Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: rvUMcCNWG3ZAv4FcK1TAzLQpAHS8RVcHeGTqWEGt6vQ=
Subject key identifier: 87:C8:0C:13:38:65:F2:DF:95:79:D4:AA:10:AB:67:E8:F8:F6:91:C9
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 019A4E8671227254B889631708D251D2098F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 11:00:24 +0000
Manifest this update: Tue 04 Nov 2025 11:00:24 +0000
Manifest next update: Wed 05 Nov 2025 11:00:24 +0000
Files and hashes: 1: KrEyLtzd_FGxXKe36EuPBXxaKHA.roa (hash: ADivn+VbvpgE3fUtfn8Xzz0qtLuBXCOdiCI9IztCcUQ=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: mezzwS00z1QaByWhQUWM21hKqy7lk9xtand0hN56YdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:71:22:72:54:b8:89:63:17:08:d2:51:d2:09:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Nov 4 11:00:24 2025 GMT
Not After : Nov 5 11:00:24 2025 GMT
Subject: CN=87c80c133865f2df9579d4aa10ab67e8f8f691c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:39:5a:55:3d:0e:e2:69:36:3c:da:41:f0:
ab:eb:f4:44:39:35:31:70:07:7d:73:10:69:5f:f3:
99:c0:71:31:64:c8:31:16:83:a1:1c:a6:14:c6:5a:
54:94:d4:1b:e6:48:a5:16:1e:ff:a4:48:55:3f:ef:
a0:f4:b9:03:80:3e:af:7f:e9:bb:0d:00:a5:6b:08:
ce:03:18:a6:c4:91:bd:a5:3a:10:c1:55:cc:8f:65:
87:48:fd:ef:0e:b3:10:29:90:9c:3c:8c:7b:74:76:
73:7e:8f:21:30:3a:aa:a2:4a:23:94:78:7f:c4:bf:
0e:b2:59:3f:2c:02:fa:9c:8e:be:bc:7f:67:3a:e7:
b7:c9:ea:01:28:49:66:f2:0e:99:2d:47:3e:35:1e:
10:39:46:a8:2d:b3:87:70:6d:7c:41:1a:79:68:0a:
9b:88:fe:57:09:7a:f5:c8:4d:07:46:5b:be:74:4d:
88:2d:6e:2a:37:75:8e:d1:2f:e2:40:ef:43:29:29:
eb:8b:80:3f:fc:5d:a5:04:8b:57:65:f9:fc:30:10:
d5:41:d8:ec:bf:9d:74:1c:99:d7:4a:0c:2a:4b:12:
26:19:99:e1:c5:70:65:fc:16:8c:cf:a1:7d:ea:94:
fe:bc:2e:68:83:8d:b3:59:b6:25:67:c9:1a:dc:72:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:0C:13:38:65:F2:DF:95:79:D4:AA:10:AB:67:E8:F8:F6:91:C9
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:02:61:25:b4:ca:2d:a7:a9:bc:af:45:62:41:69:75:d3:61:
44:3f:76:80:29:8e:e9:e7:ee:6a:fc:62:40:2e:5a:de:e9:3f:
c1:8a:5c:57:6b:8b:42:41:09:96:83:7d:e9:69:56:74:3e:f3:
90:2d:2a:38:93:1c:86:85:b7:b5:d6:97:47:88:c9:c7:31:9a:
b7:ac:03:5e:55:23:39:69:e5:cb:93:02:8e:0d:3e:12:9d:f2:
10:98:42:5a:44:c8:f7:39:dd:4a:8f:4a:aa:2a:ba:43:2f:6d:
53:82:f7:70:0b:e5:7e:72:f1:c3:f0:29:09:28:7a:ac:66:91:
b6:25:46:4f:74:c5:8c:ac:83:54:86:f4:bc:09:89:ef:55:23:
3e:b3:59:e5:d6:c9:89:c5:9c:ec:af:52:b7:e8:ba:c4:25:94:
53:7c:c6:29:a9:6d:f0:ac:4a:f1:69:fd:8a:59:a4:62:f4:18:
58:b2:da:6a:e7:24:bb:96:e6:bd:bc:c4:67:6d:6c:1c:ec:4c:
dd:9b:8a:0e:89:5f:77:88:17:67:8c:bf:8c:a7:0b:b5:45:5f:
74:46:0b:0e:ea:22:af:91:85:ba:03:43:6d:a3:4b:4e:53:57:
87:6b:d1:69:aa:56:e1:a2:ad:64:a5:be:a1:df:1e:40:d8:22:
01:70:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:46 2025 by rpki-client