki-client