Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json)
Hash identifier: mnAakNYAYJfy15SI57Ox9WsPliblrSOdgzGQFhFY1UQ=
Subject key identifier: 1B:C5:AA:5D:E1:65:F3:0E:36:97:40:1A:7E:2C:44:27:CD:3C:40:0F
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 019A71B902883869DF9258879B801B1EDB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: 6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa (hash: t2pawZUDG8w+/7kKSZlwszt2WDbCUFiInD9rYvACGhw=)
2: AKC2vs0Xv6myd7svsj2_92wUeLg.roa (hash: YNCrFS5xfYguBMhlJjrv+olyy/Sk3uL/9WxwO9r8P9Y=)
3: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: T8b4QgE8L8XpWyzpjE88L5KHPPYLeRP1kLb3l96IgXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:02:88:38:69:df:92:58:87:9b:80:1b:1e:db:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=1bc5aa5de165f30e3697401a7e2c4427cd3c400f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:79:bc:51:74:e1:c1:40:4e:73:10:d9:e0:
b4:43:81:34:21:5a:14:6a:e7:82:d5:eb:7f:21:30:
87:bd:65:8f:d2:34:30:81:1f:a8:ab:06:bf:93:e8:
1c:a7:c1:6f:d0:1e:2a:53:cb:29:4e:c3:6d:a7:0e:
5f:cd:0f:28:14:84:a4:04:29:1d:06:0d:bd:3c:ee:
61:07:bd:7d:d5:93:3e:01:9b:ec:2d:ee:c8:0f:c8:
32:d5:71:ce:83:ef:ea:a0:c2:06:9c:fb:63:0b:a9:
98:c3:ea:ca:d6:7d:62:3c:a9:70:6e:76:6c:5d:33:
f0:2b:be:87:29:32:af:12:c1:ce:c3:82:f7:71:a7:
f8:90:ac:e5:fc:41:06:37:4b:8e:47:eb:60:4c:d0:
b3:70:07:a3:87:70:ea:15:f5:06:52:7b:4e:d3:7e:
f9:fb:52:8e:40:dd:40:56:d6:86:ea:2c:d2:58:ad:
19:13:9f:fc:55:6e:d8:51:63:0a:79:ab:d3:5b:60:
6b:d6:4c:f8:87:b8:00:e3:f8:f3:9b:2b:6b:67:ce:
51:46:96:bd:08:76:50:8f:7b:aa:c3:8b:c1:f5:09:
a3:d7:b7:9a:fd:84:14:c4:d3:e5:05:e6:d2:c8:b3:
b8:75:88:ac:96:19:e7:e6:2f:b2:fc:36:12:9a:ee:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C5:AA:5D:E1:65:F3:0E:36:97:40:1A:7E:2C:44:27:CD:3C:40:0F
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c1:ca:a6:f3:3d:0c:44:b8:6d:72:55:70:db:41:39:8e:2d:
3c:0e:0c:97:88:30:43:d0:5f:5a:6a:63:7e:29:e1:96:98:54:
e9:ff:c1:49:44:55:fa:f5:2b:22:5b:ce:20:bb:da:51:46:77:
79:a2:58:a2:ed:cb:7c:27:20:bf:52:1e:c1:5c:98:b5:99:7d:
12:27:87:e8:1b:24:cf:a6:ae:a3:b8:4c:a0:a0:e9:8e:57:99:
c4:de:a2:af:9b:a8:07:39:e4:68:45:f1:19:b7:23:c0:07:c4:
4f:ce:2c:f1:76:6d:a3:d7:a4:b3:86:6a:7c:72:54:40:d9:3a:
da:03:29:dc:dd:5c:7b:5b:27:cf:b9:47:28:a7:33:96:f7:f6:
9d:76:1b:82:78:b2:dd:ad:f8:18:55:cc:01:cc:95:40:ea:f2:
f2:55:e4:d1:30:b3:31:08:ca:56:4b:c1:ec:f6:9e:25:f2:b3:
41:b2:66:29:bb:0d:74:4e:d7:17:4c:12:71:c9:7d:f8:f9:7c:
14:d0:fa:33:f4:6b:3e:31:be:e6:be:94:a2:47:70:09:c4:38:
c0:b2:5e:0c:d5:87:db:57:88:5b:5b:25:69:1d:17:49:81:c4:
09:72:cf:32:b7:3f:0c:ed:a4:c6:4a:1a:43:89:a0:95:2f:6e:
d7:ae:f9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:22 2025 by rpki-client