Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: 8xC5OxVNKGLE8/8HrAYeX5s5ebdam8oGO+9Br3cDFzI=
Subject key identifier: 29:94:9C:68:5F:96:33:AC:0F:78:C2:EF:9E:07:1B:F4:14:C3:B9:06
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 019A7293550FB702FDBC3656271D51F89C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 05FD
Signing time: Tue 11 Nov 2025 11:00:49 +0000
Manifest this update: Tue 11 Nov 2025 11:00:49 +0000
Manifest next update: Wed 12 Nov 2025 11:00:49 +0000
Files and hashes: 1: ITvafiNBv4ylSij6nbuKyZmdE8k.roa (hash: eQlQlT15GdOmzPkZPFcmwxbiVSUvzPGQ2MQSNNK3BEo=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: XYt/s9gKkKFBz4zo2ibRo+cBhhu0xdmwGM6mdvkryFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:55:0f:b7:02:fd:bc:36:56:27:1d:51:f8:9c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: Nov 11 11:00:49 2025 GMT
Not After : Nov 12 11:00:49 2025 GMT
Subject: CN=29949c685f9633ac0f78c2ef9e071bf414c3b906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:6f:1f:c5:2c:aa:f5:00:1e:54:9c:05:20:
b0:d3:a9:56:36:98:44:89:40:87:2d:01:41:53:db:
88:79:d5:ed:81:a9:79:f2:2b:88:08:ff:2c:57:a4:
2d:8f:b5:e7:9b:ee:a8:6e:aa:dd:28:99:db:98:2c:
b7:45:6c:bb:e7:af:e3:c8:56:6e:39:42:44:32:53:
c3:e6:b4:76:d6:ca:b3:9c:dc:3b:12:23:e9:86:e3:
fb:86:ad:86:2b:46:9e:b2:02:28:6a:ae:29:d9:3a:
02:e1:c4:f6:f9:26:99:79:03:ce:5c:a8:a6:3d:20:
ef:03:e7:2a:55:7a:d5:95:fc:f7:7a:29:f8:1d:92:
87:bd:10:26:15:a0:a1:02:41:c2:31:48:20:59:ad:
6f:50:dd:78:26:0c:43:c8:a5:45:de:3b:6f:73:6e:
9a:65:fb:ae:2a:8e:bf:87:2f:c1:a7:c3:1f:d1:87:
e5:51:dd:46:e5:87:2f:38:5f:25:fa:43:ba:85:cf:
82:13:02:37:54:f6:08:06:72:d4:ab:d6:86:30:dd:
15:6f:58:51:52:ee:f9:95:d2:63:7d:ea:99:2d:af:
f0:e3:69:3f:b5:06:dd:61:76:00:7a:4b:99:7c:4d:
33:af:0a:97:79:99:56:b8:fe:d1:dd:2a:b1:18:c6:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:94:9C:68:5F:96:33:AC:0F:78:C2:EF:9E:07:1B:F4:14:C3:B9:06
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:04:f1:e6:7b:2f:3b:8f:83:02:11:5c:7b:30:8f:a0:e0:57:
ce:c1:18:8c:9a:e2:90:ba:37:80:65:9c:05:75:12:4a:8b:89:
b3:e0:9c:4b:2b:6f:ca:88:04:f5:c6:de:52:60:bb:89:c4:21:
f6:ff:93:25:3b:2c:3e:5c:6f:9a:08:50:26:df:d5:f3:b8:39:
e8:fd:f7:fd:20:2b:51:a3:6e:b4:ac:3b:4e:8e:f0:98:68:47:
14:5c:50:37:3c:f6:34:df:30:36:89:12:c7:45:36:7d:57:2a:
56:08:9c:ef:b3:ba:f5:43:d5:0e:12:73:e4:12:4a:12:b7:5b:
23:61:de:d5:f2:ea:7c:15:a9:29:6a:2b:d0:40:66:96:15:bd:
22:7f:ac:95:ec:ef:f1:57:6e:0b:81:f9:fe:20:6e:00:ae:73:
b2:ba:62:cb:4f:a7:9c:d4:17:7e:7f:16:8b:4e:76:f0:57:1e:
dd:68:03:db:52:01:4a:d9:dc:73:5a:80:e3:e6:c1:7d:c2:ef:
19:4f:08:7b:4e:a5:e3:8f:3f:a7:42:fe:4f:b6:13:ef:60:67:
8b:cb:cc:e0:43:a0:2b:f1:1f:6a:66:d5:3b:50:52:bc:de:bc:
c8:22:97:93:6d:7f:a1:27:ef:99:66:7e:13:0d:63:83:f3:2c:
f4:9d:3c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:25 2025 by rpki-client