Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File: kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier: mbKssLpPcQdGAOuV1QmXxMRsh/rpOINyFenqWa4w9xc=
Subject key identifier: 86:20:00:1C:23:75:DD:A8:63:6E:27:24:04:00:39:D2:C0:9C:C8:4F
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer: /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial: 019A7149EAD86BD93EB858519E98E616F8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number: 04FD
Signing time: Tue 11 Nov 2025 05:01:00 +0000
Manifest this update: Tue 11 Nov 2025 05:01:00 +0000
Manifest next update: Wed 12 Nov 2025 05:01:00 +0000
Files and hashes: 1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: AK8mps7CEphwctIAyi/hNcORtjCu5sKEKY146AXKr3w=)
2: wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa (hash: EwlJIDraNdoBBYvI+7Xd9v0lh6FgCXu/F5yckTradM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ea:d8:6b:d9:3e:b8:58:51:9e:98:e6:16:f8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
Validity
Not Before: Nov 11 05:01:00 2025 GMT
Not After : Nov 12 05:01:00 2025 GMT
Subject: CN=8620001c2375dda8636e2724040039d2c09cc84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:ec:7a:a1:a2:81:30:a6:9f:ea:4c:c4:d1:
15:bb:c8:c6:80:ef:2b:e5:5b:67:60:eb:05:47:71:
7f:56:89:d7:df:d1:b7:2e:90:1c:e4:0c:57:92:36:
f6:9f:61:e8:b5:d7:dc:94:3e:69:3b:7d:ea:ef:7e:
4e:f0:5a:4b:62:45:c2:5f:da:1f:41:d4:3c:19:cc:
ce:86:7f:9a:b9:6c:69:8c:4a:cb:03:e2:4e:60:05:
42:9c:0d:e0:89:af:e6:94:d8:8a:25:ad:d5:ed:8c:
3c:22:6b:14:44:a1:75:31:8f:db:45:28:81:12:38:
9a:b9:48:bd:d5:fd:17:36:9f:ab:18:32:1a:3c:a2:
c2:0e:7e:c5:f1:ac:05:82:cc:71:b9:a2:ec:15:40:
86:d8:7c:51:5c:c0:a0:01:a5:96:6c:62:82:ce:45:
c3:0d:87:c3:6e:ef:db:f2:c8:02:29:02:98:08:96:
95:e0:6c:ff:c5:a3:5a:04:5c:1c:c5:30:28:61:44:
c6:fd:0f:d7:eb:49:29:32:9c:f9:1a:f7:9d:8c:77:
7b:89:d7:9c:d1:90:9a:57:f9:7b:ef:a2:6d:ac:2b:
59:db:ff:21:3c:59:d9:34:36:d6:f7:c8:bc:ef:55:
c7:1f:cb:51:68:4d:08:2c:c8:4d:5e:be:68:39:e5:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:20:00:1C:23:75:DD:A8:63:6E:27:24:04:00:39:D2:C0:9C:C8:4F
X509v3 Authority Key Identifier:
keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a4:74:d9:d0:7b:f7:e1:69:a3:a1:de:21:73:dc:64:56:f6:
30:8d:27:47:e0:ce:40:18:fd:f8:f2:de:6e:a5:02:34:4d:d5:
f6:5d:81:33:d5:06:ce:47:81:94:cd:9e:fe:e9:55:a9:88:a3:
e2:23:c3:bb:39:6d:24:1a:6e:d7:9f:0f:f2:ff:c2:3c:a4:38:
48:67:b6:92:4f:39:21:53:a6:6a:a0:64:13:34:6c:b6:22:c4:
92:0d:54:41:e0:ee:38:ac:dc:32:34:95:4d:44:af:7c:b1:cd:
ac:0b:ba:3f:6a:db:f5:c2:30:15:46:51:02:cb:31:ce:d3:12:
69:8e:eb:0a:63:45:e4:00:5f:23:47:44:ae:7f:f2:7a:48:ed:
53:a1:25:52:c9:d3:57:e4:9e:6e:87:f9:bb:03:26:89:28:7a:
bf:79:a8:bc:26:da:cc:aa:5d:1c:6d:d0:45:9d:0a:f6:20:85:
23:c8:b9:72:ef:aa:9f:75:5c:19:44:35:91:a1:e5:e1:3e:d7:
bd:aa:05:fc:42:61:ae:7c:40:92:2a:b4:6e:30:a0:54:a9:34:
cb:fa:6f:39:a7:e0:d1:65:46:eb:34:aa:90:1e:ae:af:a4:06:
27:64:33:1c:a1:32:d8:14:3f:e8:fb:ac:be:e4:5f:23:5a:55:
23:20:3f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:05 2025 by rpki-client