Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: V6BhV7azcs6VN70GXniPME/ZUDqkouTCEzHBMxzLtAU=
Subject key identifier: 4F:FB:D5:2A:10:E3:D5:2C:26:7A:33:31:6B:99:BD:8A:D1:42:02:3D
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019A71B779437C88ADC012F9A2BAAD5E79F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 0194
Signing time: Tue 11 Nov 2025 07:00:40 +0000
Manifest this update: Tue 11 Nov 2025 07:00:40 +0000
Manifest next update: Wed 12 Nov 2025 07:00:40 +0000
Files and hashes: 1: dlXIk7WimVWVHc3ungqiNoZMusw.roa (hash: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: /Qo9gIbVr2rhH9sQT4gsOT8vWk7E7VQi9oCBclQktxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:79:43:7c:88:ad:c0:12:f9:a2:ba:ad:5e:79:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Nov 11 07:00:40 2025 GMT
Not After : Nov 12 07:00:40 2025 GMT
Subject: CN=4ffbd52a10e3d52c267a33316b99bd8ad142023d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:0f:29:4a:62:c6:4b:9d:89:a7:5e:4b:f4:
86:8c:e0:d3:8c:6c:56:8f:54:19:07:76:99:fc:20:
6f:16:9c:9a:42:27:7c:cb:fa:f7:43:70:63:25:84:
43:7e:4a:40:37:f2:28:82:cc:d6:e1:8f:97:7f:ca:
a8:c2:32:90:ec:62:6e:ad:88:61:3b:7b:3d:b5:2a:
57:c1:2b:e0:26:41:b9:96:3a:1e:35:7b:95:bd:12:
aa:c7:f0:2e:b5:f7:77:75:08:7e:09:fe:89:27:9c:
e1:d5:ff:e2:b7:0f:51:75:72:20:70:61:c5:fc:b8:
51:ba:40:c7:05:53:fa:95:89:ce:c9:17:3f:48:13:
94:d2:84:91:ff:81:43:1b:07:d6:8f:8b:55:6b:15:
ef:ea:8b:fa:ab:d5:6c:f6:f5:ce:dd:85:0f:7a:88:
55:e5:99:4b:86:c7:78:46:dc:55:e7:35:5e:fe:b9:
31:a7:1c:db:94:9f:de:d5:32:c3:ae:0c:98:39:25:
8e:4c:d4:95:2c:4c:57:80:50:4b:ef:03:5a:7c:2c:
c3:e1:4a:1b:e4:c4:19:30:5e:52:a3:9b:46:8b:cc:
eb:dc:97:02:48:36:b6:8d:97:b2:6b:92:2b:28:35:
9f:69:73:b8:af:f9:f8:ad:19:a1:0b:bf:21:2b:23:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FB:D5:2A:10:E3:D5:2C:26:7A:33:31:6B:99:BD:8A:D1:42:02:3D
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:82:bc:ee:42:09:b0:96:50:0e:1a:12:90:85:9a:a2:7a:05:
e0:16:65:64:b8:97:62:61:57:e9:d1:f7:d5:d3:99:7e:7b:98:
90:24:4e:8c:b9:7c:e0:a4:c6:ca:58:b9:1e:2d:99:dc:ea:4d:
70:0f:c9:02:37:5c:3d:fa:57:d1:80:40:95:91:1e:fc:1a:ab:
6f:20:03:ae:f9:49:53:35:34:84:7e:0d:ab:8c:ae:6c:07:9a:
25:4e:a5:60:34:3c:10:20:53:aa:1f:c1:b9:a2:1b:9f:5d:57:
6d:cb:00:e4:8c:d4:1b:0f:5b:75:e0:48:03:03:0b:b5:0e:a6:
e2:d0:0b:69:52:71:e0:41:e7:d8:b3:6d:15:82:28:c5:f7:5e:
61:f2:84:51:b5:56:d8:6d:8b:bb:ef:15:74:3a:25:a7:ee:7d:
28:50:99:aa:b3:6a:73:cc:d9:8c:a1:d8:1f:6e:56:85:4a:3a:
68:1d:77:0a:6d:f3:36:1f:44:a8:2e:cf:cb:6c:89:fd:bd:04:
75:ae:a4:ab:b3:dd:91:54:b4:ba:03:91:79:c1:14:bf:04:7f:
3b:91:9f:93:fc:66:45:56:3e:2a:8b:b8:8b:f6:07:ce:a6:c5:
5e:fa:62:e2:f8:a1:ba:12:87:48:06:f7:85:4d:52:9d:71:a2:
67:6d:c6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:38 2025 by rpki-client