Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier: Qx/A8Koia2fA1I64499dy86kPjalr4I+c68qDcU2wgs=
Subject key identifier: 39:2D:B1:8D:4B:E8:37:40:05:C0:D1:C0:43:95:56:A6:C4:11:64:ED
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 019A7293B24C4CC277FD29D23E44199DB4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number: 1731
Signing time: Tue 11 Nov 2025 11:01:13 +0000
Manifest this update: Tue 11 Nov 2025 11:01:13 +0000
Manifest next update: Wed 12 Nov 2025 11:01:13 +0000
Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: bEecwK30D78SsRDlGaPTdWrUUQE9Mr8x9mkvNuLNn5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b2:4c:4c:c2:77:fd:29:d2:3e:44:19:9d:b4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Nov 11 11:01:13 2025 GMT
Not After : Nov 12 11:01:13 2025 GMT
Subject: CN=392db18d4be8374005c0d1c0439556a6c41164ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:2a:84:9a:69:56:d1:44:06:c3:d3:d4:2b:
a2:f3:45:5a:25:ed:e7:56:08:5c:d6:9a:45:38:32:
de:29:be:ab:d3:c0:e6:60:1e:bb:31:c3:ec:a9:45:
af:ed:79:49:aa:31:bf:0d:04:22:ab:10:ad:ab:4e:
bb:ab:4a:a7:c5:49:b4:d4:b6:e4:43:c4:c5:50:27:
b1:b2:14:b9:c7:ca:d4:ba:3b:b3:87:a1:c1:56:2b:
12:ec:10:e5:d5:17:c6:95:d1:67:0a:70:76:30:1f:
45:f7:03:de:6d:ab:03:95:6b:a9:76:5d:c5:50:6c:
3e:17:05:00:b8:3c:3a:80:a1:86:49:5e:e4:00:10:
d0:47:a8:6a:7c:29:d4:94:bd:b8:7f:4f:b1:7c:a0:
08:78:0e:ab:b1:4c:83:0c:66:d3:e3:18:b6:06:a1:
85:6b:bc:53:11:6a:85:aa:26:45:f0:bc:d5:20:55:
8d:4f:2a:22:dc:16:c2:af:93:22:b3:4f:0d:25:74:
8a:45:fb:f5:b8:5b:12:49:bc:77:2e:ef:8b:1a:a6:
d7:c2:ad:88:ca:c1:18:1a:d3:93:0b:78:9d:03:b9:
d9:39:94:2c:14:ac:e4:4e:34:d3:4c:40:62:7a:76:
63:69:67:03:86:04:f8:26:92:47:5d:3f:8e:2d:51:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2D:B1:8D:4B:E8:37:40:05:C0:D1:C0:43:95:56:A6:C4:11:64:ED
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8c:9d:83:24:f4:c1:ab:d5:1f:2b:a1:b9:c9:a5:39:a1:a6:
18:8d:e3:8a:38:7c:39:31:c4:ce:22:25:53:2b:96:bb:d0:e2:
7a:11:a3:8f:12:84:6a:1d:f5:e5:fe:b8:57:be:8c:40:60:3f:
98:96:1d:52:4d:85:f4:0a:b9:1b:cf:c5:e4:7b:0b:9a:9b:c9:
07:f6:cd:78:ad:32:30:50:81:de:2c:c2:d8:3c:95:f4:ef:d0:
ad:a0:d7:90:01:ae:d2:23:78:22:f2:12:13:9a:51:a7:f1:d1:
7b:43:77:26:20:17:73:4b:f3:06:e2:2e:db:bc:20:43:33:f1:
a2:ff:e3:78:42:60:72:6f:92:87:e0:e5:f4:5a:9d:89:4e:ad:
00:97:1b:bd:80:1a:64:95:67:a6:d7:4c:1c:11:eb:7c:64:e4:
7d:2c:db:ba:1f:67:35:df:b4:a0:a8:c1:41:db:f4:d7:2f:28:
9e:60:2e:d1:bb:14:96:2a:da:aa:df:8d:d4:6a:cb:41:83:6d:
1f:13:29:42:e7:19:86:5a:7c:3f:f7:62:7a:10:cb:1c:56:52:
bd:68:44:e2:d7:12:c3:fa:f7:73:6b:aa:66:53:4a:c9:df:c4:
89:a0:0d:33:1f:59:9f:11:94:03:84:c7:82:0c:5b:fd:85:b7:
21:ee:8d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:33 2025 by rpki-client