Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
File: k6lZwl27w2fKqJgl6L_1tLTxHJs.mft (raw, json)
Hash identifier: rMwxdzYP6Pcbd9vvBQ6lkg1Zfi6GNHHi/iblrgDNRBU=
Subject key identifier: 62:D1:41:40:6F:67:F8:75:4B:38:72:14:28:35:BD:BE:14:46:33:6E
Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
Certificate issuer: /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Certificate serial: 019A7112B9F7877752286669A7FABC231653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
Manifest number: 0984
Signing time: Tue 11 Nov 2025 04:00:43 +0000
Manifest this update: Tue 11 Nov 2025 04:00:43 +0000
Manifest next update: Wed 12 Nov 2025 04:00:43 +0000
Files and hashes: 1: eUO5ySVwcP9_G0v6iAlEgACbaIE.roa (hash: iPv7iNvhmBCQA31XIl1TxzIvDTe0R7e3zG8RhS2DPPs=)
2: k6lZwl27w2fKqJgl6L_1tLTxHJs.crl (hash: dWkm2N5lVmuXiUJCz69TzsY4C24Zc+xFoC2JQ9aFzBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b9:f7:87:77:52:28:66:69:a7:fa:bc:23:16:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Validity
Not Before: Nov 11 04:00:43 2025 GMT
Not After : Nov 12 04:00:43 2025 GMT
Subject: CN=62d141406f67f8754b3872142835bdbe1446336e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:65:e3:e0:71:2d:c6:7e:87:63:74:b8:30:
0a:8e:fa:5e:86:3e:dc:be:f8:72:13:c3:fd:47:73:
04:17:94:7c:8f:20:c5:40:fe:76:f6:f0:f2:fe:3e:
6f:f2:f8:01:c7:ad:2e:35:12:ec:5f:1f:48:fa:73:
82:40:52:40:d5:2c:c7:d4:0f:60:e0:1f:43:e6:8d:
b6:2e:47:5e:de:bb:f6:c8:b9:1a:52:e5:51:d0:63:
bc:b6:0a:ce:59:01:28:9a:ab:84:10:e5:69:6c:ff:
d0:f7:d0:f8:a5:f1:80:23:7d:51:6f:21:c7:9b:04:
55:6f:0f:bc:5e:3b:42:bf:27:74:2a:cc:d8:8e:32:
2c:e3:20:7e:33:3f:73:35:c8:4f:a2:46:5e:12:0d:
d2:2e:17:ae:56:cd:16:8b:e2:62:1d:48:af:40:77:
8a:4f:bd:4f:60:21:e0:39:cc:3e:e2:d8:77:6f:48:
3a:b8:3a:78:ab:4b:0d:ca:4c:90:4e:8e:ea:04:e6:
a9:80:81:7a:e5:07:6d:d1:76:56:5c:f6:f5:25:0e:
3d:44:96:d1:bd:ca:6b:aa:81:0a:6e:36:9a:d6:37:
1b:0d:52:cb:7e:b0:95:bd:ec:04:78:8f:09:69:fe:
26:f4:1f:e6:ac:85:f4:4d:be:2d:c0:0d:dd:5d:fc:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D1:41:40:6F:67:F8:75:4B:38:72:14:28:35:BD:BE:14:46:33:6E
X509v3 Authority Key Identifier:
keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:07:b3:ec:dc:3f:5d:ba:40:81:d5:32:e7:aa:da:d8:5b:45:
c2:07:2c:7a:fb:81:cc:2d:97:eb:ef:23:aa:32:0d:78:d5:48:
16:80:3f:3b:b7:81:ca:75:2f:38:f0:ae:db:62:13:0d:9f:15:
2c:d6:01:05:02:aa:83:6c:7c:c9:3c:16:94:ab:f7:01:93:5a:
03:54:80:fa:73:5c:fa:98:d6:1f:56:bf:67:2e:5d:ed:3f:2c:
e8:0f:0d:96:ae:79:5e:c3:e7:6e:f2:c0:d5:79:73:3c:d5:a9:
00:b1:c3:c8:b4:13:10:cf:a6:ec:dc:f3:f6:e0:7e:be:29:cb:
ab:bb:26:21:f0:f4:9a:57:ef:9d:73:6e:ce:e0:4e:87:59:49:
34:80:8c:7c:87:90:5a:81:fb:e6:43:ac:c5:af:e0:83:b9:c6:
51:0a:d6:ca:72:51:9b:7d:1a:6b:a3:6d:f2:fd:ff:7e:ab:06:
e1:7b:80:53:78:87:f0:c0:74:ab:38:43:05:a1:12:d6:82:fa:
b9:45:d6:87:5d:b6:e3:7b:ce:00:18:5d:19:5e:f7:14:d5:cc:
b2:8e:da:e8:04:37:8c:58:dd:47:dc:e6:7b:ad:1e:d9:72:6c:
4f:fc:0f:ab:7b:1a:6f:2e:8b:12:0d:82:6e:3e:27:35:69:e7:
51:e1:66:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:45 2025 by rpki-client