Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: nC8fknGyp0wudq3+Hx95IK5BacwqWDwmRXcbW9/9FRQ=
Subject key identifier: 5F:AF:D6:77:1C:85:D0:F4:2E:2C:14:75:34:BF:80:C7:F3:C3:E4:11
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019A71EEB611F420154A26AE173E252DF780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:00 +0000
Manifest this update: Tue 11 Nov 2025 08:01:00 +0000
Manifest next update: Wed 12 Nov 2025 08:01:00 +0000
Files and hashes: 1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=)
2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: HG36ievsjPi9lqWisGaeZZwHJvSD3tzKtpiW2qQewA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b6:11:f4:20:15:4a:26:ae:17:3e:25:2d:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Nov 11 08:01:00 2025 GMT
Not After : Nov 12 08:01:00 2025 GMT
Subject: CN=5fafd6771c85d0f42e2c147534bf80c7f3c3e411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:af:9d:77:b9:3e:56:f2:84:a0:df:86:d0:
ea:a3:87:14:2b:77:de:63:33:a6:0e:37:9a:38:d0:
da:50:d0:74:4e:ba:c2:98:f5:c9:9b:a6:45:9b:c9:
dd:c0:ce:f3:10:c8:35:1d:de:b4:38:11:e1:5e:5f:
f3:cb:d4:57:b8:e0:f0:1b:48:13:00:c2:64:f1:ad:
be:87:7f:e7:47:83:32:7a:d5:32:a0:fd:39:a3:c7:
2d:0a:85:b5:d3:72:41:67:c7:e9:38:09:87:66:dc:
35:74:0c:ae:bd:30:d6:de:88:bc:b8:1f:77:74:37:
25:21:b2:5f:22:62:bb:bf:55:04:19:5d:a9:e6:6a:
76:43:41:36:f8:f9:e1:20:71:a5:99:29:72:21:5c:
49:7a:3a:da:5f:3b:47:b2:73:3b:6e:44:a2:70:17:
6e:6e:df:84:bf:46:cb:23:cc:7b:87:ec:2d:d2:93:
61:e2:07:6d:0f:db:8a:f7:6c:28:bb:80:83:ab:c1:
c3:5d:d1:c8:6e:a2:ad:77:4d:b5:ea:9b:da:d4:be:
b3:d9:d2:8f:ae:f1:37:ee:62:02:ce:a0:d3:eb:f1:
fb:3a:b7:74:96:1c:35:b4:fb:06:5d:4e:a2:3b:87:
6c:34:34:d8:9f:c0:30:3c:6b:3d:f3:97:38:3b:07:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:D6:77:1C:85:D0:F4:2E:2C:14:75:34:BF:80:C7:F3:C3:E4:11
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7c:c7:35:a3:78:b5:16:28:a8:cc:4e:18:af:3c:c8:cb:e9:
5c:3a:ed:42:02:3b:dd:03:6d:9c:ed:89:9e:5b:dd:cf:84:42:
8b:07:cc:c2:3f:c8:86:24:80:37:80:88:af:f0:af:c4:ba:86:
bf:84:bb:10:24:64:12:9e:2d:2e:ca:bb:b0:6d:19:9b:ca:90:
74:2f:e4:6b:26:36:76:7a:1f:96:d7:e0:72:ac:93:92:f5:72:
96:7e:a9:7d:75:af:d4:96:73:06:24:1f:b5:58:58:8c:d6:88:
36:4a:1b:b4:6b:35:45:87:aa:a5:65:30:79:14:76:41:6a:04:
cb:30:28:0a:2b:c6:e4:4d:94:46:60:b3:8f:8e:31:2f:83:64:
21:81:21:f7:1d:b4:53:dc:86:5a:8b:9f:56:c8:36:38:56:8d:
2a:3a:27:e5:38:f6:9a:b9:2a:31:6d:2d:96:3d:f1:06:a4:5f:
28:3f:4c:b2:96:c7:67:3c:4b:e0:4e:37:e7:48:ec:c6:51:cf:
79:23:af:d2:44:b7:6b:17:65:07:ac:e6:9c:c5:39:6a:5c:85:
b2:7d:2a:9d:8a:ae:05:38:0f:46:86:fb:63:7e:24:ed:4e:b1:
4b:ec:e7:1d:ae:67:27:b3:58:78:2b:c2:d3:10:45:14:da:39:
14:73:e9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:45 2025 by rpki-client