Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: nBAzajHHumrmsv7BReaXInBtlbzHUfpkABkZaY+QtPE=
Subject key identifier: 9D:67:A9:7F:E3:E4:25:F9:69:F7:82:1E:AE:F4:FE:6F:A0:C4:45:70
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 019A296762885AC5C79F529D77B604675A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1701
Signing time: Tue 28 Oct 2025 06:00:32 +0000
Manifest this update: Tue 28 Oct 2025 06:00:32 +0000
Manifest next update: Wed 29 Oct 2025 06:00:32 +0000
Files and hashes: 1: Df7DTn2zEEq5-3nYcXjduzyZcpE.roa (hash: K9WfaPyx3uuwdfYwGbIQG2MYAnUVk/3ZAaJt4gKJZ0M=)
2: aYuOMRleQsCQtZg3X-RrYGmlGWU.roa (hash: MqwbamaP+A+XdjoWsCuBh8Vc+mp43ckOX8NYE92d8oY=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: VXKQCp1Q2B+3x8tYJeVDZke4oPaT73VR1swuO1O6eBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:62:88:5a:c5:c7:9f:52:9d:77:b6:04:67:5a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Oct 28 06:00:32 2025 GMT
Not After : Oct 29 06:00:32 2025 GMT
Subject: CN=9d67a97fe3e425f969f7821eaef4fe6fa0c44570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:df:7e:cb:9e:a8:60:1f:b3:7f:ad:65:4d:
14:39:62:5c:4e:60:81:ae:36:b3:70:ce:b6:d9:8f:
e7:99:8e:f2:ac:a4:27:c2:63:22:e8:84:2b:1c:14:
c6:83:47:18:17:ef:11:56:13:9b:7a:42:14:17:c4:
2f:5f:c6:21:3b:9c:1e:00:42:60:75:0e:29:9f:b6:
35:60:2d:a3:dd:e9:5c:2a:8d:73:5d:0f:89:fa:5b:
02:79:ee:3f:c5:17:43:ac:d2:0f:1a:b7:0b:53:16:
d2:91:36:0f:4b:9a:84:21:bc:43:50:ab:34:6c:61:
75:9d:68:00:46:77:ab:c4:ff:9b:6f:ff:50:79:14:
b6:07:a5:d9:27:8c:ab:14:0b:25:80:5a:e9:63:00:
7a:8b:53:31:04:8f:5d:fb:ac:31:6c:37:ab:9a:7e:
32:21:be:62:a0:29:fb:2e:67:85:dc:bf:61:ba:29:
f7:73:88:b1:13:18:69:16:c8:5c:b3:31:6a:a9:09:
aa:6e:26:f4:ae:0c:ab:07:ab:29:10:38:e5:f2:f2:
0f:fc:e9:37:67:e2:f0:95:e2:f3:e2:21:cd:53:72:
34:8e:5b:6a:9a:2f:e8:a7:51:56:b5:4f:1a:ae:e1:
a0:cd:8a:d1:33:47:33:42:34:16:27:a0:6d:93:b1:
ae:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:67:A9:7F:E3:E4:25:F9:69:F7:82:1E:AE:F4:FE:6F:A0:C4:45:70
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:dd:1a:75:14:c5:91:f1:9c:3f:24:26:ef:3c:02:56:d1:10:
80:62:9d:9b:d5:1a:4b:7f:e8:e3:f2:6b:e0:ee:6d:4b:a6:46:
aa:c2:3b:24:77:ca:16:22:f1:55:4a:c0:89:c7:b4:bd:45:24:
33:09:b7:99:b7:a0:e5:2c:15:80:dc:49:f8:fb:91:87:4e:ee:
40:76:ab:ab:d4:ab:3f:38:64:4f:34:91:65:b9:00:d7:fb:bc:
f8:7c:1e:b4:4c:4e:aa:e4:1f:3b:f2:e8:14:ca:65:b3:8a:b7:
9a:5f:43:3b:e9:a4:e1:b3:f1:cc:de:ad:75:32:12:25:d0:0a:
4d:59:be:94:d6:29:91:4e:20:f5:95:66:a0:ab:28:a5:d8:a7:
88:95:7f:50:05:84:57:0e:2a:5f:ad:0e:63:04:c0:f3:6f:55:
9d:77:48:5d:17:0d:29:35:ea:ef:79:3a:df:fe:05:59:b7:2b:
13:6a:4e:bf:22:c4:d1:2a:2a:88:56:68:ce:09:74:6d:a4:c7:
be:1d:40:52:be:bf:71:86:0e:f0:77:12:05:aa:65:a3:09:e8:
42:c9:2b:a1:3e:41:69:62:07:ab:38:4a:91:79:65:19:af:51:
77:22:f9:76:b9:bf:a7:13:fb:8a:7b:7b:5d:6d:ff:a2:a3:4b:
3e:b9:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:49:53 2025 by rpki-client