Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: FMu/Q4owD/FJK1alOyY9IwyFl/sfmcg5Vx9Bhc1Jblc=
Subject key identifier: D1:0D:D8:7C:4A:6F:EE:94:CB:2F:50:C7:D1:BB:6B:D8:44:99:0F:78
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 019A71B858124531BC18EB1EF291F8129E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:37 +0000
Manifest this update: Tue 11 Nov 2025 07:01:37 +0000
Manifest next update: Wed 12 Nov 2025 07:01:37 +0000
Files and hashes: 1: O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa (hash: EUscQTnmBwchHhwFPgGdViuEre/xVGQ6ryyvSQoTdUA=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: myiYkwB3WbQpS+NgLrJeZRyMf+V3Q7r8yYTqpkNteb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:58:12:45:31:bc:18:eb:1e:f2:91:f8:12:9e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Nov 11 07:01:37 2025 GMT
Not After : Nov 12 07:01:37 2025 GMT
Subject: CN=d10dd87c4a6fee94cb2f50c7d1bb6bd844990f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:69:ee:8c:2a:77:9a:56:5e:7d:60:76:22:
be:63:bd:42:d8:30:3b:2c:fb:f6:ee:e4:86:31:84:
df:21:a9:79:77:a6:18:91:01:50:e6:96:26:08:14:
ec:cc:1f:d4:aa:64:3a:a3:5e:a3:07:80:c0:0a:49:
d7:1e:0e:ef:b1:1e:bd:bc:91:8f:06:27:15:82:b1:
8a:df:dd:55:f4:58:49:26:20:e7:24:5b:41:b1:c2:
2c:ab:f9:8c:30:c3:a0:17:b3:22:f6:96:85:aa:da:
61:af:38:09:b2:14:0c:50:74:62:f5:d6:20:5d:34:
81:2a:8e:60:7e:d0:a9:c1:f5:f6:cc:32:15:27:8b:
0f:41:21:17:83:92:58:37:96:e5:61:68:9b:4d:65:
d2:c1:9e:83:12:24:36:fa:5f:8f:0c:35:32:01:8f:
55:5c:b0:91:18:72:c5:84:3a:74:cd:94:ea:3b:e5:
33:36:4e:3f:f2:ed:2b:25:03:bb:5d:c0:d0:cd:9a:
cd:ab:7b:49:b9:43:4e:98:2c:3d:25:f4:a1:48:a1:
aa:6e:9a:4b:ba:82:92:8d:c6:50:e5:0a:5b:20:0b:
eb:07:2e:55:b9:b4:5e:8d:17:16:e7:35:89:a5:64:
62:d1:4d:09:6f:0e:21:9e:93:31:6c:90:86:b8:e8:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0D:D8:7C:4A:6F:EE:94:CB:2F:50:C7:D1:BB:6B:D8:44:99:0F:78
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5a:4b:1d:9d:8c:fd:d3:fa:fe:d9:98:92:0f:bd:f6:6b:a5:
72:a3:87:ba:75:bb:95:ed:e5:fa:79:d7:d2:3e:8e:a1:65:9c:
31:50:b8:aa:40:e6:57:c5:5b:85:53:ea:7b:26:c1:32:a0:46:
f2:36:91:bf:73:14:88:b7:4e:d1:db:6c:4f:dd:db:27:3b:2b:
2c:fd:11:76:e9:8b:17:b9:d4:ca:56:ca:84:a4:7a:fa:9b:be:
96:53:66:17:56:b2:36:50:83:67:47:47:08:58:46:41:ab:b2:
fb:0b:e3:a5:06:77:16:b5:da:01:23:a8:59:ab:64:91:c2:0f:
0a:a6:f2:39:38:94:ba:a3:19:6c:34:75:a3:3d:c7:02:aa:62:
f1:8e:a5:81:96:14:01:a2:66:e0:a2:e9:83:41:ac:f2:dd:15:
73:78:82:92:9e:69:23:a8:f3:76:8a:01:ec:91:be:07:5a:e0:
07:ec:4b:64:7a:0d:dd:38:cb:f6:55:e6:48:8a:91:88:71:5e:
36:5e:85:d2:30:a6:4c:f3:d6:df:a3:df:86:6c:01:46:c8:15:
c9:97:d9:f8:82:ba:9d:1a:2e:19:f6:73:a5:af:66:50:e7:ec:
fb:28:ab:95:ec:ba:a2:16:3c:f7:15:5e:ed:e2:44:50:77:6f:
ae:a8:41:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuFgSRTG8GOse8pH4Ep6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNjI4YjkzNjYxZTkwNTg4NzM1OWZjOGU5YTE4ODgwNzVk
YjNjZDgwHhcNMjUxMTExMDcwMTM3WhcNMjUxMTEyMDcwMTM3WjAzMTEwLwYDVQQD
EyhkMTBkZDg3YzRhNmZlZTk0Y2IyZjUwYzdkMWJiNmJkODQ0OTkwZjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvepp7owqd5pWXn1gdiK+Y71C2DA7
LPv27uSGMYTfIal5d6YYkQFQ5pYmCBTszB/UqmQ6o16jB4DACknXHg7vsR69vJGP
BicVgrGK391V9FhJJiDnJFtBscIsq/mMMMOgF7Mi9paFqtphrzgJshQMUHRi9dYg
XTSBKo5gftCpwfX2zDIVJ4sPQSEXg5JYN5blYWibTWXSwZ6DEiQ2+l+PDDUyAY9V
XLCRGHLFhDp0zZTqO+UzNk4/8u0rJQO7XcDQzZrNq3tJuUNOmCw9JfShSKGqbppL
uoKSjcZQ5QpbIAvrBy5VubRejRcW5zWJpWRi0U0Jbw4hnpMxbJCGuOgU6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEN2HxKb+6Uyy9Qx9G7a9hEmQ94MB8GA1UdIwQY
MBaAFL9ii5NmHpBYhzWfyOmhiIB12zzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjJLTGsyWWVrRmlITlpfSTZhR0lnSFhiUE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YzgzZTctYTM1Mi00ZTIxLWE3MzEt
MTU3YjVhZDZhYjdiLzEvdjJLTGsyWWVrRmlITlpfSTZhR0lnSFhiUE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YzgzZTctYTM1Mi00ZTIxLWE3MzEtMTU3YjVhZDZhYjdi
LzEvdjJLTGsyWWVrRmlITlpfSTZhR0lnSFhiUE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1pLHZ2M
/dP6/tmYkg+99mulcqOHunW7le3l+nnX0j6OoWWcMVC4qkDmV8VbhVPqeybBMqBG
8jaRv3MUiLdO0dtsT93bJzsrLP0RdumLF7nUylbKhKR6+pu+llNmF1ayNlCDZ0dH
CFhGQauy+wvjpQZ3FrXaASOoWatkkcIPCqbyOTiUuqMZbDR1oz3HAqpi8Y6lgZYU
AaJm4KLpg0Gs8t0Vc3iCkp5pI6jzdooB7JG+B1rgB+xLZHoN3TjL9lXmSIqRiHFe
Nl6F0jCmTPPW36PfhmwBRsgVyZfZ+IK6nRouGfZzpa9mUOfs+yirley6ohY89xVe
7eJEUHdvrqhBTQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:52 2025 by rpki-client