Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: dZh/L9rwlng8kWKI6X4yr/UWEr8A/bu7H5iF5gbF3QA=
Subject key identifier: 58:97:38:C6:25:5E:8A:21:E7:46:71:B1:53:A8:03:5A:A3:02:2D:4E
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 019A72CAA741E7229BDA026F839F14696338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 12:01:14 +0000
Manifest this update: Tue 11 Nov 2025 12:01:14 +0000
Manifest next update: Wed 12 Nov 2025 12:01:14 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: VBhNOFu7cElJ/kzNSDjgT2VmvtZXhuJmPi5Du1e57zs=)
2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a7:41:e7:22:9b:da:02:6f:83:9f:14:69:63:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Nov 11 12:01:14 2025 GMT
Not After : Nov 12 12:01:14 2025 GMT
Subject: CN=589738c6255e8a21e74671b153a8035aa3022d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ba:99:b6:43:4c:dd:52:4b:ba:4a:e5:8b:39:
d2:e8:39:5b:7d:5b:fe:fd:43:5c:b9:f6:39:d4:2a:
00:2b:7a:d5:94:9b:6d:0b:fa:ee:06:c9:6f:18:54:
e4:2a:eb:a8:b4:76:aa:e5:6f:b9:7c:c8:52:c6:33:
38:06:28:65:2e:87:84:64:76:fa:5f:e6:ad:b5:32:
32:54:c4:9a:2e:10:03:45:e2:14:4a:9f:97:14:a3:
1c:d3:d7:ec:6a:8f:67:c3:b6:09:93:15:f3:67:c5:
75:ce:3c:95:64:e8:af:3f:04:79:4c:f3:e8:8e:1a:
dd:98:f6:0e:fb:32:9c:e3:18:61:d6:cf:3e:a7:3a:
64:58:7a:0b:83:1b:e1:a9:50:75:12:01:0a:f2:4c:
2f:4f:f2:63:f0:c2:63:72:22:80:62:ce:00:16:f3:
3d:77:aa:27:e5:7a:79:fd:97:c3:c1:28:3b:4f:e2:
30:08:b4:40:c8:c1:25:7c:20:aa:61:30:24:27:8b:
d5:5a:cf:5e:c0:4e:5f:73:2b:69:99:94:e1:d3:fc:
fc:41:f6:32:36:19:6f:de:fe:f8:cd:b0:3f:2f:96:
dc:f4:6a:2b:20:b7:bc:da:8f:0e:1c:f9:7f:25:cf:
29:63:80:09:f0:cc:c5:4b:00:43:c4:ac:66:11:16:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:97:38:C6:25:5E:8A:21:E7:46:71:B1:53:A8:03:5A:A3:02:2D:4E
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fe:68:49:4c:81:33:eb:aa:6e:c4:d5:4c:aa:39:1e:32:a7:
aa:71:a2:0d:19:ce:a7:68:fb:5d:d0:4f:17:be:7e:24:91:b0:
9f:0a:e3:ad:94:c3:79:b5:7c:00:95:d4:dd:c8:04:db:e9:1b:
e8:ed:15:8d:9f:b0:80:ce:de:0f:2d:be:7b:99:7e:cc:b1:0c:
b2:fd:2d:69:42:89:b1:f8:74:c2:22:4b:8b:f9:de:c1:4e:cd:
54:33:7b:93:be:4e:a8:f9:22:75:15:6d:19:1b:50:7b:90:3a:
c6:1f:10:93:01:1f:8a:a2:cb:80:6a:7f:98:83:ca:32:29:9d:
d1:f2:16:e5:9f:34:93:58:24:e2:1c:38:01:52:2c:0a:86:bf:
45:57:03:3a:f8:fc:62:25:66:6a:f0:87:1f:5c:d7:4e:16:e7:
9e:3a:f5:bd:89:a3:06:d5:20:b9:37:da:1f:07:5a:16:64:99:
81:75:64:11:bc:e9:8c:e6:c1:54:72:64:ad:95:95:7e:0a:47:
5e:92:81:d6:3a:9d:b7:dd:2e:5f:dd:55:25:6c:15:a7:41:3c:
fd:63:41:73:89:e5:be:a0:ef:5a:6f:5e:33:c3:c6:19:0f:60:
03:91:fc:51:8b:5f:99:ec:3a:af:81:5e:06:65:2a:fa:10:32:
1a:b5:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:25 2025 by rpki-client