Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
File: RKqBMTnAax3PG_6DMrm4Aas-swI.mft (raw, json)
Hash identifier: 1aBcKfaep6LpruOef03pcQdUH1lav1lsr80pZrLedqw=
Subject key identifier: 8B:FF:4E:7C:93:7C:B4:2A:2D:67:B3:1A:EF:51:FE:7C:43:C7:B1:3E
Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
Certificate issuer: /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Certificate serial: 019A72CA1D8A3FF32938036B13051F43334D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
Manifest number: 0737
Signing time: Tue 11 Nov 2025 12:00:39 +0000
Manifest this update: Tue 11 Nov 2025 12:00:39 +0000
Manifest next update: Wed 12 Nov 2025 12:00:39 +0000
Files and hashes: 1: RKqBMTnAax3PG_6DMrm4Aas-swI.crl (hash: 3NBxQiqApZqu4kzb2+w22nTJosPNGHg655AKZ38W8oA=)
2: dulLD0ENjA9tfgPr9DrSQJxWn5k.roa (hash: ecAhh1+SnR4Xv8G0G+2S5KTuId8TsIACx8G94ng9hIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1d:8a:3f:f3:29:38:03:6b:13:05:1f:43:33:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Validity
Not Before: Nov 11 12:00:39 2025 GMT
Not After : Nov 12 12:00:39 2025 GMT
Subject: CN=8bff4e7c937cb42a2d67b31aef51fe7c43c7b13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:a8:a1:3e:e9:a4:70:71:75:e0:4a:6c:09:
32:e1:c3:71:24:45:42:ba:e9:3b:0d:9b:9d:5a:7c:
f0:ed:c4:2e:ce:ef:d7:9c:25:bf:2e:c0:0d:6a:0a:
32:cf:c5:77:11:54:af:e8:55:2b:d9:27:4d:22:9b:
9e:4e:06:e4:ac:52:31:55:7a:ad:46:09:c0:5a:7e:
d5:c3:89:3e:bd:2a:1c:ea:54:6f:71:97:8d:91:af:
85:3d:b0:db:2d:b9:6f:38:58:3c:13:d2:a9:ba:2b:
c5:16:e1:da:45:13:f6:2b:ba:f2:55:e3:16:e1:c1:
6d:3c:8d:87:72:18:6c:19:ea:6d:41:00:eb:cf:25:
17:9c:21:55:6c:71:4c:4b:17:89:71:22:4b:51:5c:
23:31:b5:eb:18:aa:94:b2:9c:1f:0c:81:b7:cb:fb:
bb:56:f8:8c:cb:e4:06:88:8a:39:66:c5:83:94:cf:
a8:51:6d:01:33:fc:90:3d:03:a7:5d:06:0d:51:2b:
c0:19:08:e6:e6:8f:83:35:0a:01:49:70:e6:4c:9c:
1a:21:90:24:f2:18:8d:ca:e4:1b:bb:57:7f:b5:6a:
02:f1:95:a5:da:a0:90:c2:3d:3b:f8:50:96:6b:b7:
a7:15:24:42:48:e1:83:10:5e:dc:e8:fb:57:68:21:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FF:4E:7C:93:7C:B4:2A:2D:67:B3:1A:EF:51:FE:7C:43:C7:B1:3E
X509v3 Authority Key Identifier:
keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5f:32:45:a6:70:4e:20:96:a3:f6:56:e9:d5:c5:04:a1:94:
62:94:7e:0d:a8:85:ff:88:58:23:a5:a0:66:6d:c5:3e:69:21:
09:ce:aa:25:4f:ed:68:2f:2c:30:30:52:8b:6a:ed:05:ee:e6:
ff:06:8e:11:c8:67:01:14:16:09:ef:0d:e5:87:9e:26:01:7a:
f8:ab:ac:0d:2b:66:da:57:c2:7b:61:2e:01:81:22:31:1c:2f:
91:72:7d:d5:6e:97:00:8f:d0:7d:aa:a5:ec:39:34:1b:2a:2a:
bb:e4:73:ef:5c:6a:ba:1f:10:c9:91:eb:21:36:53:6e:9e:be:
a9:f1:a5:b0:0c:21:a1:cb:18:8e:6c:48:0b:8e:b9:0a:e4:d4:
31:82:91:d9:1a:e4:95:0b:88:f2:d9:76:74:73:46:47:06:b6:
ed:94:fa:b4:dc:e1:6d:a6:97:d2:d9:ab:68:0a:6d:82:00:e8:
c3:57:e9:7a:0e:81:9c:1c:cf:be:d2:ef:93:d7:18:2a:42:68:
e9:27:1a:fc:92:6e:0f:e5:0f:a5:cc:7b:ee:ec:cc:ca:6e:61:
c0:95:59:55:7b:aa:13:18:1c:36:cb:8f:bf:51:18:57:3a:cd:
d1:d2:15:7b:dc:7d:15:8c:3c:e0:b1:0e:2b:ee:d1:b6:22:bc:
c0:00:65:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:37 2025 by rpki-client