Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier: dVLt3btrul8XUFTzuX+Ds8VhDHCGTylHStoOBlyUgUs=
Subject key identifier: 70:CA:F4:C9:1D:F6:B7:90:41:75:8C:CA:03:C0:93:73:92:31:A3:48
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 019A4E18F40136A7394F673BB02E1B6763FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 09:00:49 +0000
Manifest this update: Tue 04 Nov 2025 09:00:49 +0000
Manifest next update: Wed 05 Nov 2025 09:00:49 +0000
Files and hashes: 1: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (hash: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=)
2: jyrC-t0H_GkAg2c88y9tSfnyeDQ.roa (hash: QuK2j2bldMS2fMD4ill15moXvawQIfM3BSjaK9rkpUw=)
3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: so8qDav71t/WUqLWMw2Ak4D/FQx49t5qQjRRVxkHes8=)
4: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (hash: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f4:01:36:a7:39:4f:67:3b:b0:2e:1b:67:63:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Nov 4 09:00:49 2025 GMT
Not After : Nov 5 09:00:49 2025 GMT
Subject: CN=70caf4c91df6b79041758cca03c093739231a348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:ec:b4:f8:27:d2:c4:da:bc:4f:24:8e:33:
d8:56:3b:bb:0e:8f:2b:bf:42:5a:1f:ca:53:3a:24:
33:6b:54:ed:9d:73:db:19:a2:b8:25:a0:87:be:3a:
f0:bd:55:5f:19:4f:9b:25:3d:d8:e5:82:2c:97:3e:
51:fd:3b:97:ea:43:c4:43:2a:e4:71:79:9a:8a:6d:
a8:35:bd:82:81:a0:19:26:a6:43:a4:bc:70:33:24:
ab:31:6e:4f:79:15:a8:4b:27:c4:6d:ca:96:99:db:
b9:03:f6:6f:b8:46:60:ca:5b:09:df:cc:41:dd:b7:
c8:12:bc:af:08:a6:68:ba:e3:45:e3:52:ae:12:f9:
52:80:36:2b:bf:b6:66:6e:5f:6e:97:26:58:75:99:
df:44:fa:68:5d:fd:b8:3d:96:d3:12:84:dc:68:1d:
66:c0:bd:b8:cc:19:b1:45:7a:10:48:1b:b6:b4:b3:
69:15:84:07:cb:0d:8e:55:2e:3a:75:66:26:05:e9:
3a:ea:5b:d6:c2:c7:31:5f:ca:7b:92:6a:c2:8a:3b:
02:86:ee:7a:65:a1:24:04:b1:ef:63:e8:fe:ef:b8:
be:7a:86:1a:e6:d2:ca:65:09:6e:cb:3c:0c:f0:0d:
00:23:d2:f3:2d:76:16:47:05:33:e7:c0:87:35:ab:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CA:F4:C9:1D:F6:B7:90:41:75:8C:CA:03:C0:93:73:92:31:A3:48
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8a:63:c4:c9:51:3b:81:eb:f3:f3:dd:8a:89:dd:8c:ee:6a:
4f:c8:f8:a4:83:dc:14:7e:e2:57:b3:c9:74:fe:81:29:4e:c1:
e1:09:a1:ac:68:85:13:57:be:6b:80:05:5d:a3:43:a3:11:cc:
46:b0:cb:77:93:bb:0c:72:1a:5f:28:e2:c3:38:74:bf:7b:cf:
d6:48:eb:80:67:46:0f:a7:ea:a2:9e:48:94:da:ea:5b:b9:75:
5f:10:2d:f2:d8:b8:41:cf:8c:bd:87:d2:19:59:fa:b3:fe:23:
3d:d2:30:a7:9b:08:96:a7:3b:cb:6f:5b:99:6a:de:36:35:cc:
66:7f:55:58:02:ec:27:af:31:5f:cb:32:25:6a:ba:2c:a7:e1:
19:a8:92:ac:26:fe:26:a4:5c:6f:1f:75:44:0a:3a:2d:6f:63:
83:63:19:24:13:26:00:f5:20:d1:a7:16:aa:cc:39:0c:42:a3:
83:64:49:96:2e:f1:4d:b3:eb:ab:5a:3c:3d:58:2b:aa:c5:9a:
f9:fc:4a:1c:83:cd:93:b9:85:5b:d9:e3:c7:94:10:e9:f2:7d:
1a:32:25:57:4a:71:29:6f:21:a2:cb:46:a2:2e:99:b3:4e:32:
77:28:d3:b2:b0:12:b4:a8:3c:b1:25:d2:87:cb:80:2a:1b:d2:
f9:de:51:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:57 2025 by rpki-client