Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: 0omNn+Q2AQECC68pZKKS1RhNlyDOxNZriQZQv+NRKCs=
Subject key identifier: C4:72:F6:F2:A9:25:0A:BE:FB:2A:37:3F:0E:01:07:3B:43:07:11:A4
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 019A326A52B97BCAC4B799E3DD94F48A1BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 1700
Signing time: Thu 30 Oct 2025 00:00:20 +0000
Manifest this update: Thu 30 Oct 2025 00:00:20 +0000
Manifest next update: Fri 31 Oct 2025 00:00:20 +0000
Files and hashes: 1: 6d9Ml28WO2fAjTVW7MUT4p6IuIc.roa (hash: gkVSjCGx8IsHv5K/Qw9S9gdePh2YLb49mTKwa/5dQoA=)
2: ZO9mngdXNIl_VPA2Mn28l-sVzI0.roa (hash: hmCSaS0Wu7YEQqY6nNJRdpritFyq3hIDgudp8EuE1fw=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: 2WbnL7ajm3V5xauBcRY0SY+Xjo9d8f78dHP0YPMlN4Y=)
4: rd6hfh2x52BDGiRJllR6149itW8.roa (hash: CEiJf5vw/0k6qBwbBaFAB9ewgzEg3Zx08ds/2EBhN80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:6a:52:b9:7b:ca:c4:b7:99:e3:dd:94:f4:8a:1b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Oct 30 00:00:20 2025 GMT
Not After : Oct 31 00:00:20 2025 GMT
Subject: CN=c472f6f2a9250abefb2a373f0e01073b430711a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:3e:1e:a5:48:c3:c8:d1:86:ab:00:23:ce:
e4:de:03:99:9d:c9:c4:15:64:f4:61:7e:1c:7a:5b:
bf:4c:82:c8:a3:e8:fb:13:77:91:00:2d:53:16:23:
8c:76:25:bc:2a:c6:eb:d2:7f:f4:c4:be:31:88:b5:
e8:05:d9:7e:24:a3:27:be:a9:a1:24:34:15:a2:d3:
51:ca:84:8f:7a:d9:b2:e1:4d:93:9f:bd:c3:4c:51:
2d:8e:36:11:7a:f9:8e:00:23:23:89:a0:f9:bc:74:
65:03:1d:68:0f:50:48:3f:4e:01:54:ad:3a:c0:a9:
97:a2:ed:da:e9:fb:71:e9:c7:30:31:f8:57:ff:7e:
d8:3f:41:c7:db:63:65:95:cf:73:44:cc:aa:bd:bb:
a8:44:e6:54:dc:cf:9e:e7:03:14:c9:2f:d3:f1:be:
aa:69:23:80:c2:24:2b:65:a7:0e:4c:cc:82:29:13:
83:8a:b3:d1:43:0e:fe:cf:9e:93:24:0a:14:ae:a2:
77:c3:e9:35:ed:d6:ac:1b:a9:d0:f2:38:86:12:d0:
ad:48:0b:fb:e8:83:cc:e8:83:eb:fc:59:aa:0c:21:
35:7e:4f:9c:d2:cf:67:ad:23:78:d4:da:d5:e5:32:
c9:fa:f5:a8:bf:49:35:5d:5d:3f:d3:19:1a:cc:ee:
0b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:72:F6:F2:A9:25:0A:BE:FB:2A:37:3F:0E:01:07:3B:43:07:11:A4
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cd:aa:ec:8a:5c:c6:0a:58:57:ef:90:06:f7:6d:f1:39:34:
c4:c3:a4:07:95:44:40:28:23:59:54:30:37:4e:68:35:0f:f8:
4b:95:33:87:95:76:e0:40:59:bb:71:5f:3b:8c:62:04:c0:20:
a3:68:7a:1a:39:ac:18:a0:0b:7e:74:b3:50:5e:4d:10:65:85:
5e:03:06:5c:a8:50:73:36:8e:22:ed:e7:15:a5:af:89:f2:57:
bb:38:c3:b6:d0:b8:e2:7b:e7:53:ab:49:f4:74:6c:f4:4a:7a:
ce:63:d7:4e:52:3f:eb:7c:0b:31:a0:81:46:f4:47:7d:66:33:
f7:6f:2c:e3:d3:fc:a6:f1:ef:6a:07:f0:26:24:55:ed:b1:cd:
7c:37:4b:15:fe:f0:17:bc:01:03:58:50:d1:9d:45:4f:90:15:
98:a5:e7:6c:f5:1d:a3:55:a6:5b:f4:39:b7:f6:b2:7a:2d:d9:
de:c3:0a:0d:12:87:d9:2b:04:89:c6:7f:2c:09:01:7e:7f:91:
17:8b:cf:d6:de:6b:cc:27:ea:4a:f7:65:ec:f5:f5:a9:6f:40:
4a:0e:81:05:bb:68:26:0b:5c:c7:9a:49:95:fe:8c:ce:82:52:
97:94:a2:a6:37:ee:00:a3:91:04:4c:ae:71:b2:99:02:86:05:
b4:6b:37:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 07:04:25 2025 by rpki-client