Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
File: k61uOZkaLowJwa3lO-WV-LipQl4.mft (raw, json)
Hash identifier: PRv41X/TIoB9Q18IbRg4cRWHeZWKXCd2yZr+Z2++47E=
Subject key identifier: 30:84:A9:02:7B:BA:65:77:F7:FE:83:3B:91:57:F1:01:8E:07:C0:F2
Authority key identifier: 93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E
Certificate issuer: /CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e
Certificate serial: 019A72CA47675FB80C9D1CB539C0C209C919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
Manifest number: 0521
Signing time: Tue 11 Nov 2025 12:00:50 +0000
Manifest this update: Tue 11 Nov 2025 12:00:50 +0000
Manifest next update: Wed 12 Nov 2025 12:00:50 +0000
Files and hashes: 1: 6ignIb5OCDRZa9htQBKWaTGmU9o.roa (hash: zSgV1vtphKXfQn8b1eScbKSqpXfajJgXTewaQSsjXpw=)
2: k61uOZkaLowJwa3lO-WV-LipQl4.crl (hash: dffg9mg0NtT8uBFzAM6Pe6f348baPtelDzFuYpnGKXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:47:67:5f:b8:0c:9d:1c:b5:39:c0:c2:09:c9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e
Validity
Not Before: Nov 11 12:00:50 2025 GMT
Not After : Nov 12 12:00:50 2025 GMT
Subject: CN=3084a9027bba6577f7fe833b9157f1018e07c0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:12:1e:9f:d7:7c:5a:88:ce:84:74:a2:4a:
bb:14:a3:35:b3:d7:e9:3c:2c:b2:04:24:ba:4d:2a:
5c:f2:f4:6a:78:de:92:96:3a:24:a3:2f:bc:6c:d3:
ed:5d:55:48:03:bb:ef:f9:ed:34:0a:0a:de:75:81:
a2:cf:98:66:da:00:46:1d:6b:cf:1b:4d:eb:f2:5c:
95:7d:8a:c8:2a:96:b9:40:85:68:d1:2a:39:b8:ff:
96:7e:68:56:e5:6d:9b:d7:8c:1b:16:07:a6:0b:d1:
f7:7a:4c:e0:2b:9c:45:be:4c:ba:a7:69:99:e7:c3:
89:43:ca:c2:b0:e3:38:85:45:4a:b8:a5:6b:c6:08:
15:40:a2:55:a8:49:a3:6e:a4:8d:39:8c:95:20:dd:
0a:80:22:db:0e:f1:20:7c:0d:ec:06:c4:09:8d:11:
0f:94:ff:78:84:bd:f8:7f:ef:5b:d1:69:0b:6e:0d:
86:1e:13:6b:a5:dd:cf:93:58:9c:63:65:9f:a3:b1:
c5:58:a3:5e:55:26:6a:56:ac:4f:34:e9:83:fd:ad:
3e:17:20:f9:f2:9c:e1:ba:bd:40:d6:f1:7b:d8:00:
16:d1:62:52:21:28:99:a5:6d:02:c7:e9:4b:69:3d:
6a:f4:13:4c:63:de:1c:90:2e:d1:15:d1:57:09:e6:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:84:A9:02:7B:BA:65:77:F7:FE:83:3B:91:57:F1:01:8E:07:C0:F2
X509v3 Authority Key Identifier:
keyid:93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:dd:77:cc:0f:20:8a:3e:96:36:87:9b:7c:83:da:fe:ea:c4:
1d:99:c7:25:b6:71:79:b7:a9:87:37:2f:45:da:5a:68:53:95:
fd:eb:92:76:22:05:9f:6b:bb:7f:a8:48:17:a9:15:d5:e7:31:
56:7f:a0:ba:2b:3f:60:ac:02:93:6a:8f:fe:cb:be:b2:61:26:
06:48:e7:aa:1e:f2:95:9d:58:b1:8e:ca:7f:b7:7f:a5:4c:1d:
0f:0c:18:77:88:86:6c:8c:18:b0:4e:0c:7b:5b:a7:18:a0:b2:
0b:44:cd:84:69:38:46:15:e8:16:41:9e:55:1c:c2:14:46:f9:
c4:65:c9:fa:08:18:29:96:d9:52:9e:b5:92:f0:a2:ad:2f:e9:
15:1f:dd:6c:ff:64:a7:ef:75:9c:a6:6e:02:a6:9d:ac:3d:e1:
83:4f:5a:1e:71:95:25:5d:d6:08:dd:ee:d1:5e:bd:cc:24:e7:
25:35:a4:85:aa:7c:60:04:67:90:04:ec:cb:55:24:d0:48:e1:
17:27:16:d2:a5:d1:a5:d1:fd:30:df:9b:9c:f6:56:7a:1c:8c:
f5:62:62:ed:e2:56:ce:55:16:7a:49:16:30:28:c7:f5:9f:f1:
87:ad:56:db:1a:df:34:f5:a4:36:01:53:13:91:84:5a:a9:ac:
e5:e0:01:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:42 2025 by rpki-client