Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: aDkqrvGjpTAvNBbcUtK2kzl/X0Iq8O9hfGURy6JJ7a8=
Subject key identifier: AC:82:C4:C9:61:5C:1A:69:1D:C6:49:29:71:B0:D3:56:47:31:20:F5
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019A71EE6B20085F36449EA80CBA3A36D7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (hash: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=)
2: kDuhU048DTixv805ND5N0u_g9CE.roa (hash: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: yLax2DHvOPt62dY3Sf4GTSbudKa8+VI3h0cNHiE5J9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6b:20:08:5f:36:44:9e:a8:0c:ba:3a:36:d7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=ac82c4c9615c1a691dc6492971b0d356473120f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:2a:e2:3b:00:d9:d7:61:07:57:dc:dd:7f:
68:90:7f:e3:01:1e:ce:65:3e:96:7b:9f:9a:17:fc:
65:9f:54:3d:e7:d5:eb:dc:cd:77:e7:ed:72:40:00:
31:84:c2:c4:87:58:52:1a:38:f6:fa:f2:7d:f9:1a:
df:70:15:3b:ee:12:42:80:4e:68:e5:96:23:4f:8a:
ba:8f:ae:88:62:4a:37:fe:38:ac:9b:42:4e:87:7b:
e5:fa:c2:fb:1b:79:ee:be:93:94:e0:2e:30:4e:d4:
8e:7d:61:8e:c2:0f:1c:74:ba:ba:d7:41:de:c0:60:
0b:29:4c:7d:c5:cb:61:a8:4f:5f:18:5f:32:79:64:
f6:60:0e:9e:85:a2:50:cf:4f:88:08:b1:6e:7e:5e:
20:de:a9:54:51:7f:7a:18:ed:0c:81:f0:8d:0e:93:
4d:b9:a5:74:55:b4:44:a0:dc:81:85:8d:89:6f:6e:
1d:18:a6:9f:05:d9:84:d3:82:0f:8c:3c:87:d7:4d:
64:f1:79:ad:0d:02:e0:29:d2:46:a0:85:fe:73:f0:
fb:cb:e0:6e:df:0c:57:78:29:62:ee:d3:f4:8a:7e:
e0:ae:ef:f5:a2:4d:aa:c8:14:40:b3:1e:87:6d:5e:
c3:af:5f:3d:ca:12:a2:f1:2c:d2:36:a9:6f:b4:6f:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:82:C4:C9:61:5C:1A:69:1D:C6:49:29:71:B0:D3:56:47:31:20:F5
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ab:78:50:6b:6b:62:9d:c3:2b:24:cd:b8:d4:22:af:ef:17:
0a:1d:ef:6e:a5:b5:5a:f6:ea:1a:bd:73:6d:cc:2a:78:c0:7f:
97:75:5e:73:8e:a4:b0:e0:35:2d:86:41:39:5a:53:1f:ae:cd:
63:a5:0a:2f:f1:90:69:a1:33:0c:26:ac:00:94:93:f5:d4:14:
35:56:29:31:3d:c7:29:4f:2b:8e:0e:f3:1a:cc:0e:50:6f:a8:
66:87:56:61:bc:a4:12:02:f9:a8:d5:52:5b:fd:b9:c9:7a:eb:
7f:44:d3:6c:03:d4:13:de:4e:e1:a6:bd:0e:e5:47:eb:bf:7a:
f3:9a:61:6e:70:65:a4:9b:22:21:bf:be:89:f5:f6:2a:58:cd:
11:f4:ce:64:4b:d8:d7:2e:33:6a:d7:69:20:55:d8:9b:ae:db:
e7:7f:37:23:9a:16:51:7e:7d:d3:40:88:4d:92:45:9c:2d:3b:
a2:36:d5:c0:49:b1:6b:a7:09:a1:45:d2:5e:ea:24:b2:a9:db:
d2:81:98:e3:0c:b5:e2:a4:cf:40:7e:04:b9:a1:96:19:87:38:
89:ed:42:79:15:7f:da:3e:e6:76:57:0b:31:7e:ce:75:88:19:
b0:38:6e:36:4a:d5:cb:ca:2a:ca:a3:bf:3c:10:22:2d:cc:d7:
01:ec:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:42 2025 by rpki-client