Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: t5x0yRFmx+hCzIhkpA8zdgzyOWnp+PgFxGJnLaqMo98=
Subject key identifier: 0D:D7:C4:E6:4A:B0:4E:2E:77:F6:37:B2:FC:94:47:5F:DF:9C:15:87
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 019A72263904B4768512161BDF878C90431F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0E56
Signing time: Tue 11 Nov 2025 09:01:38 +0000
Manifest this update: Tue 11 Nov 2025 09:01:38 +0000
Manifest next update: Wed 12 Nov 2025 09:01:38 +0000
Files and hashes: 1: TNPcdBpnbKooEgmUt2YrkLdYDmQ.roa (hash: WQcIls3E5pX4tymrsMPubCPP31sHiDGN5xYJkHTcWEg=)
2: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: 0WHKl6MeTqvgAo/S3Nh5fV+8nyTTvRFywUlNwQudXhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:39:04:b4:76:85:12:16:1b:df:87:8c:90:43:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Nov 11 09:01:38 2025 GMT
Not After : Nov 12 09:01:38 2025 GMT
Subject: CN=0dd7c4e64ab04e2e77f637b2fc94475fdf9c1587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:54:08:2f:cd:4e:c7:22:11:de:b9:3b:80:
41:1a:02:3e:03:62:7f:8c:b0:7b:a4:fb:79:12:48:
87:02:d4:17:f7:11:df:4d:f2:a0:7a:cc:6e:c3:76:
33:a8:e2:65:ab:8f:6f:cd:f7:61:30:d6:8d:36:35:
ec:1b:8a:5e:f8:99:33:fe:63:17:0d:07:a4:d9:54:
3e:ec:79:77:a2:9b:33:ed:53:50:6d:c1:60:52:b6:
90:6a:6f:c3:a3:5e:d0:3a:bf:cf:9e:8b:9e:31:f1:
79:46:90:aa:55:65:ce:3f:bc:81:c2:44:2c:50:e8:
cf:bd:ae:a4:0d:00:5a:15:96:d3:79:c1:85:40:7e:
00:ab:77:ed:e9:eb:19:b4:64:6c:0e:92:32:1e:6e:
ab:19:79:03:17:56:29:cb:a4:f1:b4:8c:4e:9f:55:
19:49:64:e0:f5:53:06:86:d4:cf:ae:4b:90:db:18:
83:ec:d5:ed:d9:b3:cd:5c:02:de:74:32:b9:52:e0:
22:5c:b4:3a:34:5d:a1:76:17:fe:77:f6:8d:e4:41:
16:a4:46:13:52:35:d4:1d:72:6b:64:ab:15:98:b0:
cd:d8:c1:94:57:35:22:41:c1:57:08:9f:87:d7:57:
b0:b2:94:6c:03:ab:d0:b5:89:64:57:99:2e:10:b3:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D7:C4:E6:4A:B0:4E:2E:77:F6:37:B2:FC:94:47:5F:DF:9C:15:87
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9b:fb:30:2b:bb:8b:c6:89:1e:ae:fb:af:e2:6d:f1:44:7a:
c0:5b:34:c3:92:20:c4:74:3c:a0:e5:dd:5c:b9:da:0d:ba:20:
b2:f8:ba:34:ec:33:57:9c:85:3d:e0:6f:19:c3:3a:97:69:4a:
a3:71:c5:42:8a:1c:80:52:88:aa:76:18:7c:b9:23:0a:cc:d6:
cd:17:33:24:27:ea:97:47:92:28:ac:18:9e:da:51:c5:28:33:
bc:db:80:82:b9:de:bc:13:c4:a9:3e:40:32:1d:6c:c6:b8:f8:
e8:ae:be:06:70:ab:f3:c1:c4:85:c6:2b:9e:04:e2:0c:ff:97:
cd:c5:7c:14:41:5e:fb:ab:97:79:52:d8:4e:01:a9:a9:7b:8b:
dc:66:12:bd:90:cd:0c:1d:a8:97:58:f9:80:a9:ae:84:58:80:
ab:cb:06:55:07:0e:c8:ed:35:71:63:1f:fa:de:3e:70:f5:af:
5d:25:42:db:be:2f:f5:24:5a:f1:d9:e5:b9:28:c8:2e:b7:ce:
fe:33:73:0d:37:5e:63:7f:b2:04:b0:49:9d:a8:ad:9c:65:c9:
8c:0a:02:7d:e1:c1:20:b4:66:f3:c9:f7:2b:93:4f:4a:93:05:
ea:3f:77:bc:1a:47:af:54:90:0c:80:cd:c9:6b:91:d9:ac:72:
7b:84:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:54 2025 by rpki-client