Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft (raw, json)
Hash identifier: DydAPPlDYz9L5tWnVXIVmoVQzZXRM9niCR2Yo9KRKGA=
Subject key identifier: FC:D6:5E:CC:53:89:4E:04:56:2B:D9:45:6F:6F:69:D7:60:0C:6C:F2
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 019A7293E5FD87E346ABBF972986DB09F244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
Manifest number: 13B1
Signing time: Tue 11 Nov 2025 11:01:26 +0000
Manifest this update: Tue 11 Nov 2025 11:01:26 +0000
Manifest next update: Wed 12 Nov 2025 11:01:26 +0000
Files and hashes: 1: OI99xasONPPF-hb_rfYbSQdFoLY.roa (hash: UeUlGFKe3vD+30DqhoTEBeaxMmrZwFQuEXKIyXR/8V4=)
2: k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl (hash: X3itkV6BIaa0msCaSgjVDPaRRoNwFa+K2YCLm/waSv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e5:fd:87:e3:46:ab:bf:97:29:86:db:09:f2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Nov 11 11:01:26 2025 GMT
Not After : Nov 12 11:01:26 2025 GMT
Subject: CN=fcd65ecc53894e04562bd9456f6f69d7600c6cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:e1:c2:e1:fd:ee:01:eb:32:b6:c2:1a:27:
3f:a3:7f:10:ac:bb:ba:2e:05:57:e2:e1:e5:07:fa:
e5:c7:1a:4e:0d:17:16:1d:97:ad:bf:96:11:5b:42:
90:cb:6d:c8:7a:fa:d2:55:dd:e4:8e:7d:12:ce:c0:
b7:41:a0:61:90:26:79:79:3d:da:c3:4c:b0:e8:63:
a8:c0:09:2d:6b:53:f5:dc:94:8b:b1:f5:a3:cc:f5:
a0:94:2b:f1:cf:73:c9:12:15:23:dd:19:be:a2:d2:
af:8f:7f:7a:8f:8d:08:de:5b:a3:ac:ac:f4:9d:39:
9f:8c:41:da:5d:83:a4:90:dc:d9:68:4b:07:2f:ea:
5c:e5:8b:d6:8c:e2:a5:66:6a:9c:74:71:70:eb:c1:
4d:d1:29:5b:32:e2:bf:03:38:9a:b0:21:2d:c9:47:
0a:da:d2:05:d7:a4:37:72:0a:18:dc:e9:e0:15:62:
44:3e:98:a6:9c:d3:53:09:b1:75:b8:33:4c:4e:28:
51:a0:0f:45:5a:50:df:8f:f5:bd:f2:45:d1:54:84:
33:7b:22:69:e1:7c:59:96:6b:51:32:47:e3:09:17:
2d:10:29:51:9e:40:4a:61:ae:f7:d3:f3:b3:18:ff:
3e:f2:e4:b5:26:d4:12:cd:81:2e:2f:c3:2d:0c:b3:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D6:5E:CC:53:89:4E:04:56:2B:D9:45:6F:6F:69:D7:60:0C:6C:F2
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c9:6b:b5:4a:ed:7d:78:05:d9:11:1e:c0:30:d0:5d:c2:ee:
7e:0a:e5:4b:fb:b4:60:71:71:ca:2d:f0:32:13:4b:bf:17:13:
13:f6:0c:d1:cd:19:db:67:94:d3:1d:7b:76:32:6f:a0:3a:db:
f4:52:14:e6:11:d3:89:e2:ea:a2:f5:66:10:9b:ea:2f:b5:c4:
72:b1:cb:bb:3b:d2:c4:16:96:bd:d5:4f:70:c6:b4:47:a1:6a:
45:b1:8b:bd:ec:d1:39:0a:a3:9f:5f:17:dd:00:4d:03:ec:96:
b3:a3:c4:13:aa:75:84:95:df:68:e9:5b:6e:bd:0f:11:fa:31:
ef:9f:6c:2e:23:97:47:6f:c7:16:4e:43:56:97:31:41:ee:f6:
7e:08:65:10:61:5b:e0:85:94:47:26:de:ce:58:4f:e8:e4:0b:
16:f3:77:b5:a3:d6:73:c5:ed:28:7c:82:63:ee:68:8f:c0:1e:
f3:42:2a:a3:03:2a:f8:e9:cd:e0:a9:01:f3:46:17:8d:a4:e3:
ab:2c:7d:8c:6f:ec:95:b7:22:9a:4d:d8:51:8d:d0:44:dc:20:
dc:52:3f:ab:5b:68:d2:cb:6b:92:a7:8e:17:88:e7:38:f3:4d:
f2:d6:78:ab:c0:0d:ed:c7:d9:16:86:49:43:68:9f:23:cc:b1:
8f:97:c5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:05 2025 by rpki-client