Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
File: k1x7dikZzzbcFCY_XllV6P-jXTs.mft (raw, json)
Hash identifier: jqo/PLYN+KS4ylKSK20ioO78TN+TjcOOG4EPKkYEbS0=
Subject key identifier: 75:FE:D0:19:C4:01:1B:22:92:59:E5:4B:B7:94:A1:D8:24:6E:E3:97
Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Certificate serial: 019A71B8A3EE85DA90A37ABA63ECE296F0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: k1x7dikZzzbcFCY_XllV6P-jXTs.crl (hash: Tk7f/usscEOdAY8+Zz6++YVS1yIaansO62DBhOsTrP8=)
2: mPtwMPDBjS-jkWgS9uuTF9_ZOaw.roa (hash: 2rJnzrY1kifgjd6LuERI+YOBEpbALMoWfYZ9TooQij0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a3:ee:85:da:90:a3:7a:ba:63:ec:e2:96:f0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=75fed019c4011b229259e54bb794a1d8246ee397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:15:e8:f9:92:c9:dc:ba:93:40:14:b1:a7:
e1:4f:5d:95:00:4f:74:13:58:20:85:32:d8:d1:49:
8a:38:71:1c:47:b2:d4:64:e1:67:e6:66:16:93:6e:
e1:73:3d:73:c3:27:9c:44:9b:27:49:f7:6a:da:2b:
5e:2f:4f:6d:58:e2:aa:e3:8f:89:c6:87:ff:a6:19:
0e:e3:38:ce:d6:9b:7c:48:9d:22:1f:9a:11:d9:3d:
de:18:18:d9:6d:79:af:be:5c:ce:f9:0d:16:27:1f:
06:89:a0:99:4c:07:1a:a1:c9:c1:55:27:87:5d:0b:
ad:70:4c:5e:a8:60:bd:60:a4:6a:79:ee:b5:be:ba:
e4:3c:e5:fb:4c:fd:66:e5:10:30:54:3d:b6:c9:c2:
a1:94:cf:de:2c:42:8e:47:73:1b:dc:f5:9f:29:0c:
ca:e0:30:85:fe:85:f2:63:88:b2:07:f4:37:94:0a:
76:3b:d4:4e:ca:40:bc:4e:2d:12:41:36:0a:a1:e6:
ea:bf:bf:cf:a8:2a:5c:ec:92:9b:ae:a4:6e:e2:aa:
0f:3c:5a:c7:ad:9c:25:6a:13:1c:f6:ed:ea:f1:75:
ff:1c:f6:48:10:ff:7e:1d:71:72:fb:2e:93:91:92:
25:fb:55:dd:91:07:0c:69:01:04:ee:3a:3c:2d:1d:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FE:D0:19:C4:01:1B:22:92:59:E5:4B:B7:94:A1:D8:24:6E:E3:97
X509v3 Authority Key Identifier:
keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f8:30:c1:97:69:d6:54:b1:85:5b:1e:a1:8b:2f:78:6d:98:
0f:60:97:55:e6:86:e0:a3:6d:c5:fb:23:82:bb:2e:a7:b1:c8:
37:32:18:7a:19:2c:0e:96:64:82:81:3f:5a:b0:22:96:76:4b:
fb:70:b9:42:41:ee:68:2a:a9:e6:e1:96:21:ec:50:73:c6:7e:
cc:b4:98:11:ec:de:65:08:55:5c:59:e6:6a:2e:f7:2b:8a:f7:
62:d7:f1:53:d9:f9:af:d0:f7:a5:0d:08:ce:3d:b6:ea:81:73:
9b:a7:48:92:2e:91:36:ac:84:bd:59:1e:b6:48:a0:79:f3:ab:
20:9e:cd:ee:c2:82:47:c5:56:19:79:0d:b1:6d:6b:1e:99:b9:
30:99:dc:60:86:fa:7d:61:6f:97:a2:70:f4:72:df:2c:9f:e6:
06:80:e4:6b:e3:7b:4d:a2:58:e1:ac:17:d3:7d:36:18:d0:16:
29:6f:1d:6f:57:94:cc:e0:ad:5b:69:d3:c2:6b:6a:bb:6c:2e:
6c:e1:d8:92:a9:87:79:20:3d:88:d1:a4:f5:11:4c:73:c3:a2:
fc:39:49:0e:08:b6:0d:e5:7d:b4:8b:b1:2c:3f:91:72:e4:31:
85:59:ff:f3:db:22:ea:e2:8a:85:2a:99:3b:17:f4:6b:47:56:
17:ce:a1:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuKPuhdqQo3q6Y+zilvDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWM3Yjc2MjkxOWNmMzZkYzE0MjYzZjVlNTk1NWU4ZmZh
MzVkM2IwHhcNMjUxMTExMDcwMTU3WhcNMjUxMTEyMDcwMTU3WjAzMTEwLwYDVQQD
Eyg3NWZlZDAxOWM0MDExYjIyOTI1OWU1NGJiNzk0YTFkODI0NmVlMzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttAV6PmSydy6k0AUsafhT12VAE90
E1gghTLY0UmKOHEcR7LUZOFn5mYWk27hcz1zwyecRJsnSfdq2iteL09tWOKq44+J
xof/phkO4zjO1pt8SJ0iH5oR2T3eGBjZbXmvvlzO+Q0WJx8GiaCZTAcaocnBVSeH
XQutcExeqGC9YKRqee61vrrkPOX7TP1m5RAwVD22ycKhlM/eLEKOR3Mb3PWfKQzK
4DCF/oXyY4iyB/Q3lAp2O9ROykC8Ti0SQTYKoebqv7/PqCpc7JKbrqRu4qoPPFrH
rZwlahMc9u3q8XX/HPZIEP9+HXFy+y6TkZIl+1XdkQcMaQEE7jo8LR3CgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHX+0BnEARsiklnlS7eUodgkbuOXMB8GA1UdIwQY
MBaAFJNce3YpGc823BQmP15ZVej/o107MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjct
YWVkMTY0ODMyYThiLzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjctYWVkMTY0ODMyYThi
LzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxPgwwZdp
1lSxhVseoYsveG2YD2CXVeaG4KNtxfsjgrsup7HINzIYehksDpZkgoE/WrAilnZL
+3C5QkHuaCqp5uGWIexQc8Z+zLSYEezeZQhVXFnmai73K4r3YtfxU9n5r9D3pQ0I
zj226oFzm6dIki6RNqyEvVketkigefOrIJ7N7sKCR8VWGXkNsW1rHpm5MJncYIb6
fWFvl6Jw9HLfLJ/mBoDka+N7TaJY4awX0302GNAWKW8db1eUzOCtW2nTwmtqu2wu
bOHYkqmHeSA9iNGk9RFMc8Oi/DlJDgi2DeV9tIuxLD+RcuQxhVn/89si6uKKhSqZ
Oxf0a0dWF86hrg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:52 2025 by rpki-client