Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: wU3DxDsAfX0DsFW5hkre45335DOHxpA+NmhOG5lWkW8=
Subject key identifier: E5:BC:57:5A:AC:DD:12:45:59:D1:08:2B:D8:C2:C4:10:9B:38:71:AB
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 019A70DC814FFF039F7B890FEA5A4ED27656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 03:01:30 +0000
Manifest this update: Tue 11 Nov 2025 03:01:30 +0000
Manifest next update: Wed 12 Nov 2025 03:01:30 +0000
Files and hashes: 1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=)
2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: r3TTCmj831wQI2Exv0D7zZdcuFVXYylKHm3vJVASYlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:81:4f:ff:03:9f:7b:89:0f:ea:5a:4e:d2:76:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Nov 11 03:01:30 2025 GMT
Not After : Nov 12 03:01:30 2025 GMT
Subject: CN=e5bc575aacdd124559d1082bd8c2c4109b3871ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:b9:8e:47:99:97:20:54:21:ce:92:07:89:
dc:cc:7e:1b:71:3a:54:c6:74:d7:84:6c:10:fc:5e:
e8:9e:66:c5:e6:04:fa:e1:2f:e3:a8:0a:1b:c1:eb:
e8:e7:a1:34:53:83:2b:c4:32:8f:db:34:38:2d:ed:
72:db:c1:47:45:bf:aa:31:ac:00:ef:1f:99:a5:7a:
ad:16:7f:78:00:13:c8:9f:77:c1:ac:23:b0:cf:18:
61:6b:59:ab:a7:c2:d4:ff:13:33:e1:38:e7:bb:1b:
53:a1:39:7d:fc:bb:b8:0a:59:20:cb:61:41:e2:54:
fc:5f:7e:3e:19:88:53:77:47:a8:08:29:14:c4:dd:
9f:0d:02:03:93:7f:5f:74:77:66:81:e7:b0:ff:61:
d3:de:2f:d5:56:86:f7:3c:16:a2:c1:6b:d7:7b:3f:
92:aa:19:66:f2:89:53:56:30:c5:d4:05:1f:f4:94:
eb:1c:3b:7f:6f:5c:83:96:81:fd:16:37:19:f2:c4:
50:da:e8:4f:cf:98:16:68:44:20:b6:db:0a:c1:3e:
7f:28:cb:b4:9f:48:93:72:2d:03:1e:93:4a:51:c0:
a7:33:6e:1c:ae:3c:58:15:2c:29:32:fe:a6:eb:24:
ab:06:5e:43:21:ff:1f:6e:1e:60:af:5a:58:76:bc:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BC:57:5A:AC:DD:12:45:59:D1:08:2B:D8:C2:C4:10:9B:38:71:AB
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b1:fe:ca:be:91:ce:a4:96:9c:a6:b7:7e:5f:48:fd:74:4e:
53:53:4e:a7:77:e5:97:af:84:2f:8c:ef:2a:71:eb:ef:b7:6c:
6c:04:26:4a:8a:eb:2e:f4:fb:b7:e7:cf:e3:5f:37:c6:bc:f3:
53:94:d1:00:f4:79:27:af:27:69:17:82:52:37:dd:11:16:f4:
b0:73:f6:ec:c5:ec:b1:ee:b6:1f:29:6e:25:c8:de:9d:e0:e1:
fc:f7:03:11:64:df:39:32:2a:7d:ad:6a:17:67:29:b4:75:58:
97:75:8a:1d:f5:63:37:98:b8:a2:64:1a:61:7a:e4:50:0b:e0:
a4:68:f0:22:a6:20:d0:9d:d1:07:c1:05:05:82:a5:b4:07:14:
55:fa:f5:c2:31:56:7e:58:08:fd:f9:5c:8e:3e:eb:46:63:54:
90:35:83:c7:39:ae:6a:6f:e0:1e:5c:cd:f1:37:27:bc:df:fd:
1c:b0:5e:57:a7:bf:6e:39:4c:f5:61:fc:7b:ab:bf:6d:59:57:
77:e5:af:f4:23:bd:86:ff:09:93:09:c2:ba:39:ce:37:b6:10:
8d:14:00:b1:be:d4:d2:32:0b:c6:9e:d9:44:59:34:59:6f:55:
d3:29:3b:64:81:3c:ff:a5:c2:e4:fe:56:f6:cb:21:3d:3f:2a:
4b:8e:6d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:40 2025 by rpki-client