Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: KRsdoMncL4GlmWjH+aUfIoiXAQfFVMxUOpd/dEais0E=
Subject key identifier: D0:D3:2D:8E:B7:49:77:9E:76:82:DE:E8:74:AF:8E:3E:3E:E0:04:E4
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 019A2967208ADE74EC767B2B7C0E379E399D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 0213
Signing time: Tue 28 Oct 2025 06:00:15 +0000
Manifest this update: Tue 28 Oct 2025 06:00:15 +0000
Manifest next update: Wed 29 Oct 2025 06:00:15 +0000
Files and hashes: 1: S-8iAviLA5Jol3aOuoC8YtshVjI.roa (hash: nPTWtD2pyVs+rkGfz9T+B81uYYTcqsLuoc9G5yhStYs=)
2: TceaNjn9IF5oTmJkTl9-AAXNV44.roa (hash: qomOIj4ZRrJ4B8QNZahwO894PoNKgI7449eoXim1hno=)
3: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: 6sPpiPHSy1c9QPXfFNKhh3crehTJOLHgjQORzmDvRsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:20:8a:de:74:ec:76:7b:2b:7c:0e:37:9e:39:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Oct 28 06:00:15 2025 GMT
Not After : Oct 29 06:00:15 2025 GMT
Subject: CN=d0d32d8eb749779e7682dee874af8e3e3ee004e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:8f:02:7e:a3:0e:ba:d2:07:30:2e:cd:b4:
71:0d:98:a4:db:39:c1:9b:31:8b:4d:78:a9:f5:6d:
1f:79:6a:fe:a9:6b:ad:bf:9d:95:ef:7b:78:dc:7f:
d8:64:e4:6d:01:83:6d:e2:9b:d2:69:ee:9b:e3:b7:
61:71:07:21:b2:e0:9f:32:08:6b:46:67:5c:37:32:
47:f1:8a:ec:15:c0:44:88:e4:55:82:21:1e:c2:6c:
8c:d8:60:59:8e:1f:15:7c:7f:20:bd:ac:8f:40:2a:
ec:bf:f2:fe:aa:22:f9:7c:a0:59:30:5f:35:aa:a9:
f0:22:ee:56:35:ec:ca:bf:90:b3:be:f9:09:e8:75:
5b:9a:84:6d:62:c7:9d:c4:40:e1:8c:d2:6b:f7:93:
58:fd:48:06:ee:01:1b:25:0e:99:0e:b1:91:dc:8a:
ac:0b:4a:bc:02:3c:77:83:0a:50:3d:c7:a9:dd:56:
b0:71:2e:e0:f6:85:14:f5:89:5c:9e:ab:cc:aa:ee:
06:d6:8e:75:c6:21:cc:56:13:a0:28:a9:57:36:67:
37:b0:56:b8:c1:ca:5b:0c:72:21:c5:13:4d:7a:42:
8d:12:82:89:01:9e:cf:33:a6:6a:5c:ce:8e:98:b6:
d1:31:ba:f8:1a:af:4e:bc:43:13:e9:20:9c:27:45:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:2D:8E:B7:49:77:9E:76:82:DE:E8:74:AF:8E:3E:3E:E0:04:E4
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:60:30:84:b1:6b:74:06:cf:44:3c:39:29:83:f8:3d:e8:29:
0f:48:42:ab:b9:0a:c0:56:d4:9d:7e:32:f2:77:e5:a9:ed:f1:
c2:2e:e3:0e:03:e2:a9:dd:fa:27:4f:8e:bb:c3:75:05:cd:be:
ab:b4:1f:3b:7a:cc:5d:70:8d:d2:c9:14:60:1f:20:29:1d:67:
6c:1d:4c:50:79:fa:2f:94:da:88:a8:54:3f:94:bb:f6:2d:5f:
93:55:fa:a1:13:57:69:b3:2d:90:da:6a:87:c7:b2:9c:6d:72:
59:2f:ac:34:b0:f2:63:02:67:a9:77:50:bf:0c:e9:0f:c2:19:
3f:6e:4c:78:ad:46:d0:ed:20:c9:29:7c:12:c0:89:07:3e:1f:
94:6b:46:25:68:85:3f:7b:c2:c9:1a:60:02:71:0e:d6:89:11:
2d:fa:ed:96:41:1b:eb:43:bb:18:b3:e7:f4:64:7c:93:87:92:
9e:2d:5e:68:98:28:7e:40:2d:74:85:f6:75:90:9f:6a:3e:d2:
db:a8:41:b6:d0:cc:be:2d:0f:00:7b:f9:ab:47:7b:5a:33:66:
89:54:80:fc:3a:b4:1c:df:56:46:7b:9e:c4:5f:77:93:db:f0:
5a:2c:4a:9b:51:80:69:a3:a0:6c:51:ed:5f:6c:a4:6f:48:0a:
3a:8c:73:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:05:11 2025 by rpki-client