Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier: fndQsCWhrW0JPn7np1hbKxkNXVVgYhI5Q70X6PaTfrE=
Subject key identifier: E5:B2:E6:AD:C2:C1:10:4E:72:6E:2C:4B:3E:6D:9A:D3:26:01:BB:F8
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 019A330F158B9FF08C6BC1FC43DC622EE704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number: 1706
Signing time: Thu 30 Oct 2025 03:00:17 +0000
Manifest this update: Thu 30 Oct 2025 03:00:17 +0000
Manifest next update: Fri 31 Oct 2025 03:00:17 +0000
Files and hashes: 1: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (hash: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=)
2: jyrC-t0H_GkAg2c88y9tSfnyeDQ.roa (hash: QuK2j2bldMS2fMD4ill15moXvawQIfM3BSjaK9rkpUw=)
3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: MrjMJt4obykeTzrpoF0sgYupfowH/3IlMUbRUppxG+c=)
4: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (hash: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:0f:15:8b:9f:f0:8c:6b:c1:fc:43:dc:62:2e:e7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Oct 30 03:00:17 2025 GMT
Not After : Oct 31 03:00:17 2025 GMT
Subject: CN=e5b2e6adc2c1104e726e2c4b3e6d9ad32601bbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:d2:10:95:d4:bf:5c:8c:d1:77:27:de:d1:
0d:bb:74:30:51:37:2b:9f:82:65:0b:e8:c3:b7:28:
2c:64:00:f1:cb:ec:ac:5e:fe:55:e9:3a:52:2e:8e:
ce:98:2b:52:af:40:82:ad:ca:eb:ef:ed:76:2f:0b:
f2:cb:70:78:60:c3:0c:99:cc:3a:ff:56:ed:e4:08:
55:3f:09:a0:85:a9:08:9a:9f:13:bd:c7:e1:3b:98:
68:e2:e0:9d:3b:b4:74:e6:29:67:28:07:3c:c6:63:
af:1f:75:92:d9:9f:3f:1d:e5:30:7e:9b:97:d9:00:
da:fc:58:e8:6b:d4:ab:67:37:b9:d0:eb:2c:79:c0:
7e:1d:bc:a5:3c:47:35:26:cd:ee:cc:26:86:61:ec:
10:d0:f7:11:67:86:25:00:46:36:4c:25:86:e1:4b:
79:95:a1:2e:2f:13:88:4b:9b:3d:23:9b:08:1d:9d:
11:48:fa:96:05:3b:be:bb:b0:29:fc:83:7e:b7:d0:
63:7c:6a:16:b6:28:17:22:f6:9d:75:a8:44:63:15:
e1:7f:8d:3c:91:41:13:a1:f7:01:ae:80:37:4d:0a:
84:14:84:00:7e:f5:fd:0f:60:f2:27:62:cd:da:8c:
12:cf:0e:23:87:23:70:92:0e:c7:c6:ec:59:db:45:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B2:E6:AD:C2:C1:10:4E:72:6E:2C:4B:3E:6D:9A:D3:26:01:BB:F8
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:73:c8:b6:4f:5d:bd:79:ca:3b:48:ba:f7:dd:67:d0:94:c0:
f9:f2:13:61:2d:57:a3:b5:d2:84:95:04:76:4a:3f:95:8c:6b:
c0:73:41:32:f0:81:7f:1d:43:d8:cd:58:67:f3:1e:e4:b2:84:
1d:04:0b:91:21:d0:02:90:21:e4:81:e5:a8:97:b0:99:2b:6a:
3c:a8:3a:c5:51:79:9a:b5:d6:65:2e:28:ed:8d:3d:cc:59:f4:
15:67:18:3f:78:e2:0d:c7:7c:27:c0:01:a2:fd:25:26:77:5a:
8c:49:cf:1c:c0:f8:07:89:1a:a6:8d:a2:ba:a4:15:43:46:59:
31:8e:ba:09:11:3d:b9:e5:71:94:2e:b1:9d:8c:4d:96:59:f3:
c7:91:ed:ae:7d:ea:cd:87:7d:6a:0d:5a:c7:64:21:db:b6:2e:
08:8c:86:6b:24:19:03:9d:a5:db:f0:b5:61:64:de:94:aa:e9:
ec:d9:a0:f6:8b:52:16:19:4d:71:40:7b:ce:ca:4e:16:11:6e:
7b:1e:4e:05:12:b3:c3:f7:16:24:b1:09:af:bc:39:88:35:1a:
80:09:e3:b5:94:65:ce:66:52:23:3f:d7:1c:1c:8c:77:b0:29:
24:05:5a:70:0d:06:97:65:26:de:75:ab:52:fb:d4:f0:4a:2b:
f7:52:85:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 05:58:49 2025 by rpki-client