Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
File: kI7SZXsDRI2ii8JIwvfsSXPabjs.mft (raw, json)
Hash identifier: aVMiGqfNxFYUvYLoQQgXou3lsQI+qbcYQWcn8K27ntU=
Subject key identifier: 9C:75:54:D7:F9:BF:61:D1:73:0C:6A:3D:AA:E3:EF:04:41:E6:0F:9E
Authority key identifier: 90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B
Certificate issuer: /CN=908ed2657b03448da28bc248c2f7ec4973da6e3b
Certificate serial: 019A71B793BDDF131E52CF585EFEE4C8AFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
Manifest number: 25
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: TcSp7o6uwH24irSRe8iMFLsbk94.roa (hash: c25HUD+HppjHQuOQwqciQrtoVauED60d+2+faqqkKIY=)
2: kI7SZXsDRI2ii8JIwvfsSXPabjs.crl (hash: qwfg5GDn3SYp96n3XLcjxbcv8u9ovqAROq2K7TPH7eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:93:bd:df:13:1e:52:cf:58:5e:fe:e4:c8:af:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908ed2657b03448da28bc248c2f7ec4973da6e3b
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=9c7554d7f9bf61d1730c6a3daae3ef0441e60f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:cf:00:98:db:42:29:fa:db:13:99:78:d9:
1f:33:20:c7:29:c7:42:7c:ce:63:f7:9a:df:e2:8d:
98:48:6e:45:48:c8:16:7b:e1:6a:90:27:76:10:86:
46:55:c9:48:5f:e3:87:52:91:c0:63:8b:45:b8:e6:
8e:45:51:3f:1f:08:b4:6e:50:44:52:a8:74:64:5e:
46:68:12:76:88:50:b4:10:62:e0:b2:8c:e6:8e:15:
35:43:1f:ec:7c:94:32:8a:2b:e1:85:cb:29:68:ce:
3e:16:03:3f:21:7c:6c:95:ed:98:f9:42:02:70:6e:
8e:ba:94:0b:46:fa:da:dd:1d:78:06:2d:ce:6d:24:
ad:34:6e:ea:48:4a:78:2f:4e:9a:a4:c0:57:81:2b:
1f:ab:9c:fc:40:1b:d4:34:78:46:40:13:21:41:a7:
79:37:b3:e3:7a:42:5c:8d:5c:69:4c:e8:a6:3c:51:
79:6b:ed:cc:a7:81:71:7e:3b:2c:46:1c:69:c1:d9:
0c:7b:42:3b:1b:f3:ae:df:fb:8f:81:f4:d9:23:aa:
a7:21:a1:a9:3d:23:0f:37:e3:d9:7d:c7:4c:fd:44:
70:65:d8:9e:f6:5d:1b:8e:be:b8:a3:4c:3b:8b:ed:
ac:14:90:7b:7b:af:bc:99:27:83:a7:ee:8c:ea:dd:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:75:54:D7:F9:BF:61:D1:73:0C:6A:3D:AA:E3:EF:04:41:E6:0F:9E
X509v3 Authority Key Identifier:
keyid:90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:25:3d:e4:50:10:a5:bc:35:df:ea:bc:24:e8:f7:90:aa:5c:
05:98:23:54:62:5f:c9:bf:af:2c:37:29:8f:07:7d:98:b1:c1:
61:18:8d:3f:b5:34:d6:71:e8:27:d9:3f:1c:a9:25:84:6f:62:
57:c8:8d:89:62:8a:69:80:61:69:19:9d:2d:31:68:a5:56:8d:
25:24:ee:f3:16:68:07:11:26:61:fb:33:d8:11:ae:e7:46:61:
a0:a3:7b:75:13:db:c9:f1:db:23:d5:df:2e:28:f1:5d:88:b5:
08:4f:cb:f6:7a:b0:8a:bb:40:33:b8:cd:59:4a:3e:f6:fd:23:
2a:0f:1c:91:cf:86:f5:cb:d4:85:10:4c:a1:0e:ae:a1:45:85:
2c:93:a3:c9:ab:09:6a:62:2f:6d:f6:9c:d1:56:31:29:a1:d0:
cf:80:cb:76:fd:79:63:f1:00:aa:46:1c:9c:bd:34:2a:24:80:
17:74:d5:fb:cf:1e:d6:04:25:08:11:06:8b:a0:fb:ca:8a:69:
88:6b:a2:e8:93:98:96:9c:8a:eb:a3:1b:77:6b:52:df:10:4d:
84:1b:0b:e3:83:74:c4:31:98:6e:64:31:8f:a5:06:a8:c3:de:
27:23:4f:8b:36:01:d7:8d:76:a7:5a:ef:b5:62:5c:2d:d2:dd:
41:24:ba:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:36 2025 by rpki-client