Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File: k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier: kQDXXHc/sLbnwOrwqYMGiVdMo6ESE3YWrcHkHkTlJ0Q=
Subject key identifier: C0:73:7E:B1:5D:0E:40:D1:D5:A7:5C:47:E8:CF:E0:E6:1D:76:7D:9A
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer: /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial: 019A7293593515A7AE7526FD2543736109FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:50 +0000
Manifest this update: Tue 11 Nov 2025 11:00:50 +0000
Manifest next update: Wed 12 Nov 2025 11:00:50 +0000
Files and hashes: 1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: ZLL3hl0mPTs1NoYF6nQRZG7UTbMiHBrl7aY3/BUjD/g=)
2: yTJkU5c9_WyRyTlvE419PqU0IjM.roa (hash: ut55SdaCNgLg+kxFsJJtdQQgrsFKbAJo6+C/kBalZ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:59:35:15:a7:ae:75:26:fd:25:43:73:61:09:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Validity
Not Before: Nov 11 11:00:50 2025 GMT
Not After : Nov 12 11:00:50 2025 GMT
Subject: CN=c0737eb15d0e40d1d5a75c47e8cfe0e61d767d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:d4:6a:a1:bb:bf:84:0b:a3:b3:62:ba:09:
4a:b1:76:80:3f:2e:34:72:62:93:86:ff:b0:8a:d5:
e8:db:02:2b:60:ca:8e:e2:0c:46:5f:30:60:16:cb:
64:97:62:6e:f0:f0:17:8c:25:25:14:a5:d2:60:7c:
25:2c:91:3f:d6:79:36:73:8a:87:94:71:e8:b7:84:
36:a8:70:1b:28:a5:3f:50:4b:88:ba:87:3b:30:c6:
85:4e:7d:f2:34:2d:14:cd:a5:4a:b0:8a:c0:9f:f1:
3c:38:3d:7c:70:1d:be:b4:c6:cc:78:c7:9a:f9:e1:
2c:7c:92:ed:57:dc:d0:c0:f6:06:e0:ad:3d:a9:36:
0a:a1:bb:7d:79:4f:8d:5f:3e:5e:b9:8a:85:ec:93:
c1:0d:17:ee:5e:27:11:00:dc:ee:e4:a8:04:29:16:
15:02:47:ff:13:f6:2d:82:55:b1:81:52:83:7d:4b:
e7:40:8d:fb:fe:d7:56:97:a3:20:d9:45:dc:b6:51:
59:af:6d:03:3d:63:9e:eb:2e:f1:f7:3e:31:3e:cf:
b2:52:db:71:17:d0:8d:64:15:06:e0:c3:b4:41:32:
2c:3b:14:21:fb:63:bb:c9:1b:f0:e6:16:52:dc:a5:
ca:e8:4b:a3:57:0f:2f:f3:76:27:a4:48:1c:28:28:
6c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:73:7E:B1:5D:0E:40:D1:D5:A7:5C:47:E8:CF:E0:E6:1D:76:7D:9A
X509v3 Authority Key Identifier:
keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ab:11:e2:85:ca:c9:26:1d:17:80:40:b8:35:aa:90:d4:a6:
4f:26:f4:09:9a:98:6d:71:a9:e7:27:92:b8:ef:1f:4c:fe:96:
32:b8:14:72:18:0c:f9:b6:52:8c:a1:b0:a9:c5:b2:d0:cd:09:
0e:ed:9b:35:67:c6:a5:73:66:f9:1a:b9:d1:af:88:cd:a6:82:
dc:70:02:64:b9:26:31:c6:3d:60:2f:d6:c0:e8:46:05:bd:cf:
35:6d:3d:70:76:5d:dd:0d:7b:1d:d0:66:3a:7c:33:71:d0:af:
b3:48:32:d8:82:95:5d:01:83:3e:d6:12:5f:4c:07:c7:67:27:
bd:38:17:95:cf:07:40:b9:3c:56:a3:00:7f:1c:3b:41:90:fc:
e4:65:46:3a:5b:e4:10:d4:5d:45:a9:7a:69:31:92:b1:88:b3:
0f:ab:62:73:50:3d:b3:27:84:51:03:f3:f5:2d:a5:33:6a:66:
79:6c:66:58:de:5c:d1:df:05:ff:d6:d4:45:db:e7:5d:e1:4c:
89:4e:15:2d:7a:f3:13:73:88:40:71:01:8c:5c:03:f3:eb:70:
eb:3b:95:3c:f4:af:e8:04:f7:f6:c3:54:f8:07:ff:97:38:62:
6e:84:86:4d:56:bf:2e:02:8d:cc:0c:02:09:70:2a:9a:a0:17:
9f:c7:bc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:26 2025 by rpki-client