Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier: 5qdDDP7MiSjer/sqvDg+ymDS6ExJCz4WVAyuVe+CknQ=
Subject key identifier: DC:06:7A:89:0F:A3:FB:89:66:FA:E8:70:DB:EC:A2:39:99:7C:83:BA
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial: 019A3E01046BE1156589811BC5F92FF1181B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number: 06AF
Signing time: Sat 01 Nov 2025 06:00:45 +0000
Manifest this update: Sat 01 Nov 2025 06:00:45 +0000
Manifest next update: Sun 02 Nov 2025 06:00:45 +0000
Files and hashes: 1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=)
2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: 2N7NO3CMtwTWnd24v7pKRkv7Qsx8pp/++J7iWntX398=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:01:04:6b:e1:15:65:89:81:1b:c5:f9:2f:f1:18:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
Validity
Not Before: Nov 1 06:00:45 2025 GMT
Not After : Nov 2 06:00:45 2025 GMT
Subject: CN=dc067a890fa3fb8966fae870dbeca239997c83ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a9:46:52:1c:43:50:e0:6d:2a:c2:d2:64:14:
92:57:a3:63:4c:46:37:b7:c6:6f:0c:7a:5c:7a:be:
b2:c2:05:8f:dc:ac:9b:81:2e:9e:f2:e0:6e:f5:41:
6a:c9:4c:07:97:67:aa:12:17:c4:52:5f:79:5b:5e:
44:02:32:db:ae:61:e3:b6:69:4e:08:e1:ee:09:ed:
3a:f1:53:cc:54:5f:92:5e:94:ab:20:92:ca:6f:8d:
0a:93:50:6f:d1:b7:af:50:2d:8b:1f:34:f0:03:55:
d8:5b:78:4d:45:dc:8d:67:4b:8a:80:f5:d2:1a:01:
96:ea:cd:f1:ef:2f:9a:e5:cd:a1:ac:cf:38:9e:ac:
e7:82:51:c1:07:93:d3:de:92:f4:61:64:10:e7:f7:
f3:3b:cf:b4:f5:ad:9f:77:d5:5d:90:3d:11:f9:ce:
f3:e5:8a:36:c8:99:92:59:3d:b3:4d:59:9b:d4:a4:
48:60:2c:f3:47:eb:4f:cd:73:17:74:bb:48:c9:5a:
cc:15:d0:30:8c:4b:50:da:e3:50:fa:41:e5:5d:e8:
87:ec:27:92:e4:e6:24:1e:68:69:2e:d8:8d:be:da:
92:b0:43:90:6e:47:63:fb:13:c1:e2:05:d6:b7:28:
38:c5:0d:d9:eb:9f:96:22:3a:f2:48:b2:56:c7:58:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:7A:89:0F:A3:FB:89:66:FA:E8:70:DB:EC:A2:39:99:7C:83:BA
X509v3 Authority Key Identifier:
keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0e:71:9f:29:d4:ca:9c:b7:df:d9:55:11:0c:87:2c:fd:3e:
0a:e6:fc:a3:4c:64:9f:85:f9:a1:40:5b:33:a0:28:04:9c:aa:
c8:84:7d:bf:28:c0:25:cc:46:c7:60:53:c8:e9:7a:7a:01:6d:
f5:6d:10:d2:ff:5d:00:0d:f8:b3:76:46:bd:cd:ef:b4:e2:06:
37:bd:e7:f8:e9:0b:bf:b2:e9:44:e9:a9:1d:3b:70:3f:28:d9:
eb:78:6a:77:4e:8c:ff:38:48:6d:f8:09:ac:3d:c3:65:14:b9:
de:ab:66:b5:f8:b9:de:80:63:af:3d:88:cc:ca:a7:b6:2a:f4:
c6:61:de:d9:3a:16:02:0d:00:d9:bb:b3:e2:df:38:d6:1a:aa:
a4:94:9c:d5:f5:0b:40:f5:f3:7b:25:44:3b:5e:01:07:48:66:
b6:be:f4:18:71:20:4d:bd:82:1c:5f:c9:19:ce:cf:f3:e0:f5:
b0:c3:6e:a0:23:2f:ab:cf:ee:21:82:ef:3c:10:99:8c:15:da:
34:af:7e:b0:22:0b:d3:90:27:b6:8f:32:55:b2:54:96:88:61:
f2:28:81:e0:54:ac:5b:a5:b5:af:03:51:8a:5f:f5:7a:8f:d0:
79:14:7d:98:5f:4d:9f:68:62:ba:fc:44:c5:0c:d6:2f:dc:5c:
9c:e2:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:10:37 2025 by rpki-client