Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
File: kF3q_qO62SSCF7FinkLP_H5JG9k.mft (raw, json)
Hash identifier: 0lOkLvxHx7oCM1X8oYMVzDEZQfTx36LGYlfTF99UpfM=
Subject key identifier: 4A:5B:7D:69:C2:9D:06:C4:CE:42:F8:0F:E4:43:74:5A:23:7C:A2:83
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Certificate issuer: /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial: 019A71B9153E6E4B98941F345B26AAC0B5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: F6NVdh8A853FlObS61QBXhYoWUw.roa (hash: bTYe6HPxoy2DgVEr4roCOuCgASU45dN4RfTtGTEfBzY=)
2: kF3q_qO62SSCF7FinkLP_H5JG9k.crl (hash: ngYi/LsAq8xurpE5YVRzJhF0gtWXjswe9CMIksTnLLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:15:3e:6e:4b:98:94:1f:34:5b:26:aa:c0:b5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=4a5b7d69c29d06c4ce42f80fe443745a237ca283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:f4:da:b9:e3:5b:33:53:bd:ff:56:e0:4f:
8c:29:29:cc:d3:7e:ae:a4:67:a3:79:a5:c7:42:64:
0b:bb:c8:d8:63:50:af:f9:b7:c9:0f:0f:e1:be:ac:
5b:84:7a:e8:fb:57:1d:58:c9:48:f4:a8:cd:a3:5b:
1b:99:ef:8e:b2:04:76:0c:1a:c5:50:1f:3b:f4:74:
51:44:1c:3b:20:10:5c:82:f6:91:32:07:8d:f3:f2:
91:b7:bf:c1:ba:fd:cb:8b:6a:a7:42:fd:e8:32:b5:
28:ce:9d:16:b1:bd:2c:c7:1f:ed:d0:38:92:ee:07:
07:62:a3:a1:a8:77:72:66:e8:61:bb:6b:f1:dc:dc:
37:a9:2c:ed:03:04:40:cd:bd:8d:bd:a9:ee:43:c8:
00:ed:5c:05:b7:5f:38:61:53:c9:f6:51:4a:78:87:
ac:3d:5b:5d:a2:4f:ae:1e:d7:1a:9e:91:3d:0d:c5:
a9:de:19:08:3f:c9:77:bc:25:6a:93:4d:ba:69:9d:
86:df:4e:4c:de:38:16:cc:d6:0a:14:29:b6:2b:69:
73:54:c6:23:be:19:8d:03:b4:f4:f7:ac:02:96:28:
83:9d:19:00:37:36:58:21:70:b5:79:a9:20:c5:5a:
37:e4:7c:ad:32:53:b2:32:26:3a:21:ef:dd:7d:ca:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5B:7D:69:C2:9D:06:C4:CE:42:F8:0F:E4:43:74:5A:23:7C:A2:83
X509v3 Authority Key Identifier:
keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:40:88:56:e5:cb:d3:40:0f:ff:9a:d6:5e:49:78:ed:ed:52:
31:ff:d5:28:43:57:4b:6f:6f:c5:11:fa:18:16:cc:1e:8b:27:
28:4e:82:91:9c:af:01:17:16:40:4f:65:5c:9f:14:d4:5a:14:
1b:01:0e:22:d7:07:7d:fd:fc:d0:f9:98:13:d0:fc:e6:16:77:
52:2b:e7:1d:e4:1c:0c:c3:e5:eb:92:a5:2a:b4:ae:87:68:45:
25:56:cd:8e:55:b7:68:44:59:5d:bf:25:45:87:18:00:5a:dc:
00:44:c3:be:50:3d:13:b9:55:94:fc:67:bc:02:f0:ac:08:8b:
29:3f:4b:fa:37:2c:c6:53:77:e3:b8:10:9b:8e:2f:4d:64:5d:
f2:ab:ec:ca:4b:2c:99:d0:ad:7e:e8:6f:b4:20:2f:e8:3d:74:
3a:57:a3:0d:d8:5a:d1:de:5f:af:17:9a:83:54:7f:96:bf:71:
cc:54:2e:53:68:35:b5:61:b2:a1:b8:b7:e1:80:74:1e:e4:94:
53:2d:3f:c5:19:c9:50:43:c3:ec:24:5a:5f:4d:a9:20:9e:e7:
ac:c8:1e:ab:7d:97:dc:99:70:f7:84:7c:c6:0a:a5:f1:58:38:
4b:96:7c:c4:72:94:0c:4a:12:73:cd:7a:48:19:c3:65:da:09:
78:12:88:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:05 2025 by rpki-client