Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
File: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json)
Hash identifier: sPrA2mnNtETHDjxvh7E4ifP1EKyoEGEBhu/efrseqFU=
Subject key identifier: 8E:83:0A:54:B4:7D:25:8C:0A:8D:99:44:BC:18:9E:0C:08:26:ED:74
Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
Certificate issuer: /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Certificate serial: 019A729381127908633FFCB8A0570962E023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
Manifest number: 15BA
Signing time: Tue 11 Nov 2025 11:01:00 +0000
Manifest this update: Tue 11 Nov 2025 11:01:00 +0000
Manifest next update: Wed 12 Nov 2025 11:01:00 +0000
Files and hashes: 1: SX3vKCIesg7brXNXKPon4jGBLVQ.roa (hash: QbCrUZtkCCzMgLc9gxL+FBpDYE7YV20lMwm2mk5wzSk=)
2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: 9ZibP1W0CAcwyRyaigi54BPVJV+3PvcV4LKloCPe1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:81:12:79:08:63:3f:fc:b8:a0:57:09:62:e0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Validity
Not Before: Nov 11 11:01:00 2025 GMT
Not After : Nov 12 11:01:00 2025 GMT
Subject: CN=8e830a54b47d258c0a8d9944bc189e0c0826ed74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:e2:66:17:90:ef:fa:fc:99:8b:8f:c4:fd:
dd:b7:c4:7e:42:bc:a1:27:d6:53:10:7b:89:cf:6a:
0c:0b:eb:29:44:3c:87:ba:6c:d1:b3:39:5e:77:36:
f6:16:3c:cd:bc:98:a7:7a:68:f1:0e:5d:6f:43:8d:
ed:de:48:d1:03:53:ca:f0:51:c3:15:06:92:c8:4e:
4a:71:27:26:10:6d:bd:f1:5f:d1:14:6a:ea:95:a2:
17:ab:a2:f2:4c:46:3f:44:1b:91:6c:51:05:85:dc:
95:08:a0:9b:6f:4d:80:b9:f8:be:a4:74:02:e8:60:
3c:27:75:07:4e:b3:69:18:4d:d6:c5:ae:74:0e:42:
12:46:6c:c5:c5:2d:8c:e2:96:c4:17:ed:74:c1:2a:
cb:e7:a3:55:db:78:0f:4e:ac:2f:32:9e:af:69:d1:
09:5f:8f:1b:69:bf:a0:93:b0:42:93:cf:89:07:0a:
96:7c:f4:98:0a:a3:e8:5b:bd:67:c4:47:39:1f:1e:
a0:a5:ee:e0:55:54:b4:a3:7f:10:34:90:16:fe:2a:
26:59:54:60:e8:52:a1:32:2c:3e:b8:b0:7c:1c:dc:
e4:d3:61:c3:05:56:90:27:85:82:b9:68:3f:93:3a:
fe:78:c1:48:fc:36:f0:58:53:8c:f8:d8:3f:49:23:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:83:0A:54:B4:7D:25:8C:0A:8D:99:44:BC:18:9E:0C:08:26:ED:74
X509v3 Authority Key Identifier:
keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fa:47:3c:17:60:b4:b4:aa:d2:29:62:92:79:af:9d:f4:ae:
af:9c:c5:d7:d6:84:f8:d8:b9:1d:2e:34:fa:5e:bd:9f:b4:a8:
65:d5:a3:eb:9d:d4:6c:d1:5c:d3:a4:4e:4a:32:9e:98:ce:52:
62:4a:00:22:2d:93:9c:c3:a0:df:bb:9c:d3:74:72:47:20:c2:
ef:c1:27:fd:4c:d5:e3:58:27:05:38:73:23:4c:52:97:24:1d:
1f:60:8b:f4:be:34:8e:88:27:33:5d:4f:3a:e9:90:68:45:80:
86:24:ca:47:08:cf:fb:c7:0b:9b:28:be:85:14:5a:71:f3:6c:
0c:4e:94:77:84:26:24:0e:ed:6b:e2:f5:d9:67:0a:4e:76:c5:
e2:a8:0d:1d:8c:64:d8:76:9d:58:72:0a:fa:d5:da:15:85:31:
da:07:c6:e7:a6:42:f5:fc:57:d0:3e:e3:c7:8b:dc:e4:ba:e3:
b3:69:f5:5c:8c:c8:ca:c0:0a:81:17:cd:e4:93:6f:93:93:f4:
d5:29:10:9e:91:8b:aa:26:ad:8e:7e:3a:da:06:64:2f:c7:8d:
0b:25:7a:ad:d9:01:dd:20:7f:c3:89:bf:ac:92:8e:68:96:b5:
4f:ef:bf:70:21:22:60:65:bf:b1:dd:4f:7e:ac:75:3d:76:5f:
a4:f2:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:55 2025 by rpki-client