Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
File: k_0m06C2k6ApvGLcud2pUZ5HdkA.mft (raw, json)
Hash identifier: ykkzrZF/+sWAg2+DR4I/e8MIH8k0bwxSXaIyAhZIp3Y=
Subject key identifier: 6D:C2:51:2A:92:E9:8D:C9:C0:2F:52:AA:8A:A5:68:2E:8D:1A:E3:18
Authority key identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
Certificate issuer: /CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Certificate serial: 019A72258BC57E71BEE931A357EAD0884C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
Manifest number: 0958
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: ArhXiZl_rJ6jBgX2PzZ8anI0Wyw.roa (hash: 9a5DYYLxOiKU0/Lz5D5+BYks2R+Do2ZNkpv4HeNltqY=)
2: k_0m06C2k6ApvGLcud2pUZ5HdkA.crl (hash: bBgiZupgRVoSgi68fcyzChD0E5wIQPc77JhIAl2dl7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8b:c5:7e:71:be:e9:31:a3:57:ea:d0:88:4c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=6dc2512a92e98dc9c02f52aa8aa5682e8d1ae318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:04:27:a8:21:a6:76:27:b8:6a:1a:63:a0:65:
21:45:4b:55:84:e9:b5:85:f8:d7:e2:51:79:48:e7:
56:7f:5d:44:ee:a9:89:10:c3:62:9e:0f:e9:71:f8:
25:e9:e7:88:00:74:3c:9f:d8:95:55:42:8e:56:d8:
f8:fd:78:5f:93:8f:90:b3:78:c9:ca:eb:52:c0:c6:
5e:23:7f:7a:6a:c7:d6:40:a7:c4:4e:b1:37:e3:d3:
d6:9e:db:ad:73:57:9a:fb:6a:0f:c9:8e:74:48:91:
b5:99:bb:33:dc:33:cc:84:4e:c4:1c:02:45:92:79:
c4:5b:38:19:76:a9:b4:6b:7e:7e:a5:f1:34:2f:57:
75:3e:bf:4c:95:7e:fa:a2:91:8c:12:55:b5:94:9d:
08:d3:95:43:ff:4e:d0:91:f4:cc:7d:a2:05:28:92:
cc:f6:2d:06:5f:36:36:f1:c5:c7:bc:ad:28:3f:83:
03:ff:22:58:84:be:fd:c6:fc:97:28:31:b4:13:03:
ab:75:b3:de:18:59:41:80:4b:93:5b:e7:e3:09:23:
5c:df:23:09:bc:cf:64:0a:40:ff:af:80:e1:19:51:
f7:6c:44:78:1f:1d:74:df:ad:73:e8:9e:48:1d:e1:
1c:dd:e4:c1:0f:ba:c7:a3:f2:4d:a1:7e:00:d5:b6:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C2:51:2A:92:E9:8D:C9:C0:2F:52:AA:8A:A5:68:2E:8D:1A:E3:18
X509v3 Authority Key Identifier:
keyid:93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:80:b0:96:01:3d:e4:62:f0:59:06:a0:c1:d1:39:87:0e:65:
36:39:d8:d0:9f:77:b3:bc:51:ec:b7:f4:f9:f4:95:7c:45:de:
5f:6c:bf:6b:f8:24:b4:9b:30:17:18:cd:c7:23:68:74:01:96:
3a:c7:9d:9a:42:f4:84:61:04:bf:52:d9:39:3f:d8:10:8f:d7:
ec:f7:c8:cb:34:93:03:12:47:e4:67:6e:47:73:65:47:d4:96:
05:90:6a:9a:3a:c3:8e:2b:ac:96:9c:ac:5f:fc:a1:00:84:a5:
90:eb:30:b5:2a:07:8f:e6:fd:66:58:45:7e:0c:c1:a7:77:92:
02:e4:2c:16:0a:44:dd:ec:99:f2:6b:cb:96:b8:33:89:1b:54:
b8:05:76:59:f1:50:49:81:8a:68:51:17:b5:2a:9c:37:38:31:
39:87:a7:d7:8b:40:1b:d6:85:4f:aa:d1:37:7f:f4:78:bd:83:
f7:9a:d4:24:ea:29:58:9b:0a:69:2a:a0:bc:c9:01:21:16:ec:
ad:b7:01:f8:00:e4:89:e0:1e:ed:65:80:50:f5:13:b0:59:92:
3e:ef:1c:64:40:c7:b3:b1:b7:07:9a:d1:6a:39:21:6c:4c:9e:
9d:d8:31:0c:91:17:b2:05:b7:2b:5f:03:4e:95:e2:e8:d8:3e:
0f:f0:e4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:59 2025 by rpki-client