Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File: k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier: TdIyxnydBpj+YLIlESWKXHpfpSuBT+cU8RWQexrVVzU=
Subject key identifier: 3C:B5:5C:A1:56:94:30:18:D3:22:86:61:FB:51:3C:38:4A:E7:BD:6B
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial: 019A711329733414E1656BAD865EA358E75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 04:01:12 +0000
Manifest this update: Tue 11 Nov 2025 04:01:12 +0000
Manifest next update: Wed 12 Nov 2025 04:01:12 +0000
Files and hashes: 1: gKy-M4ArOB2uxqprqRJ6fbGyEC8.roa (hash: MC8Gw1INJPJBRmJZki75GCuCmqozYCvUY/UxQ+rSFh0=)
2: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: 3qMQ91BQfL6xVBnamUDSUWThT+yzyC4xDdHTCmpeeuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:29:73:34:14:e1:65:6b:ad:86:5e:a3:58:e7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Validity
Not Before: Nov 11 04:01:12 2025 GMT
Not After : Nov 12 04:01:12 2025 GMT
Subject: CN=3cb55ca156943018d3228661fb513c384ae7bd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:fc:d6:95:10:59:13:2a:a1:f1:b0:c1:40:
bf:a5:e7:11:5e:ea:1e:56:49:17:e2:18:79:e8:dc:
db:71:8a:30:ba:0c:4a:cd:b7:a5:d9:78:df:b3:45:
04:f4:06:e1:32:75:11:47:00:6e:79:7c:f9:8b:bb:
9f:c9:f0:cc:9d:ba:dd:a6:cf:7a:65:0c:cd:21:d3:
6d:54:8d:3c:2b:48:c6:28:4b:2d:17:c7:05:4d:05:
9a:50:50:57:fd:81:9e:db:82:78:a3:38:f3:ee:42:
b1:f4:c5:98:6c:9a:1f:9e:85:e9:ea:e4:e4:15:f7:
38:87:01:76:1d:44:d0:27:31:e8:46:63:d4:bc:6a:
7e:43:0e:85:ce:d4:5e:a4:2b:56:ab:f6:dc:55:27:
bc:23:46:75:89:67:c1:f8:f9:d6:8d:46:f9:90:51:
26:ea:ab:8f:2f:7b:24:ed:5b:75:98:73:32:97:99:
58:fe:49:c5:bf:07:b6:ab:3b:66:ed:67:fd:01:33:
00:a4:35:59:38:d4:6e:a9:ce:eb:8d:03:21:24:a7:
66:c7:c9:26:47:42:0f:b9:76:c6:fd:49:4c:cc:e1:
d8:19:45:d8:34:56:9c:d9:5b:e9:93:45:ac:f8:f2:
7c:a1:44:3c:99:cf:64:83:ae:ad:97:aa:4c:5c:76:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B5:5C:A1:56:94:30:18:D3:22:86:61:FB:51:3C:38:4A:E7:BD:6B
X509v3 Authority Key Identifier:
keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:84:31:9a:eb:d7:74:b7:59:f3:91:13:0c:92:52:c3:ad:a3:
fa:22:15:af:d0:0e:27:7b:63:25:b6:a1:bd:8b:33:da:1c:bc:
de:b1:1d:20:2c:72:f0:07:85:cc:38:17:f5:0a:6b:4d:8a:9d:
cb:46:8e:6d:e5:ad:86:85:99:de:ce:bb:3c:29:01:46:47:5b:
8b:33:fc:37:93:fc:79:18:2d:74:e5:6c:a9:1f:bd:81:52:d2:
9b:71:74:6e:d2:81:da:18:f6:33:5d:2e:a3:ab:1e:d8:77:55:
af:38:20:37:14:45:2d:e4:a6:b7:d7:8c:c5:29:c9:4e:9b:c4:
1c:06:25:c9:b2:67:31:ac:34:58:1f:53:b2:6d:4d:20:53:45:
2f:e7:dc:e6:73:69:1f:12:df:ae:2f:bd:84:03:69:67:ca:11:
7f:88:b1:cc:83:1b:b7:7f:03:02:22:33:2d:47:aa:10:e6:45:
6d:24:c5:a7:3b:0d:af:4b:f9:8a:fe:37:00:b0:01:79:00:bd:
f0:02:6a:e1:fe:1f:16:55:4e:48:de:59:99:34:fb:ed:a2:40:
c5:17:9e:c0:bc:32:36:7b:1f:5c:9e:f9:25:37:64:06:8d:57:
63:e1:bb:ca:01:fe:9a:fd:8c:fb:ed:e5:da:c5:bc:72:0e:d4:
2d:e2:92:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:10 2025 by rpki-client