Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: ohkhfkLbXyvoMMA6X2EKrFmVJTJE9pdUaDDHcJN9NUM=
Subject key identifier: C2:7F:12:2B:28:B5:8C:37:6F:A0:93:84:5F:25:AA:E7:D7:2F:DD:6F
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019A4C69F30405080CE349944955608F0255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 174C
Signing time: Tue 04 Nov 2025 01:10:03 +0000
Manifest this update: Tue 04 Nov 2025 01:10:03 +0000
Manifest next update: Wed 05 Nov 2025 01:10:03 +0000
Files and hashes: 1: DiJ0fCyftot3hCrWwMuOrUek3kc.roa (hash: m0X/W4piYV3wJW/UAdsh98UiHEu6BRphSEq+YAi7Fy4=)
2: NXi6BiEUeLmLx0EnK11CHUUboHU.roa (hash: S/TsUoCXZkfTfOOKvUTF8Zz4Fuiobz4qRMGvcIUvZaQ=)
3: QhST770mU_k1AKU7JTmNX07pC-g.roa (hash: I0ps4EgOCuYlxmbadbpNOL5J1zbCIQQa4lBfcKjlcdI=)
4: UkCQdP3RrZAe6U2EZsGgmUYM6T4.roa (hash: v1eSSUjEmDBKjFNO3CwwmScWxLPiyY9bodIun8a3QK4=)
5: _BA7tm8EF_tbwBM_8Y5W_eHYfic.roa (hash: db4l1hxQOgB+o48kmvSgTfCUsHPyWt6jnE1LZ4z2tb8=)
6: gt3jbvK7kO8d_xTYIGYJD2cUiGE.roa (hash: 4UbuDpyze6Z3g+LOHqr6qp0gaoTqf6iKQVEolNVaZbk=)
7: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: 8Twi2hvjrJMKOWdCsRNpK74MYaUaBcoHrMZ3fE8UEyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:69:f3:04:05:08:0c:e3:49:94:49:55:60:8f:02:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Nov 4 01:10:03 2025 GMT
Not After : Nov 5 01:10:03 2025 GMT
Subject: CN=c27f122b28b58c376fa093845f25aae7d72fdd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:65:a9:19:81:5f:c8:f8:4c:b9:a8:2d:4a:
f6:c1:3f:81:e8:99:06:54:7f:83:52:1e:41:f8:be:
38:4a:6b:16:bb:d4:2b:1d:c1:20:5e:4a:64:35:4b:
7f:d7:eb:29:19:cb:b0:32:b1:44:84:85:95:74:62:
b5:39:f0:e2:9e:6a:98:4e:32:f1:d2:c5:93:59:4a:
49:2f:c8:d9:8f:54:73:2f:b5:f2:05:2a:62:9a:67:
ad:60:8d:fd:9b:f4:27:eb:c9:61:75:b2:33:59:32:
52:27:5a:39:49:f3:63:31:1c:19:a1:c9:1d:e8:b9:
d7:a6:60:1e:7c:b3:d8:26:0a:54:87:74:ea:e0:27:
25:bd:6f:32:71:46:96:ac:f5:c3:04:07:b3:7a:fe:
6b:0d:be:39:2f:e5:1a:d8:29:41:84:e5:19:00:01:
57:74:02:59:c9:44:9d:40:0f:1e:fa:1e:42:a7:e5:
25:6f:6c:f5:3b:fa:16:46:13:60:d3:60:2b:9a:e7:
8f:2f:26:a4:7c:4c:f8:63:ab:41:7c:ee:b0:ba:45:
3d:a3:df:e4:3b:d8:7b:fc:d7:7b:8e:5a:e1:3f:58:
f3:30:e0:56:ad:a5:e2:b2:5f:53:8f:6e:6f:6b:f1:
4d:0c:5b:9d:4f:8b:68:8b:96:5b:92:67:03:de:50:
68:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:12:2B:28:B5:8C:37:6F:A0:93:84:5F:25:AA:E7:D7:2F:DD:6F
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:aa:78:64:c9:4f:23:6d:d4:89:1b:5c:23:1d:b3:bc:34:be:
af:ca:98:62:63:23:c8:06:fe:58:9f:d4:8e:4e:be:91:0e:05:
dc:de:5f:8c:c9:06:e3:f2:70:ef:74:f8:48:ce:85:57:6c:ea:
54:5a:46:07:ae:40:cd:74:6d:5b:ca:3b:d2:f1:2e:6e:52:f7:
07:2b:55:fb:a9:e4:0e:ff:70:ab:ad:88:47:c1:f6:1f:81:80:
4e:59:b5:f1:0d:53:2d:bb:6b:0c:68:d0:81:cc:d5:b4:85:57:
80:14:dd:71:ac:71:0d:82:4d:2c:d4:f3:49:cf:29:08:19:5b:
a5:cd:24:16:59:6c:17:6d:62:8a:73:d5:20:cc:c7:0b:7a:90:
13:bc:bc:d5:5b:67:45:b8:43:c8:5c:f8:96:79:1d:f8:cc:e3:
e6:c9:47:a2:b2:45:f5:3d:94:1c:78:c7:31:1a:98:bb:77:29:
c6:a4:ba:0d:cd:55:f1:c8:c4:e5:4e:3c:c4:13:47:a7:66:46:
31:7e:f6:88:63:69:41:74:78:49:63:62:fa:01:a6:a9:2c:63:
8c:ba:f3:aa:6e:90:45:df:c9:96:a6:28:be:c3:65:80:6b:ba:
41:16:be:2f:99:a8:f4:b9:02:28:8f:1f:0a:9e:b7:d2:bd:e2:
d3:7b:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:15 2025 by rpki-client