Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: nxojhzsmjtnPlIrD8VP3tqZFV+/KaDev4C9e99uvXmg=
Subject key identifier: 33:59:56:62:C7:D4:BE:D2:54:AD:8A:E3:51:B2:E1:B1:8F:65:AE:BC
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 019A72CA1B322ACFB512F0431E5AEB4C293D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 12:00:38 +0000
Manifest this update: Tue 11 Nov 2025 12:00:38 +0000
Manifest next update: Wed 12 Nov 2025 12:00:38 +0000
Files and hashes: 1: 4COA7EoK---RVhokcyyZ55j8IXE.roa (hash: 7qjze9UZTxm2x0zZOdskcsGbC7b8KEyBHHGZAVSSicA=)
2: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: Djr2RkDOgIeZXMybRLdcDFEHiPM2bH1mzy4CWV5xKA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1b:32:2a:cf:b5:12:f0:43:1e:5a:eb:4c:29:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Nov 11 12:00:38 2025 GMT
Not After : Nov 12 12:00:38 2025 GMT
Subject: CN=33595662c7d4bed254ad8ae351b2e1b18f65aebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:da:92:ff:6c:29:b2:4e:0e:0b:92:ed:65:
3e:b0:7e:35:f3:e5:91:4c:45:dd:44:a2:94:df:e6:
70:99:e0:cd:27:0f:9e:8d:d9:49:d4:11:26:2e:e9:
45:8b:61:b9:e3:57:cb:69:72:61:8d:a3:46:6d:3f:
87:e8:df:bf:1a:07:bd:4e:6a:1a:e5:c4:14:61:f7:
bd:e1:f5:49:78:8c:8e:2e:43:be:25:2f:40:39:27:
bf:23:6f:d7:75:20:5f:a5:36:a0:6a:4e:95:8e:ee:
ab:dd:06:02:20:7d:20:41:5a:f7:42:34:e4:95:67:
8a:3f:b3:08:4c:ec:16:db:0c:72:a0:7b:c1:fc:d1:
e9:97:8f:cc:7c:a4:ed:a9:2e:e2:93:ba:c4:dd:93:
63:bf:77:9e:25:4c:53:8b:8a:6d:58:5d:cd:d2:ff:
3b:e5:73:e7:0c:b5:6f:ab:82:c1:53:10:0d:da:89:
8e:b3:b2:3d:b7:48:21:fd:f2:4c:f7:7d:83:d3:a2:
7f:d1:35:51:60:c1:09:15:ad:15:78:e7:39:aa:10:
d3:91:6e:ff:b0:5d:3f:a0:c0:c6:f2:30:d0:68:65:
c2:52:8a:f3:8b:a7:53:17:68:23:11:19:76:e3:40:
c0:58:01:d6:67:95:70:96:17:3a:fc:00:4a:b9:f1:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:59:56:62:C7:D4:BE:D2:54:AD:8A:E3:51:B2:E1:B1:8F:65:AE:BC
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:59:c4:ae:79:73:af:ad:fa:b1:53:87:dc:ce:5f:b2:c1:52:
8b:fd:fd:6b:bb:ec:05:65:51:e9:a0:da:e6:51:97:6a:d2:8d:
5a:fe:2d:eb:46:60:0f:47:2d:93:3e:a3:7b:86:9f:9b:0c:28:
42:e2:e7:44:3d:b9:18:12:4c:c7:90:70:40:c2:97:7c:e8:2d:
59:2f:5d:73:fb:0d:dc:d6:26:df:03:38:60:40:5a:f1:26:63:
5d:73:13:0f:d1:c4:ef:4f:e5:28:e8:cd:6f:45:d2:b9:7b:11:
82:80:2a:a2:22:b5:9a:06:80:58:02:94:93:67:ee:cd:bc:63:
33:74:59:a8:b6:cc:f8:a0:27:a9:ee:da:44:62:2e:f1:ce:b2:
d6:c6:8e:05:42:ae:05:bf:77:2b:d1:67:af:1e:91:ab:1e:27:
10:88:90:7c:cb:da:e5:59:99:ec:68:01:b6:b3:ad:e5:85:aa:
16:f9:f1:be:2c:ae:c5:49:26:94:a6:0c:6a:03:7c:ee:f8:be:
f0:21:1d:3f:10:99:6d:0a:8d:17:8a:b5:0d:b1:21:06:cb:5a:
9b:69:bf:f9:75:a9:65:46:2b:f3:e6:58:be:2b:87:c5:c2:c2:
f9:7f:6c:76:b7:d0:73:72:cf:37:ee:6a:08:3b:29:14:fb:8e:
76:b5:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:55:18 2025 by rpki-client