Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: 1IGYQ0CgEBfkks6jhhZzOu09gbDi8n4ebhvlY3t+b5k=
Subject key identifier: 0E:A0:2D:8A:AF:DB:E6:1E:EF:11:D2:5C:58:92:C0:41:AF:23:37:DB
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 0199FDD9FC745D8AF377103EDAA1E5EF6D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0DF5
Signing time: Sun 19 Oct 2025 19:02:25 +0000
Manifest this update: Sun 19 Oct 2025 19:02:25 +0000
Manifest next update: Mon 20 Oct 2025 19:02:25 +0000
Files and hashes: 1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=)
2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: UjcLK5qaSxFAc+2lyDpefugxc8HUdzYa3IbyvBG44o4=)
3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:fc:74:5d:8a:f3:77:10:3e:da:a1:e5:ef:6d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Oct 19 19:02:25 2025 GMT
Not After : Oct 20 19:02:25 2025 GMT
Subject: CN=0ea02d8aafdbe61eef11d25c5892c041af2337db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:58:ab:ec:30:31:c9:5b:23:9a:4c:3f:f5:
d2:ba:d3:7e:9c:12:50:4b:86:04:a9:08:51:2c:38:
ce:02:c0:0b:dc:c2:51:ec:bf:1d:a1:ee:ca:1b:8c:
25:ab:7d:46:97:e0:23:0e:63:bf:06:1f:7d:4a:8a:
21:d7:08:cb:84:8f:e7:df:10:0f:68:ef:24:b0:96:
26:fd:2b:57:99:d3:8e:0e:f9:80:45:be:2e:e4:54:
c2:f1:e4:42:0d:ed:24:27:fa:7f:55:aa:31:ad:b3:
55:71:db:d6:db:d9:63:6c:d8:81:f1:3d:e7:73:35:
6b:4a:ab:8f:13:23:3f:47:a1:cf:de:d6:7a:1a:18:
aa:82:5a:75:0d:bd:32:21:55:a9:89:6b:da:f4:3f:
6a:f4:b7:73:55:ac:bd:57:7b:37:77:54:6e:6f:0b:
5c:5f:20:a6:6e:05:c3:93:91:3d:ab:05:f5:ee:fb:
83:b4:cb:95:24:ea:74:d3:1e:7d:82:f9:18:fe:b1:
66:f5:96:60:86:a7:be:e7:25:9b:93:e5:bf:a5:88:
84:b2:82:b6:45:d5:02:26:5b:3b:97:81:89:5e:d2:
c2:ba:01:42:fc:d6:26:4f:ca:3d:c2:92:58:cf:b5:
71:5d:de:58:50:f1:16:e0:93:34:77:d0:a6:44:b2:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A0:2D:8A:AF:DB:E6:1E:EF:11:D2:5C:58:92:C0:41:AF:23:37:DB
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:37:59:9d:b3:73:2f:86:60:a1:46:7c:6f:d5:86:5d:f1:28:
69:ac:b1:a2:0d:59:14:d2:98:ea:bd:2b:5e:66:7d:5a:aa:6a:
17:2b:62:fe:81:99:4d:4e:67:f6:cd:1f:97:bb:b4:0d:c7:94:
1c:86:86:48:8a:8e:0b:bc:6a:eb:4d:ae:ab:27:9a:64:bb:2d:
04:0a:d1:ef:ac:03:ed:26:c2:66:06:df:f2:20:6a:85:0d:bc:
80:52:0d:44:92:6a:db:6c:2c:7d:cf:8a:65:d7:19:64:62:a6:
76:aa:b7:e0:af:46:3d:6f:84:b6:5e:9b:91:6f:7d:f8:d0:e6:
4e:90:2e:f6:57:64:a9:97:b0:5e:79:e1:df:71:bf:6a:b9:b2:
94:58:e4:93:e8:07:71:34:b6:9e:b9:96:b7:68:09:83:2c:e5:
7e:dd:07:1d:c5:46:21:26:7b:df:94:27:19:19:35:fe:50:74:
ec:84:e2:10:f1:d3:d7:ec:43:c4:40:7a:ac:03:25:ab:54:b5:
d3:ed:c1:03:26:20:a5:3e:36:40:25:f4:f6:d6:aa:2f:53:95:
06:34:eb:7b:e6:30:71:59:9d:9d:de:b3:09:21:19:2a:9f:54:
83:3f:7b:97:e8:30:0d:01:32:23:cd:5d:fe:0a:3d:eb:b3:7a:
36:69:55:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:36:11 2025 by rpki-client