Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File: k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier: hwqX4lcaLRpLnlQEyd5+9y3JWNGJ3R4ulz141YeBn9A=
Subject key identifier: E8:F8:CA:C4:4A:1E:BE:E6:9E:B6:ED:25:50:11:81:B6:73:48:B2:AE
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 019A4E18FAFC2A84C2BDCFBBC198109C0EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number: 1407
Signing time: Tue 04 Nov 2025 09:00:51 +0000
Manifest this update: Tue 04 Nov 2025 09:00:51 +0000
Manifest next update: Wed 05 Nov 2025 09:00:51 +0000
Files and hashes: 1: Xv-bUtmsrHjQ28dXxWqb3uBJRDg.roa (hash: 0bOsSKKdGKKiMo/FFhxHgHDZgsrzyzkqrbIyGUoQTCk=)
2: cL-keBkm4oIskLWJO5aafKhJ0jo.roa (hash: s9gkn4aSVId/ngfYN3hJphayygttMpgwEt/RQqhzDWs=)
3: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: LWbsLsshlhM6d52CJAQ4SO3PpjiCS1TvnrmPgMCiPUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:fa:fc:2a:84:c2:bd:cf:bb:c1:98:10:9c:0e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Nov 4 09:00:51 2025 GMT
Not After : Nov 5 09:00:51 2025 GMT
Subject: CN=e8f8cac44a1ebee69eb6ed25501181b67348b2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:43:20:86:8d:b7:3a:55:1c:bb:8f:db:1b:81:
a5:d0:47:5a:bf:ef:28:f2:b1:16:36:00:f6:cc:9f:
60:61:49:38:ff:a0:18:a5:60:97:1c:48:28:88:8a:
59:94:6e:54:94:fd:27:62:19:54:cd:2d:c2:66:79:
ae:92:b4:b2:01:d7:3f:81:44:a6:5c:6e:17:a7:03:
87:3f:ea:c6:27:fe:04:a4:d3:f8:8d:bf:74:13:70:
06:d0:97:05:06:f3:34:6a:24:46:f9:1c:13:27:30:
87:a5:cb:dd:99:52:54:3d:54:f0:35:68:53:cb:fd:
4c:31:27:0f:0b:f0:3e:d5:f8:90:39:cf:35:d2:66:
a0:4b:8d:8b:12:d7:65:a6:dd:89:40:70:b9:d7:c7:
38:fd:59:13:be:49:a6:19:36:2f:7c:21:40:ba:5e:
49:92:70:35:f4:0a:a5:c4:cc:c5:4b:14:e3:aa:e6:
09:28:69:47:21:5e:58:ea:56:5a:c9:c7:c0:59:4f:
d1:72:3e:2d:bd:15:5f:2c:90:58:00:e7:c0:f8:d3:
b6:fc:c0:1d:df:25:0c:49:9d:dd:f9:b3:09:81:02:
eb:44:e1:39:b7:2b:dd:3b:c6:bf:69:6a:92:35:1a:
f8:f6:34:66:16:ea:09:fd:2d:8d:43:9e:f6:c6:5d:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F8:CA:C4:4A:1E:BE:E6:9E:B6:ED:25:50:11:81:B6:73:48:B2:AE
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:10:e1:5a:a1:e4:91:2e:1d:13:b1:41:24:b2:cd:36:57:7b:
13:df:9b:f4:a6:0d:37:a0:85:15:47:5d:c1:a3:fb:ef:b8:88:
d9:11:5d:73:cf:23:13:20:e7:9a:15:e4:a0:ef:5c:cf:23:90:
06:2f:14:25:64:3b:e5:73:b9:21:06:5a:08:05:df:2d:a6:8b:
92:b0:ca:38:12:80:f9:5a:6c:37:f9:8b:f5:4c:c4:09:8d:f4:
0d:7c:8c:5c:f1:46:d6:17:ad:ad:fc:63:8f:e2:f6:23:68:85:
07:ad:99:3a:8d:f6:8b:8d:62:05:93:ac:01:e9:cf:07:d8:92:
4b:71:8d:35:d0:7f:67:c2:2f:8e:c1:0f:bc:da:e4:9e:f5:40:
12:7a:bd:15:49:0d:fa:7c:35:84:7a:da:4d:44:7b:cb:2d:c5:
d3:83:bf:df:18:df:a2:dc:bb:39:73:4f:ea:ec:9e:9e:c8:24:
c7:f4:ef:79:09:d3:9f:9d:57:9b:11:bc:2c:16:41:11:0c:5f:
d7:5b:ac:82:71:e7:a9:fb:36:ed:49:4a:02:e4:e3:9e:7a:44:
ec:2f:02:03:42:97:0c:71:ee:49:f5:ef:6f:8e:18:4e:a5:b5:
4c:aa:8c:a9:5d:81:18:56:f0:cb:89:7f:5e:58:ce:57:8f:88:
d3:d1:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:24 2025 by rpki-client