Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: R7Hf7UqblCE8JylKsD/i4yMAtm+58N4+XSGoTVrRtJg=
Subject key identifier: 64:6B:A7:52:B5:B4:A5:19:BA:E6:47:EF:99:02:88:AB:7D:78:DB:44
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 019A7149EFB57285DD7877AC7D567F0DB9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 0435
Signing time: Tue 11 Nov 2025 05:01:02 +0000
Manifest this update: Tue 11 Nov 2025 05:01:02 +0000
Manifest next update: Wed 12 Nov 2025 05:01:02 +0000
Files and hashes: 1: 4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (hash: ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=)
2: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: VUgV8mxfx5VpCdZsS8fQMZb6euhIcJIcm1vB8lMoDwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ef:b5:72:85:dd:78:77:ac:7d:56:7f:0d:b9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: Nov 11 05:01:02 2025 GMT
Not After : Nov 12 05:01:02 2025 GMT
Subject: CN=646ba752b5b4a519bae647ef990288ab7d78db44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:8e:c8:1e:ad:e8:83:7d:fa:bd:96:02:51:
6f:9a:aa:48:7b:ab:15:55:f3:6a:5a:fa:a0:0e:e3:
64:ca:3c:90:87:34:14:90:6a:a5:50:ef:39:aa:79:
74:46:b9:a1:4c:a4:cb:ad:88:07:45:9d:9f:63:c2:
6b:fb:db:ca:78:44:3a:10:81:ba:f6:ba:c2:73:72:
a0:18:9c:5e:ed:2d:e6:f4:de:b2:6e:c3:43:4f:9d:
52:9e:f0:2b:f2:16:c1:6c:78:ef:eb:95:a3:e7:74:
b6:fc:bb:a9:e9:ea:66:3c:87:c0:1a:32:f5:4c:d6:
74:49:07:ec:28:4c:a8:26:ea:74:15:d8:4a:af:6f:
c4:98:c3:f6:45:38:f4:08:a6:47:62:da:db:aa:a9:
ae:d6:8f:dc:cb:b1:9a:b3:5b:0d:d6:9f:64:be:2e:
fb:4a:c6:1b:ee:3d:e8:eb:d7:d5:0e:85:7c:08:f0:
50:0e:c7:f5:6d:be:01:f6:27:82:e1:9e:eb:46:ca:
3b:29:97:de:3b:90:39:14:97:80:b7:b4:53:68:bf:
9e:b0:3c:24:bd:44:8b:78:eb:6c:cc:0f:b5:b0:dc:
e7:24:7c:a7:b9:b3:5d:92:90:73:32:9a:a7:ab:1e:
aa:d2:f9:2f:77:21:cf:be:f2:06:ae:8f:97:d4:cd:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6B:A7:52:B5:B4:A5:19:BA:E6:47:EF:99:02:88:AB:7D:78:DB:44
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:22:45:c1:61:f0:6e:86:8b:71:bf:63:3f:e6:47:2d:74:47:
6f:a4:31:de:88:b4:d3:e2:77:7e:ba:47:ec:fb:83:f9:ae:2f:
cf:a1:45:14:a5:f6:5b:5c:0c:84:5b:93:0d:b6:d3:f3:be:44:
e2:fd:21:42:4e:fe:55:cd:14:c0:44:79:66:d3:8f:da:27:f0:
41:9c:36:e8:e0:37:87:e8:69:68:85:9b:76:0f:69:60:d1:78:
53:54:52:a7:0c:8f:56:a1:2b:d9:b5:e5:ef:79:b6:d9:dd:84:
97:d8:52:44:d1:6a:e8:75:f4:17:2a:c9:b3:9d:da:0b:25:b4:
b5:cc:68:7e:1c:3a:1d:a6:ac:4c:68:10:e9:e6:d1:a6:ba:27:
2a:ff:8b:23:93:bd:6f:b8:86:79:1b:57:01:58:85:b2:76:6d:
29:88:5d:08:92:a3:c3:00:64:ae:61:63:86:b6:6b:78:77:cd:
fd:41:19:ea:de:b8:01:9e:b4:8d:56:9a:36:41:2b:90:a0:84:
e9:ae:bd:3c:d1:49:ef:45:c6:8e:49:81:8a:d9:94:3e:fe:b1:
8f:cd:01:a7:fe:16:77:90:41:f7:bd:d6:48:3e:da:83:46:86:
52:b7:a4:46:0f:07:05:cc:01:c5:ea:f4:45:9e:c0:74:8e:bb:
b2:4b:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:47 2025 by rpki-client