Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: wEALYD4pWjrDoSBhJrEDYzK4M9lanjvbhv0uGNM4Z3Q=
Subject key identifier: 71:35:CD:3A:94:E5:F4:48:81:29:8B:CE:68:F5:EA:B3:83:39:CB:84
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 019A50E336E87B1991ACC1168E505B2787C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 06D5
Signing time: Tue 04 Nov 2025 22:00:59 +0000
Manifest this update: Tue 04 Nov 2025 22:00:59 +0000
Manifest next update: Wed 05 Nov 2025 22:00:59 +0000
Files and hashes: 1: DgYaKXLAfCciJB45PdY6jb3nvSM.roa (hash: 3wQZIj5q2hejLISAuXVPv02HNSLvrU3fDX6SOnePruk=)
2: iLJZ457a-7z02PhFWjv4cGHT93U.roa (hash: NESsCi8hLaoKvM16NOOEv6MVC+cF28ZWv23JeL3C9tw=)
3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: ELszFeP3BrJjNAtOBdXZJuJ7WD3uVDngtALdfXJ7WLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:36:e8:7b:19:91:ac:c1:16:8e:50:5b:27:87:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Nov 4 22:00:59 2025 GMT
Not After : Nov 5 22:00:59 2025 GMT
Subject: CN=7135cd3a94e5f44881298bce68f5eab38339cb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:50:20:53:dc:97:cb:ef:18:cc:e6:e1:3a:c2:
92:de:62:37:59:c3:f1:1b:e7:4e:f0:0d:9b:9a:16:
ba:a3:43:8d:2e:91:2f:b2:75:19:4c:48:76:4e:fa:
fd:69:94:f7:01:9a:d5:db:f7:8c:5f:d9:b6:da:fd:
e8:05:30:2c:d4:b1:86:1d:57:2f:80:41:46:fb:77:
fd:4b:9a:af:25:1e:58:88:14:a9:a4:2d:09:5b:36:
e2:1d:23:c8:77:01:f9:a3:53:16:f9:9a:68:a4:81:
5c:04:c3:ee:68:d2:fa:73:9d:04:36:69:b1:09:5d:
5e:d1:24:97:ec:4a:c7:a9:22:9e:35:00:c2:5a:38:
7a:54:23:41:c7:96:ff:41:9e:87:d3:32:93:87:9b:
18:8d:54:fc:56:f8:6a:18:60:bd:b4:2a:64:ad:21:
60:08:3a:52:d2:3d:19:07:3a:c1:96:59:18:19:16:
a4:33:36:e4:3a:01:f6:4f:25:a3:91:bd:1b:d4:2e:
f8:72:c9:9e:e6:28:df:bb:28:1f:68:44:25:6a:81:
1e:b4:8d:3b:62:8c:3b:8e:9a:6e:b8:3c:c1:09:bf:
b8:bc:9f:00:05:0d:ba:82:83:f8:62:71:a7:e6:55:
e8:59:59:ec:e5:f3:45:a8:2f:59:9b:67:d7:bd:99:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:35:CD:3A:94:E5:F4:48:81:29:8B:CE:68:F5:EA:B3:83:39:CB:84
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8f:cf:c2:c1:c2:d2:60:5a:fd:05:10:f2:e1:cd:b1:d6:a1:
af:90:89:f2:45:f7:db:2f:3c:ec:e8:bf:ec:7c:9e:de:b1:75:
d4:0e:ea:53:52:79:bc:75:95:f9:94:18:7d:59:d1:76:82:72:
1f:29:ca:6d:05:30:30:b9:25:7f:51:7a:44:38:b9:3a:1c:7c:
45:a8:82:3c:a7:82:68:98:69:07:00:54:dc:e4:a6:39:f9:2e:
ce:35:90:2f:3f:d3:9b:12:1b:6e:19:b2:db:36:10:59:61:4e:
c2:f0:7e:0f:7b:0c:f9:35:2d:37:93:d3:e9:ab:ae:56:7b:9b:
e2:83:77:08:ff:94:bd:19:e6:f7:4b:e7:87:f7:07:2e:5e:68:
39:21:6a:09:c7:54:ec:87:c2:b2:84:22:bc:9b:e6:2e:15:26:
af:9f:5e:01:e9:14:3c:8e:0e:b6:14:0f:b9:ed:3c:fd:e4:86:
1d:a9:6a:6d:dd:c4:5e:44:a4:a1:69:0c:90:44:98:9c:1e:27:
7a:d5:99:80:29:02:bc:de:eb:d3:17:c8:08:d0:b2:06:98:72:
f5:99:3b:cd:21:24:79:25:62:46:5f:05:83:12:d8:98:9d:68:
d3:e6:10:3a:e6:8a:83:ef:1e:50:86:87:78:eb:03:d4:5f:87:
0e:ea:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:31:33 2025 by rpki-client