Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File: k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier: y3LrVyCJS6bbzM6qmIhSIH+JUSok/bUKod0Mxd27LxE=
Subject key identifier: 29:5D:1E:E8:20:70:94:36:87:8E:55:E1:39:F7:32:3D:82:D5:76:8B
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer: /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial: 019A71EEA0BF26D9FE776DA489EAF1CDC82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number: 0657
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: 3mhUHTDwirkASDro6wKMo1llreY.roa (hash: QT1aX+pCloLwOlM8acjw8SNDGfs+bhgEOJUGdyQm/5A=)
2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: jm/cbw5cG0OqjB8WHsHCeeTf+iIa9XzofruD/WgtCBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a0:bf:26:d9:fe:77:6d:a4:89:ea:f1:cd:c8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=295d1ee820709436878e55e139f7323d82d5768b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:cc:62:e7:a7:b0:1c:5c:a2:d3:c8:d3:9c:
c2:b3:cd:f9:f3:88:af:54:58:39:8f:93:6c:0b:e3:
6c:6c:e6:5a:53:01:52:a0:89:58:d7:94:80:19:f8:
03:16:d5:22:9e:08:c8:88:a8:7a:8c:7d:88:61:20:
c3:c0:d9:de:20:bb:8a:d5:62:ba:66:ce:bc:78:71:
c6:78:24:ce:50:78:3a:30:f6:3c:03:f7:58:81:60:
78:62:cf:4b:e7:fe:83:8d:ff:e9:d8:bf:1e:54:fc:
be:fa:c6:e4:1e:ed:c4:a6:6e:db:a8:f5:3c:48:18:
39:ae:71:8f:b0:a0:a1:1e:0f:2a:b2:92:31:23:8a:
8b:af:64:e9:ec:1a:d4:7d:c3:f3:7f:f6:01:ba:72:
7f:be:29:70:cd:32:db:a0:b1:7b:a3:93:9a:7b:03:
e7:ac:bc:d0:18:e3:d6:92:60:96:1f:c9:22:65:97:
b2:db:4c:c0:7b:43:e2:85:8d:17:3a:60:7e:aa:ec:
a9:33:ac:dc:4c:b9:5f:f4:bc:26:78:da:17:59:04:
f8:8e:6a:3f:ad:64:42:4c:f5:45:42:1d:33:0f:5d:
14:1c:ef:b8:b1:c1:ae:2f:b9:63:84:53:a1:d6:e9:
68:9a:ac:10:d0:03:0e:f4:b0:d7:16:72:f3:96:89:
cd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5D:1E:E8:20:70:94:36:87:8E:55:E1:39:F7:32:3D:82:D5:76:8B
X509v3 Authority Key Identifier:
keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:65:28:fa:08:02:15:b5:4e:22:51:75:f1:3e:a0:3e:c3:aa:
d1:23:b0:bb:41:f6:ef:8a:19:69:04:d9:7b:08:5d:18:15:a8:
5a:e1:c2:52:5b:4d:db:93:14:3f:38:64:df:be:97:99:59:35:
b7:e3:c2:fd:40:4c:5d:21:92:e4:bc:6a:fe:ba:00:61:19:4f:
a6:51:58:0e:57:e5:ac:97:8d:0c:ae:84:c4:cc:a9:95:7b:dd:
75:c6:64:f4:c4:7f:f7:91:07:e9:ad:05:8f:84:b5:24:75:45:
3f:41:b9:ac:0f:31:77:cd:9e:3b:45:8b:36:ae:f4:50:10:28:
09:4e:bd:8a:7c:87:e4:a7:40:ee:ee:58:b0:1e:a5:c6:f3:d4:
93:22:84:e2:83:4f:3e:dd:0a:16:ac:3c:aa:6d:4d:9a:b9:55:
28:15:39:8f:2f:43:1d:5c:96:b1:1a:1e:0e:de:fb:84:a1:f7:
04:e7:5c:0f:5d:f4:c6:71:d9:c7:af:da:10:33:39:8c:0f:3f:
30:e5:a4:df:f2:57:09:90:59:ab:7a:62:3d:65:a3:fd:27:82:
35:74:5a:6c:08:c2:5e:ec:24:ca:95:b9:a7:bb:ed:e1:bd:89:
e4:bf:bb:f3:07:f1:e8:a2:36:b4:bd:34:78:3f:0e:6d:b6:9c:
33:9a:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:33 2025 by rpki-client