Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: Klw4pgVVwspLPcLdgiKd1iXNNN4wHoizHbPzZMRsnuM=
Subject key identifier: 79:70:9D:21:6C:1B:4D:D9:DA:B2:90:39:CF:94:3D:37:48:34:4D:D3
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 019A71EEACB7992F544355F8BC80DF6E5419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 15EF
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa (hash: bVKsgWkrvgH7jweX9NZzvJ58rjQAc648XkG11nW0Xqk=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: KR17ljjPmNF2Paxw7QEP7otTsq5fpZb/NjqwSFjUgC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ac:b7:99:2f:54:43:55:f8:bc:80:df:6e:54:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=79709d216c1b4dd9dab29039cf943d3748344dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:80:f4:4f:fe:2a:a9:00:c4:b9:5d:14:7f:
30:98:cf:eb:b7:d3:c2:c1:b7:09:7a:ea:5d:7f:b7:
c7:93:55:c1:ef:59:9e:9b:e8:19:d3:e9:d2:2a:db:
af:54:cd:0d:5f:10:e8:4e:0f:3f:41:ae:dd:36:d2:
a4:75:7d:5f:bb:72:69:b7:6c:65:36:05:7e:0f:99:
42:6a:09:7c:5b:97:70:d5:c1:82:02:69:37:b5:7d:
17:02:55:4f:bc:2a:13:e7:a6:77:3a:f8:42:e0:7e:
31:a4:1c:18:75:9d:81:dc:2e:0d:d4:40:a0:c0:fd:
b8:40:c4:97:0b:85:17:97:2d:c9:d2:d3:5d:96:c9:
19:e7:91:56:b0:7d:e6:10:56:3f:89:09:96:78:c6:
ed:3d:67:7a:81:6b:84:ec:53:df:e5:3b:13:dc:fd:
2d:b5:01:8f:73:ba:14:0f:fa:d6:90:cb:32:43:34:
3b:7f:6f:79:1d:8f:a6:f5:a3:93:4f:f2:7a:71:be:
ba:4d:a6:5e:14:3c:1e:de:ba:0c:53:76:9b:0f:9c:
cf:5f:16:e8:9d:9a:0c:5e:f6:f4:7d:3b:f0:73:a1:
7c:62:c9:16:b0:28:a1:4b:52:a4:ba:bc:c0:40:71:
65:2c:63:49:78:0d:e0:04:8a:08:34:ad:55:3a:fd:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:70:9D:21:6C:1B:4D:D9:DA:B2:90:39:CF:94:3D:37:48:34:4D:D3
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:21:5a:86:4d:b4:a7:5d:2a:f0:04:e6:01:26:92:d6:92:b8:
a3:a2:34:e4:26:ae:36:60:44:da:0f:b9:74:22:07:ba:ee:b2:
a3:da:7f:71:66:cd:f4:6a:bf:9a:12:27:69:86:3a:92:b1:9e:
d3:e4:51:80:78:8b:88:17:39:c0:0d:42:c0:89:ae:f1:7b:48:
23:5c:be:dd:7a:ba:ef:d0:1f:d2:84:2a:7a:48:13:16:95:25:
a7:a1:85:02:f0:6f:76:db:17:6b:36:e0:70:65:1b:50:08:b2:
07:24:f3:be:23:f9:b7:99:6a:5a:2a:79:ee:f4:fd:b1:c1:98:
35:d1:d4:29:c2:dc:63:8f:f3:8e:bc:6f:ef:86:87:58:91:ad:
0e:5b:05:8b:43:6e:31:f6:1e:5e:10:db:89:b2:9b:c2:8f:56:
96:9f:54:b0:cc:a3:38:68:13:3a:de:af:fb:ee:17:39:de:7a:
d4:72:48:a9:62:de:a5:02:16:85:f5:bd:40:bc:1b:e4:a4:7c:
a9:5c:7c:51:ca:83:c0:de:1e:ce:d6:53:c2:60:6c:1a:bf:43:
7a:7b:99:18:ed:33:86:a7:de:3c:ab:22:32:5b:5c:23:5d:a2:
b2:c7:9c:8b:d4:d8:9f:33:53:9e:76:70:4b:3c:20:dc:41:14:
30:9c:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:53 2025 by rpki-client