Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json)
Hash identifier: ogY6YiIG6QxmmKcunmgvLs4UlJ5mRun4ggQKZ2ECxhY=
Subject key identifier: FC:6C:1A:82:40:FA:C9:EA:25:AC:B1:7F:5F:E2:BB:19:88:04:8E:3C
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial: 019A4E18A6DED1FBFDA37F3DA096ECC66DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
Manifest number: 0518
Signing time: Tue 04 Nov 2025 09:00:29 +0000
Manifest this update: Tue 04 Nov 2025 09:00:29 +0000
Manifest next update: Wed 05 Nov 2025 09:00:29 +0000
Files and hashes: 1: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (hash: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=)
2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: wEYFP5yYyFKa8UprDPQJ4l054/jcNcv4vLj/+xT68pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a6:de:d1:fb:fd:a3:7f:3d:a0:96:ec:c6:6d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Validity
Not Before: Nov 4 09:00:29 2025 GMT
Not After : Nov 5 09:00:29 2025 GMT
Subject: CN=fc6c1a8240fac9ea25acb17f5fe2bb1988048e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:4c:bf:71:1e:26:ea:cd:8a:4d:bb:10:76:
0a:14:58:5f:cd:12:4f:0b:ca:0f:cd:58:85:47:d8:
cb:de:fe:26:50:73:e0:f4:04:bf:67:c5:41:5f:6a:
b2:1d:ff:c6:ed:38:2a:72:b2:2c:0c:4f:f7:5a:db:
82:bc:58:a5:88:72:f3:6a:ec:73:c2:b2:01:29:c0:
8f:6b:bb:f7:e8:8d:22:d6:c7:10:66:41:64:7b:8b:
70:ff:9a:56:ee:6c:2d:fe:aa:f6:d3:2d:97:21:98:
98:20:49:2c:8c:ab:f8:4b:62:07:de:ea:59:bf:ca:
f6:90:c6:10:f3:d1:9f:9d:fe:eb:f1:77:54:d4:f1:
0c:ed:5c:a2:3f:89:41:1c:36:60:b1:b5:32:ac:7e:
95:d6:04:ee:4f:7c:3c:77:52:ef:45:65:d8:6a:66:
43:83:54:17:47:d4:66:2c:fb:08:89:d6:1b:4e:ea:
71:e4:34:96:67:72:35:14:4d:b3:53:61:ae:72:e1:
6d:cc:33:03:d1:1f:d1:ec:72:12:b7:b4:2a:91:a7:
21:bb:a6:7d:bc:e1:c6:fe:f9:4c:1e:b9:f1:bb:4c:
03:42:79:af:89:99:9e:3b:36:75:ff:c1:8e:3a:da:
fd:7f:9c:25:74:90:03:8b:17:73:42:ba:7f:6a:89:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6C:1A:82:40:FA:C9:EA:25:AC:B1:7F:5F:E2:BB:19:88:04:8E:3C
X509v3 Authority Key Identifier:
keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:16:b0:40:d5:61:43:c7:4d:d7:3e:ae:52:19:b5:67:14:84:
5b:6d:dc:93:fa:ef:1b:a5:2c:eb:5f:fb:11:a9:08:db:fa:6d:
38:b8:0c:28:78:55:9b:1b:a5:a8:aa:5c:80:ad:a5:1d:e9:9e:
c1:fb:23:ba:34:74:f4:4e:21:71:66:ac:31:8e:a9:b4:8e:b8:
5b:5d:f8:2e:25:4b:32:58:a5:81:a7:ad:dc:14:f1:20:99:4a:
71:55:0f:5f:2f:10:d1:ad:5f:8a:99:e0:cf:e5:ed:1f:41:a5:
2e:21:0a:c8:91:52:53:8f:9a:5d:fc:4e:99:9d:57:06:08:4a:
7a:0d:d5:36:02:15:20:d5:1b:b7:89:6a:d1:fa:86:6c:b1:ce:
3a:dc:57:60:01:cd:e0:b4:e0:7b:4e:a7:78:c6:ee:d3:e7:be:
be:02:60:9e:48:cb:2c:a7:b1:a2:82:6f:31:33:98:fd:c7:b8:
8b:97:9a:50:8d:5b:86:92:45:86:15:3d:ca:12:5f:7c:9d:d2:
16:dd:c7:f0:2a:36:19:4e:6b:33:25:f4:03:3e:47:c8:61:7d:
8a:79:44:ea:08:72:5e:1a:d7:c1:79:ea:f7:b5:1f:18:e5:43:
9c:fc:1c:49:17:6c:f8:c3:df:c8:86:e5:fc:00:ed:f6:90:3d:
41:62:0f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:58 2025 by rpki-client