Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: hPsFgxtYn5cRZ3n3aqsu6FbeOtykhxDEWavUeu4pCYA=
Subject key identifier: 3C:F5:B3:A8:64:6B:A0:B3:42:55:07:2A:44:57:37:B0:04:6C:7D:4D
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 019A71EED0A948E661F943BBAEEB93281AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:01:07 +0000
Manifest this update: Tue 11 Nov 2025 08:01:07 +0000
Manifest next update: Wed 12 Nov 2025 08:01:07 +0000
Files and hashes: 1: DNiv8WMGcPKANx-uQmW-sx5fNXI.roa (hash: Lj5hqHXoRMsEWF++FwaU7YyRf1SOoK6ggthX5YqRKwg=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: gdn1JLBh5CUbPA3DoL27eG+vq37aRFDl+9Q2fFrgHbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d0:a9:48:e6:61:f9:43:bb:ae:eb:93:28:1a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Nov 11 08:01:07 2025 GMT
Not After : Nov 12 08:01:07 2025 GMT
Subject: CN=3cf5b3a8646ba0b34255072a445737b0046c7d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:98:16:bd:8b:d3:7d:88:76:45:ba:09:44:
cd:13:ee:17:47:44:ee:16:70:5b:1b:e7:3b:c0:c3:
c6:be:a6:a1:d0:7a:a7:cf:32:23:8e:53:c1:13:aa:
e6:cd:4d:e7:7b:e6:d9:f8:94:9b:a6:7a:f3:4a:b6:
59:83:53:c7:af:72:19:fa:05:6e:29:a3:9e:c9:59:
16:9a:0e:73:48:0b:f5:e7:e6:37:8f:78:f9:bd:83:
54:e6:b1:49:86:15:51:51:5e:5d:53:a2:96:b9:21:
66:38:ef:bb:05:fc:50:d2:fe:22:56:35:6b:c9:00:
eb:8f:9a:40:cd:46:42:c9:24:43:e5:39:9f:32:87:
e9:e7:21:e2:9e:17:26:61:1e:e8:70:f9:f1:d9:fa:
ab:16:e5:ce:1e:ad:d5:05:b3:ad:2e:a9:1b:fc:11:
6c:97:9e:ee:05:ec:27:92:ff:20:4f:c0:ca:af:2a:
b0:b4:79:a1:66:6d:ce:68:f6:df:1f:9d:37:32:c9:
0b:9f:83:87:9c:bd:7d:57:53:0a:0e:71:64:64:8b:
92:cb:2e:f3:be:22:6d:e1:81:84:66:a2:03:ff:28:
6a:a5:a9:c1:42:37:de:3c:9c:f6:84:8a:db:2f:bc:
e9:64:83:0c:2e:52:f6:50:02:fe:ce:79:7f:ff:45:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F5:B3:A8:64:6B:A0:B3:42:55:07:2A:44:57:37:B0:04:6C:7D:4D
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3e:29:72:b5:41:db:b8:f1:bc:37:a3:2c:d9:8b:5c:b8:69:
14:2a:2f:f6:7a:4a:f6:1a:a1:91:cd:da:be:d0:a8:ed:cb:5c:
49:45:2d:b2:c4:a8:e8:25:11:bd:9d:ff:81:4d:83:31:d8:1b:
45:a1:70:ca:fb:b7:e4:91:ec:84:17:6a:dd:13:b0:6b:54:5b:
8c:dc:61:e8:3b:8a:3d:af:c3:fd:a1:9f:57:46:cc:69:54:05:
08:49:c0:5b:d8:f8:20:5a:b8:e9:77:a6:68:7c:b1:10:5d:11:
80:87:8f:9e:9d:33:42:12:e2:ff:21:61:a4:a8:27:af:20:f8:
c4:f3:2e:be:36:64:06:8c:2f:47:43:00:81:90:9a:b7:85:72:
39:82:be:b5:0c:90:96:8d:11:ee:7a:9d:39:e5:07:43:a3:e5:
09:c1:84:01:36:e2:8d:0a:14:b6:ee:43:89:76:55:90:7f:a4:
71:7f:db:e3:7c:84:e6:52:d3:4b:28:2f:29:e2:28:80:7d:c1:
ae:69:78:48:58:dc:1f:8b:68:b8:8f:8e:c9:48:db:14:09:60:
d5:3e:40:86:c2:c3:eb:5a:bc:01:6f:10:c5:49:2c:02:d4:65:
34:16:a4:a4:ee:80:4a:0d:07:28:45:d5:a1:ed:80:6d:67:97:
30:10:27:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:18 2025 by rpki-client