Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: 0v0b+cQRA3b46jLMTxqr3gluqr8c52VKJkxlLe6Ec2Y=
Subject key identifier: AC:BA:4F:3D:28:84:AF:91:88:57:20:29:64:4B:F9:86:84:89:3E:2B
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 019A4FD0061E3E8C9248FC4765585B7ECF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 13D0
Signing time: Tue 04 Nov 2025 17:00:24 +0000
Manifest this update: Tue 04 Nov 2025 17:00:24 +0000
Manifest next update: Wed 05 Nov 2025 17:00:24 +0000
Files and hashes: 1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=)
2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=)
3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: f5/stvEQnZOD+1vrCj8BvGHSIn20uS9jqSjWrsbGyu4=)
4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=)
5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:06:1e:3e:8c:92:48:fc:47:65:58:5b:7e:cf:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Nov 4 17:00:24 2025 GMT
Not After : Nov 5 17:00:24 2025 GMT
Subject: CN=acba4f3d2884af9188572029644bf98684893e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:5c:f7:4c:5e:ce:b2:61:41:94:bc:20:1e:
24:ef:db:94:ab:86:f6:63:2e:6e:f5:51:13:b3:02:
e4:f8:fb:d8:ab:ad:27:8b:8e:c4:71:31:87:8c:a0:
97:0f:73:af:65:d8:ce:1e:f7:ba:a1:01:36:d5:30:
ac:79:b2:0b:09:d9:7a:36:2f:1f:1f:97:96:21:7b:
d4:62:c3:37:6b:37:48:ff:12:cc:9f:23:8c:e4:e0:
4b:2a:b4:7f:94:0a:b2:c2:a6:cc:5d:be:15:85:13:
2b:c0:b1:f1:95:77:3d:7a:6f:56:9f:12:df:34:d4:
d3:a1:98:34:90:d5:ce:48:5d:b6:db:3f:bf:d4:43:
e0:83:9c:99:bb:e7:73:82:65:e1:59:69:ae:30:ba:
42:22:c7:c5:6a:51:e1:86:4f:57:6d:26:43:6a:19:
3e:e7:99:19:73:b4:10:ff:9a:04:8d:cb:1f:64:47:
05:0f:0e:1b:c8:93:5b:85:ac:dd:55:19:5c:52:2f:
88:e5:f0:5a:9c:26:4e:bf:2e:21:6e:86:10:30:91:
2c:cf:95:80:a3:bc:c6:f4:23:f6:eb:62:2f:30:21:
68:e5:31:46:a6:d9:e6:d6:dc:b1:fa:08:5c:b3:fd:
88:0b:f0:03:a8:42:b9:ce:48:70:4b:9c:07:9e:ab:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BA:4F:3D:28:84:AF:91:88:57:20:29:64:4B:F9:86:84:89:3E:2B
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:81:7a:63:27:1b:1b:85:fa:3e:32:76:7a:7e:17:c5:67:31:
44:86:63:27:a8:51:b4:cc:a6:fb:e5:c7:5b:82:ba:f1:f6:91:
1c:01:69:31:22:31:fa:f6:94:2d:fc:e7:e6:7e:02:56:3e:7d:
91:b8:9e:b1:02:85:81:0b:35:2f:a1:77:ff:26:e4:9f:69:0b:
cb:df:52:4c:df:b7:d6:5f:14:f5:c4:12:c5:3e:3b:93:52:1f:
c0:eb:bd:e9:d9:c2:89:f7:0c:8f:ef:27:05:10:06:ca:a7:58:
94:b1:15:5b:7f:18:f1:c0:dc:9a:82:1a:ea:68:00:e8:d7:71:
3f:33:4d:37:4b:c5:81:ad:d7:9d:e4:d5:7b:5a:b2:0b:fa:86:
bf:ff:e1:3b:e7:ed:96:57:b9:03:e1:ed:70:8f:0b:b4:ec:e2:
4e:24:fc:dd:58:cc:c7:cf:e2:1d:06:d5:4d:36:78:fd:a1:dc:
d0:a2:ff:ed:f1:a5:e9:df:a6:41:9c:8e:79:22:d2:2b:41:37:
ab:ee:87:43:6d:be:f9:c4:b6:16:a8:38:21:c4:a5:05:72:a7:
b9:cc:6d:52:b7:9c:b9:73:76:bd:52:a6:d2:16:d1:9a:2f:2a:
80:c2:b1:a6:59:b1:6b:43:4b:ad:33:91:da:d0:ec:6a:cb:83:
91:5a:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:32:20 2025 by rpki-client