Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: txCMANlZtWx4jrTNYstm/zJsl6YCB+pxsVrqOKkKAN0=
Subject key identifier: AB:0C:77:19:1A:5D:E4:05:4F:19:44:1D:BE:8A:B0:09:65:8E:CE:15
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 0199FBEBD079F0EC5E85880BD8B894A030DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: DWjeKEhsrCMQSkqXSu5F6-_lK2c.roa (hash: E/1JJ03/M4DXDyCYKLov4LZTD3sgsbYcGtynvXI+0ao=)
2: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: yaC/k2e+weuXEwqckzqQ9RWaWoqpLIiG7FW93e7sjEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d0:79:f0:ec:5e:85:88:0b:d8:b8:94:a0:30:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=ab0c77191a5de4054f19441dbe8ab009658ece15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:3b:fa:81:35:64:59:bb:79:60:db:f1:b7:
8e:0a:17:48:ca:8e:09:b4:da:06:4b:b4:df:d1:e9:
4f:6c:cb:8d:ab:6b:6f:4c:20:ce:26:fe:6b:1b:2b:
e9:22:ff:31:aa:56:a1:3a:36:57:d6:88:35:07:2e:
c9:90:be:1a:66:91:a5:bd:e4:b4:17:44:f3:6b:49:
b5:0b:a2:43:9b:be:c5:65:c4:0f:ef:d3:d8:6e:3a:
ec:be:f1:52:ae:93:57:76:ac:93:9d:8d:37:7a:a2:
24:0d:c9:58:a3:4e:46:ec:d0:55:3c:58:23:8e:c5:
32:ca:45:3a:d7:2b:5e:3d:e7:02:68:c6:fe:37:45:
cd:c2:fa:4c:3c:cb:34:29:ec:87:6f:65:66:d0:32:
94:c6:71:85:2b:e1:f2:f5:96:cc:dd:d2:b1:a6:c5:
87:3f:fa:52:34:b7:ab:8f:1e:20:41:5f:fc:dc:4a:
de:8d:da:42:8a:8e:0e:cf:f3:1e:50:ef:5c:aa:09:
8b:f5:e4:34:e1:0f:2b:97:1b:7e:de:2a:19:d4:c3:
d0:15:5a:d3:99:05:55:11:00:bf:1a:a7:aa:03:63:
ce:1f:10:08:a6:af:3c:29:eb:76:87:e1:a1:34:cb:
67:57:81:c9:37:a5:bd:e1:09:35:b1:9f:f3:74:0d:
ac:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0C:77:19:1A:5D:E4:05:4F:19:44:1D:BE:8A:B0:09:65:8E:CE:15
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d4:2f:6c:22:24:5c:8f:2e:26:1c:4a:04:7f:50:1d:d1:ca:
73:3b:e0:60:80:d3:63:28:c5:90:37:a2:06:e0:e4:51:29:f8:
83:39:45:8d:05:3a:2b:56:df:08:97:3f:87:1c:03:af:21:46:
43:42:7f:06:4f:b3:0e:23:06:e8:45:9d:f1:d3:be:fc:bc:57:
94:88:3a:ec:53:dd:af:a3:f4:c8:81:2c:7a:c1:41:f4:68:e4:
15:2c:76:28:3c:bd:91:e3:d4:ed:5e:4a:9e:cd:9c:52:c9:1e:
36:c6:69:25:c1:19:e8:3c:1d:83:90:c0:ba:14:61:9e:8f:c0:
3a:aa:c4:0c:1a:e9:6e:4e:a9:8d:05:f3:a0:ea:1c:f5:7f:64:
cb:3a:08:36:73:34:aa:ac:08:cc:d4:2e:30:7e:af:b5:42:0c:
45:4f:4e:97:7b:5c:98:a1:2a:8a:03:55:65:b4:6c:03:5c:66:
e6:0a:60:5c:a0:c0:d5:e0:c8:9e:35:e6:7b:ec:a0:84:9c:fb:
d7:33:5b:64:f3:18:5b:a6:81:31:4b:ca:b5:f9:d7:cc:b5:ed:
77:b8:f7:1a:d4:0b:0a:e3:92:87:bf:b9:77:66:72:ad:73:f7:
a1:da:3f:f5:3c:c8:1d:b3:0e:06:a2:cb:6c:4b:a8:08:98:ac:
73:4a:71:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:27 2025 by rpki-client