Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
File: kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json)
Hash identifier: xmlrYB10nkohCpeusMU6UHzDcncUP1v+c/Jh1uajcbM=
Subject key identifier: 1E:2B:5D:9A:9E:68:B3:3E:06:55:C5:D8:14:CE:00:80:8D:43:39:EA
Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
Certificate issuer: /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Certificate serial: 019A714A1EB660E5F408AA4D39539B487754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
Manifest number: 0771
Signing time: Tue 11 Nov 2025 05:01:14 +0000
Manifest this update: Tue 11 Nov 2025 05:01:14 +0000
Manifest next update: Wed 12 Nov 2025 05:01:14 +0000
Files and hashes: 1: dqOSF9Ies6urS5k4Ct3cQtw5VN8.roa (hash: J3BiGkZdoL6h6rfESwdaItaaKVovQQqfeD9nGDkL6og=)
2: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: hznZZgIiv8432oi0TOahxw3fhd1hi2pWg+QwHcAw/Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:1e:b6:60:e5:f4:08:aa:4d:39:53:9b:48:77:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Validity
Not Before: Nov 11 05:01:14 2025 GMT
Not After : Nov 12 05:01:14 2025 GMT
Subject: CN=1e2b5d9a9e68b33e0655c5d814ce00808d4339ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:ef:30:95:6e:f5:eb:66:3a:5c:ed:71:ba:
cb:84:71:af:ec:9e:7a:80:77:5c:7a:52:a5:cb:d0:
e9:8a:9b:e1:69:6d:e4:74:9a:d0:71:91:a4:43:bd:
bb:02:9c:f4:0d:d1:42:cc:a0:b2:0b:0a:9b:fe:dd:
2f:19:8d:77:7c:fc:61:a3:35:f4:2f:f7:a0:91:df:
aa:1a:32:4b:74:cb:ad:9b:80:ca:f4:0a:62:f7:ed:
7f:6a:3c:6c:21:5f:be:10:c7:13:b0:10:fa:be:84:
2a:f4:10:53:5f:00:4e:c4:23:54:ba:71:36:4f:99:
71:32:dd:bc:5d:2e:99:68:b1:82:3b:09:cb:be:0c:
6e:af:d2:0d:98:af:f1:d2:8b:f2:5e:f4:c0:f9:f8:
84:5e:c7:af:48:a6:a2:24:f7:2a:48:6b:c2:85:f9:
5e:3a:cb:fc:62:b5:58:d6:78:ac:51:71:d5:cc:e0:
67:f5:6b:7e:6f:68:9d:91:60:37:2c:67:a5:a7:72:
6e:2a:b4:b5:97:9a:d1:e5:a8:b5:c3:e5:bd:df:ef:
b0:3d:be:3e:93:33:9e:5d:c2:e8:c9:b6:6f:1d:a9:
53:85:ab:cc:b9:14:c9:a9:7e:7c:a3:03:d1:6a:63:
52:6e:c9:c3:e8:94:da:c1:dc:8d:40:95:24:29:e1:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2B:5D:9A:9E:68:B3:3E:06:55:C5:D8:14:CE:00:80:8D:43:39:EA
X509v3 Authority Key Identifier:
keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:97:1e:6c:2e:90:a0:02:8d:26:f0:12:4b:b7:5e:48:a0:d0:
a6:38:75:6b:b8:45:7d:33:f1:27:42:bf:36:8c:1c:16:90:92:
3c:86:b9:aa:da:2d:3e:3a:69:2b:10:ec:3f:32:bf:ef:83:77:
f3:b0:f7:6c:67:44:9c:40:d2:82:2f:22:f6:cf:d5:77:a7:f8:
c9:e2:7d:5b:23:a3:e3:ce:5a:f9:82:8b:94:d1:69:b1:eb:05:
c2:73:07:e9:6a:4b:09:c7:fa:80:b3:40:34:27:f1:86:71:f2:
c8:7f:ce:b0:f3:50:90:d7:28:2f:e2:bd:b5:c9:3d:11:85:41:
5b:1d:2f:aa:40:f1:b8:bc:78:ad:4d:a0:68:3e:ec:a3:e0:74:
a5:54:1a:6e:70:32:75:42:3d:f7:0b:9f:c9:91:a1:f4:ba:10:
85:99:73:34:0d:c7:43:b7:3e:50:fc:ee:24:67:c8:c8:e8:bf:
6e:94:0f:38:20:33:19:98:47:c2:5c:db:8a:3a:3f:e8:d0:28:
b6:fa:f8:d0:34:65:9e:7a:48:da:95:c1:65:4d:cd:8e:60:8a:
c8:85:0f:26:85:95:0a:6b:e5:2c:68:c3:da:77:ef:0a:05:f8:
56:10:27:12:22:80:fd:a5:74:e4:b4:80:3d:04:a1:70:25:df:
a5:60:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:38 2025 by rpki-client