Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
File: RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json)
Hash identifier: ZxZG2ED3j4K9iy7FIVkFo5NYxDViDnyFMHZWHCV8s8I=
Subject key identifier: BF:58:66:32:3F:6F:35:CB:65:A8:1D:2B:A3:95:C8:AA:CA:A3:9C:17
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 019A50E27FB7A0CBF38C042D246C683174B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 22:00:12 +0000
Manifest this update: Tue 04 Nov 2025 22:00:12 +0000
Manifest next update: Wed 05 Nov 2025 22:00:12 +0000
Files and hashes: 1: 9NPwe5Cch9DKsApne4lBck33dDg.roa (hash: n5rsnUrmOjZIQ9fY3e7CPhPSBY9CrA1hfcg23aULjnI=)
2: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: 95G99KXomxGJTW0+/qQnAKyuWorZXUJvJE0YqYoZDO4=)
3: ZbtF1y6qqiNNF9Kn4_owkJXh8bU.roa (hash: d2ka5QhSCEg5WGvXSWc7XTeM7dxOHFNwQmEQHDweYuE=)
4: gJceF3d-nooj-HNFWfJ7DjrX2tM.roa (hash: UdFUlFj+wie5ycXMTsd/YSKdJbHKvpKDw6EwjwqI0NE=)
5: o5WCBd7B_bdBqX3qKx8Y0fm2X9U.roa (hash: aIK9wfTTcwYlswanyt/B91y3FSF50A1oyK2VXl08Ak8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:7f:b7:a0:cb:f3:8c:04:2d:24:6c:68:31:74:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Nov 4 22:00:12 2025 GMT
Not After : Nov 5 22:00:12 2025 GMT
Subject: CN=bf5866323f6f35cb65a81d2ba395c8aacaa39c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:c0:bf:1c:34:6b:db:80:c5:d9:93:32:65:
9c:65:3f:b0:70:9e:aa:0a:38:11:cf:ba:05:db:b4:
b0:4d:f1:ec:9b:c9:8f:95:71:ea:5f:fa:f4:2f:4c:
11:d4:48:52:3a:86:8b:90:b7:95:37:90:86:33:22:
c0:8f:3e:af:13:f1:89:53:62:f7:ab:7c:bd:e5:bc:
85:39:1a:22:97:92:21:bc:14:93:a2:d3:e2:0f:e4:
64:d3:99:31:09:2d:18:ea:1d:78:ff:1e:60:18:65:
a8:c0:30:0a:a5:31:8c:e7:5e:31:3f:96:0f:59:a5:
d1:02:8e:7e:a6:9f:de:24:b2:46:f0:d0:2c:9e:41:
7f:1c:e6:91:36:90:9c:84:bf:37:fc:3f:c2:47:d5:
88:4c:51:32:d7:e1:76:d5:e2:e2:bd:c9:20:fa:73:
c0:36:ac:08:d9:af:6a:e0:28:58:98:47:71:ad:0f:
18:c1:99:54:7a:16:09:a0:f7:28:bd:ab:29:aa:fd:
0a:8e:7a:e5:f0:eb:f6:33:0d:ea:4d:56:2a:42:b2:
73:60:29:22:c8:05:19:3c:7d:6b:7e:2e:e9:6a:83:
0d:36:16:25:47:80:d7:68:a2:cf:19:5f:58:1e:d6:
6f:d0:53:cc:1d:a9:1e:1f:9e:df:20:6b:de:80:e8:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:58:66:32:3F:6F:35:CB:65:A8:1D:2B:A3:95:C8:AA:CA:A3:9C:17
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cb:6f:cc:3d:a0:60:d6:62:48:83:c4:02:2a:7c:27:8e:83:
3b:44:13:cd:7d:1c:a8:57:a3:c6:eb:5d:36:38:99:0d:82:db:
d7:0e:e7:46:03:cd:9d:61:cb:ac:9d:f3:9f:17:e3:dd:e7:45:
7d:04:de:cf:5c:ad:20:9c:a6:fd:46:ba:e4:84:1b:5e:63:d0:
a3:e0:66:7d:2c:2d:3a:af:68:d5:83:91:28:66:93:31:7f:3b:
d4:19:57:de:5a:48:57:12:be:74:bd:42:98:89:4d:db:9c:7c:
ff:6b:2e:f8:0c:d8:4a:41:68:4f:6b:a1:80:c2:f4:e7:12:18:
df:52:65:9a:15:86:c8:10:2c:ed:3b:46:3d:f5:b2:e4:b7:f7:
e5:e8:a5:f3:06:55:81:19:be:73:d9:1f:f7:96:98:a9:2d:71:
af:b5:74:70:33:ea:c6:36:da:40:da:2e:eb:60:3c:b9:77:d6:
29:b7:fb:ec:93:f7:3c:c9:5a:58:bb:6a:d4:c5:74:e6:9b:70:
d6:e5:84:f7:10:33:e7:df:aa:51:3d:48:99:28:eb:c1:96:04:
55:05:44:51:6e:2a:72:02:87:64:03:95:26:0a:7f:de:48:f4:
e4:c8:52:9f:9c:24:18:dd:c5:75:05:57:a9:ed:60:fe:81:e1:
72:d5:1e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:11:18 2025 by rpki-client