Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: KQIELK5n0qj6BlUNlYe6HmQohcC8CX94XCJmEx9ux7I=
Subject key identifier: E2:29:7C:D8:B1:6B:F8:97:29:A9:7E:0D:63:52:56:2D:4C:C9:13:58
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 019A51F5452BC86649D99522BAAEC2C245D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 03:00:19 +0000
Manifest this update: Wed 05 Nov 2025 03:00:19 +0000
Manifest next update: Thu 06 Nov 2025 03:00:19 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: lXMIm5abq2WX+xNqBSXcSm+VdbmHoLNbxz9KsVu4xjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:45:2b:c8:66:49:d9:95:22:ba:ae:c2:c2:45:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Nov 5 03:00:19 2025 GMT
Not After : Nov 6 03:00:19 2025 GMT
Subject: CN=e2297cd8b16bf89729a97e0d6352562d4cc91358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:3e:5b:b0:a1:5d:d2:d4:18:92:08:bd:6a:
04:9c:6f:9c:8f:a7:c0:d4:a6:20:8a:4a:0b:2b:06:
21:90:3b:a9:b4:d4:b0:a8:78:03:e2:6e:6c:98:00:
23:92:a1:b3:28:8a:42:ce:9f:3c:c6:28:db:c0:9e:
8d:a6:93:d4:2a:d0:7d:c4:f6:13:3c:d3:42:68:eb:
2c:c0:1b:61:a6:4a:13:e6:ae:d3:52:02:e4:b1:5d:
41:f7:70:8c:8d:a5:7f:16:a6:e6:41:b8:6c:35:93:
e9:68:e7:87:e1:9d:07:61:9d:78:18:34:36:5c:08:
da:2b:5c:90:7f:80:6a:9d:ff:92:02:95:6c:cf:cc:
7f:19:1d:6b:11:3b:cd:dc:7f:d7:24:d6:8f:09:3f:
d9:0a:1d:a5:f2:53:a5:51:78:66:47:c8:f3:b4:90:
e4:1c:26:7b:fc:88:e9:45:a0:5e:04:cc:64:00:ea:
ae:e4:77:c8:53:bc:80:a1:65:42:27:e3:bc:25:f3:
0f:f9:63:ce:32:2e:62:e9:2c:31:fc:52:d6:54:fc:
cf:0a:4d:d0:54:1b:d2:a0:80:ce:71:48:11:a5:af:
b1:9b:d1:32:55:3b:53:ff:b8:43:14:a4:1f:41:3a:
75:81:81:4e:a7:d3:04:7f:fa:e9:66:51:19:05:fe:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:29:7C:D8:B1:6B:F8:97:29:A9:7E:0D:63:52:56:2D:4C:C9:13:58
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:24:a2:dc:a7:30:27:9b:4b:f7:2c:dd:47:22:c6:21:bf:
ed:94:00:fc:82:a2:8c:94:23:48:6e:f8:97:0e:7e:97:86:8b:
4e:81:25:c2:9b:36:b3:e5:2e:8b:61:10:af:1f:23:97:f6:67:
5a:b7:ab:4a:da:11:61:f9:4b:67:d7:2a:98:48:8a:c4:8c:1f:
dd:30:8f:fa:9d:31:a4:d9:e7:89:f4:47:08:60:b6:0f:36:65:
97:c3:21:bc:04:70:ac:2e:ae:a8:cc:0b:92:18:41:aa:08:5b:
be:41:5a:b0:b1:98:93:bc:47:b7:e7:7d:33:cd:da:5c:af:fc:
82:e2:34:bc:59:70:59:83:90:41:63:27:3f:7e:ee:37:35:64:
12:41:4f:67:50:fe:82:04:4f:3e:a2:4e:07:25:8c:b1:f0:49:
5a:c4:35:88:3d:f1:9b:46:e8:b2:6b:91:39:b8:f6:12:fb:76:
cb:d7:e3:93:53:c0:ef:70:6e:bd:83:bc:9e:7b:3f:ec:99:8b:
5a:47:38:1f:1d:86:50:08:f6:12:77:1d:c0:4b:45:75:29:c7:
c0:29:e3:53:4b:98:52:7e:db:52:5a:a8:af:28:64:30:b4:f0:
43:d1:1c:38:b4:70:0e:88:38:bc:df:46:ea:6a:a9:c8:5b:f1:
fe:f8:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:11 2025 by rpki-client