Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: 1waQ1w8RUQuz/YHQ+8qFOzTLDm+ln8TOrUKQ8FuejW4=
Subject key identifier: 90:85:E0:D0:79:F6:E2:65:8F:17:01:E5:F1:5B:75:E4:31:50:D0:66
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 019A71B8F2C52BD702E0A272B46B4192C391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 087E
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: GdYDqrOhgB8exVYYyIqPRX61C-I.roa (hash: NWfhvpFN96SLGPQqqCOWVE/72vTziFHwtrYFSPDHX60=)
2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: U3TRqgqdjfcjXm/aBIZtHvnwVFUYwT5SqZ1Yql1bkEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f2:c5:2b:d7:02:e0:a2:72:b4:6b:41:92:c3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=9085e0d079f6e2658f1701e5f15b75e43150d066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:10:41:83:08:43:0b:32:7a:87:fc:0c:30:
e5:28:4f:9d:18:ad:d6:25:a7:f6:0b:d9:f7:e6:0f:
6a:1a:d7:96:2b:65:71:0c:39:7f:fb:a9:b8:32:2b:
98:4d:f3:af:57:cc:5e:de:d8:35:18:75:43:fe:00:
e4:06:61:8f:7c:aa:28:18:5a:80:7c:02:16:7c:24:
60:72:6c:0f:d5:7c:10:ed:09:be:d6:59:4d:80:24:
01:bf:3b:f5:83:d8:5f:1e:a4:53:2d:d2:7c:9e:ed:
de:9c:8f:9a:0d:45:54:fd:aa:c0:d6:34:f4:4f:27:
78:42:a3:b4:3e:2c:41:35:d7:2c:20:f9:33:fb:39:
fb:cd:b1:81:5b:17:4c:9f:82:af:3a:a2:7b:b2:60:
16:ea:2e:03:f2:20:2c:75:c0:0d:85:c8:c5:84:63:
b8:4c:a4:41:ab:61:03:2c:e1:c3:7a:46:75:de:70:
eb:e9:c5:8d:1f:cd:ed:41:7d:ea:35:87:7b:87:1c:
97:69:a9:bb:e6:78:05:79:17:2e:10:eb:72:ed:55:
c0:46:be:80:5c:88:bc:32:3e:8f:7f:f8:f2:ed:82:
03:13:5b:b6:0d:0d:de:47:50:2a:e4:0a:7a:57:16:
80:d5:51:19:a9:dc:69:4f:44:f9:a4:ea:11:db:46:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:85:E0:D0:79:F6:E2:65:8F:17:01:E5:F1:5B:75:E4:31:50:D0:66
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:45:7c:68:db:1f:21:6e:a0:8e:fb:23:2b:35:e1:02:86:ba:
fc:21:47:28:71:6e:1e:bb:72:4f:e2:1c:ea:4b:7e:b6:e8:7b:
04:96:2c:ad:fd:db:7b:fd:11:be:76:80:7a:b3:43:a7:0d:3f:
ec:e0:e8:f1:3b:46:3c:82:7e:ee:18:1b:5b:37:9a:8f:4c:8b:
1d:93:0f:d2:33:0d:43:1a:b4:32:71:41:17:b7:74:fb:b2:ea:
d9:e5:3e:82:8a:a0:f7:67:15:75:05:28:a4:01:3f:dc:f9:0a:
65:74:f3:b7:07:1e:ba:b2:3f:db:77:e0:62:fa:18:07:d2:b7:
22:93:3a:72:7e:d3:46:da:38:b3:c2:a5:86:b9:23:00:5f:b0:
62:6a:8b:c3:86:81:ef:95:bf:c3:e3:67:c2:0c:e9:8c:31:8f:
9c:53:d2:1d:08:75:23:e0:ba:45:fc:b9:c0:13:f4:e5:e1:37:
88:8e:7f:af:34:62:88:ac:e4:6e:b1:bb:e4:ed:1a:00:a2:ae:
b8:62:a0:89:a1:14:d8:8f:a0:8e:a6:c9:75:65:72:db:19:dc:
eb:18:69:1c:3b:17:cc:b9:a0:7c:11:7e:6e:5b:c2:71:ff:87:
14:19:7c:9d:7a:e2:33:0d:f5:ce:f7:bb:ca:e8:27:93:91:db:
5d:89:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:31 2025 by rpki-client