Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
File: k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json)
Hash identifier: /lBH6OuSDKfr1TVT3fC4MLvMyh7CPWY6h/HkcEGaPHo=
Subject key identifier: F3:E5:8D:61:72:5A:B6:A7:AA:68:0E:B5:53:EE:7A:4D:EB:96:5C:46
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial: 019A7225FA2F11751612122179AFFA49B901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
Manifest number: 14E5
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: FwydALoErM6-8yE8TcsoXe9fkyI.roa (hash: S5UsOTTZ1j9ByeHOH+4PHSRQbib1Nk4JqrfciZPb4Cc=)
2: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: 9Wk6w3h48e7skoPCsrml18V+OigYDgSdjCx1iE/soqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fa:2f:11:75:16:12:12:21:79:af:fa:49:b9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=f3e58d61725ab6a7aa680eb553ee7a4deb965c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:43:f0:59:5b:a1:2a:c2:22:43:b3:bd:69:
16:5c:d7:80:53:7e:29:46:a6:98:35:29:2c:f2:ef:
3b:f7:07:28:ab:f3:b2:38:d5:4e:ff:f6:32:1a:cf:
f2:88:4e:4b:e3:34:95:af:e9:0b:4a:36:23:95:68:
44:0c:ed:6d:8a:d5:5f:74:39:d4:c0:0c:da:b3:9b:
e3:49:24:49:2d:9d:87:4b:30:54:d6:a4:e9:0b:6a:
11:5f:3f:f7:da:a9:ec:ec:7d:e0:6a:b1:c6:a7:09:
23:ff:12:15:f3:37:6d:31:6f:f5:a9:53:9a:0f:e8:
1b:49:f3:04:42:d2:f1:00:e1:b9:7a:e5:a3:16:4e:
a9:89:55:51:ed:77:96:d0:ff:7d:19:34:4a:be:94:
c2:7c:49:c4:7d:91:89:12:64:a4:44:48:e3:e7:f1:
fe:5e:ef:70:0e:20:27:eb:7a:e3:e4:ef:f4:12:f3:
f6:a5:2e:60:59:55:49:b0:c7:6c:b8:85:44:ed:41:
70:d8:4d:9f:da:46:32:03:e8:44:99:ef:89:f3:6d:
60:aa:de:cb:4a:20:45:bc:06:ca:9f:50:8d:53:66:
b7:28:c5:52:72:42:c9:ea:14:7e:00:6a:7e:1a:ad:
08:7b:eb:ae:f3:9c:c5:81:de:20:35:9a:e3:35:ab:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E5:8D:61:72:5A:B6:A7:AA:68:0E:B5:53:EE:7A:4D:EB:96:5C:46
X509v3 Authority Key Identifier:
keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8c:c7:ad:6b:e1:09:ea:e1:7a:c9:35:de:68:90:7a:29:14:
63:ea:4a:ab:7d:0c:04:eb:ef:3f:54:25:9d:de:c0:fe:c2:a5:
78:a9:85:78:25:70:9f:7b:a4:4b:a0:92:13:3f:39:36:29:48:
cd:38:77:ce:3a:e4:d3:eb:e4:a9:c0:06:aa:c6:b3:f0:bb:aa:
3f:3d:ae:2c:cd:04:ed:43:22:27:60:55:17:7d:86:af:ce:61:
4a:d5:20:5d:76:ec:98:e7:05:80:6c:4e:48:2d:77:02:c0:65:
5b:d8:27:de:ab:57:29:c3:61:dc:f8:0d:b8:c4:f2:36:55:f7:
ee:a3:77:c1:be:58:12:77:ee:6c:6d:f0:72:63:a3:3a:cb:9f:
9e:63:ea:91:d4:ca:4a:7d:4b:25:d6:0c:8d:25:1f:0b:d6:05:
a8:9c:1f:23:26:37:6e:dd:a1:8d:87:24:cd:4e:83:4f:9d:95:
59:e3:e3:61:6d:11:05:18:89:af:e0:cc:22:ec:43:c5:dc:c1:
5f:6b:a8:15:96:f7:f3:7a:48:fa:77:64:eb:78:b5:0a:18:36:
b4:ba:e5:d8:cc:ba:e8:62:41:5f:d4:32:7b:11:43:6d:eb:ae:
6d:3f:5f:cf:28:cf:76:bf:b1:b4:a7:5a:de:a2:46:9a:ba:e0:
57:4f:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:04 2025 by rpki-client