Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: vpa0RiGhzv0t/QYBXBR3B7fkOVN8XaGY869Cny0nbvQ=
Subject key identifier: 1B:5B:F4:61:B8:1B:9B:3D:50:E0:18:A4:FF:D5:1E:A2:95:56:CC:DA
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 0199FFC88F43CD1261FA483421EFD593F37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0DF6
Signing time: Mon 20 Oct 2025 04:02:37 +0000
Manifest this update: Mon 20 Oct 2025 04:02:37 +0000
Manifest next update: Tue 21 Oct 2025 04:02:37 +0000
Files and hashes: 1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=)
2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: VLjWvJXtJmVuJ7CrcvB9KlLatruxaBXAa6h0Q62vDjc=)
3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:8f:43:cd:12:61:fa:48:34:21:ef:d5:93:f3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Oct 20 04:02:37 2025 GMT
Not After : Oct 21 04:02:37 2025 GMT
Subject: CN=1b5bf461b81b9b3d50e018a4ffd51ea29556ccda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:9f:f8:8b:d6:0a:25:af:c2:f2:c5:5b:11:
45:37:35:cb:a2:fc:d9:a4:01:d6:54:75:ab:9f:57:
4c:f6:ff:8c:d8:9e:6e:5c:ca:b6:30:38:1a:9a:f1:
69:73:6f:ed:31:a4:7f:31:09:04:38:58:09:4f:59:
e3:c3:7a:0a:c6:e1:73:8b:52:38:c7:3f:16:79:5d:
9b:c5:20:95:63:7f:a0:62:dc:dc:b1:fb:c1:c6:3d:
6e:7c:18:87:3a:c8:a6:94:68:0d:fd:47:72:98:05:
cb:09:ed:26:50:ac:89:d2:20:4c:d7:d6:aa:36:e1:
93:47:f1:5b:1d:58:ed:87:77:6b:c1:72:dc:a1:d2:
ae:da:5a:3c:a0:b6:65:d7:56:ce:a6:c0:2c:9b:7f:
c7:2e:a2:b7:f5:1d:21:bd:6e:86:93:5e:ee:e9:cc:
8b:29:81:0c:30:70:dc:58:14:96:21:2e:d7:65:5b:
47:5f:0b:11:3e:06:fa:3e:33:71:af:c5:08:33:9a:
61:f2:63:17:db:64:a9:0f:b8:98:84:b0:e3:e8:7a:
a5:9f:66:a5:e3:1e:44:98:05:a9:f5:3c:49:27:1f:
78:6b:89:32:30:85:29:ff:be:75:ff:83:2a:3e:f5:
3e:87:6b:fb:75:07:5d:69:7a:57:65:11:47:c0:ab:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5B:F4:61:B8:1B:9B:3D:50:E0:18:A4:FF:D5:1E:A2:95:56:CC:DA
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2d:ff:b1:9f:d1:95:13:24:69:78:7b:44:2d:c7:34:93:28:
61:9a:7c:c6:6e:78:0b:d9:08:57:3f:1b:a7:82:e5:1d:ed:bd:
a7:2b:11:cc:aa:32:60:67:95:0b:42:46:a6:1b:33:40:08:d4:
24:8b:ac:67:b2:b9:e7:6b:d5:42:d9:1d:b2:db:22:18:24:9c:
ad:77:6d:71:62:58:e8:15:dc:b0:90:4c:27:43:51:3c:6d:f7:
08:bb:d5:47:b0:49:fc:0f:36:fb:eb:36:83:ff:c6:f5:69:02:
cc:5c:06:e2:ea:42:cc:3a:cc:23:e6:1a:f7:73:49:5e:76:ba:
d0:19:58:41:c7:9e:eb:06:e3:bf:0d:c1:22:87:b9:21:60:a9:
d1:94:21:8a:de:e4:0a:4a:e9:5a:56:a5:f7:fd:95:bb:0f:c9:
97:bd:ef:7f:74:1e:ae:43:e6:f3:bb:d0:84:59:2a:76:85:b0:
08:06:f3:0b:4e:a2:e7:25:a2:d9:1b:95:99:6f:67:74:e2:d8:
3d:a4:ce:3b:19:e7:ce:8d:d5:89:cb:a6:c7:e0:19:c2:f7:41:
2d:d2:f6:20:fb:14:9f:6a:4e:7d:ce:a8:b9:45:5d:74:8d:da:
8e:77:66:a7:03:e5:c8:ac:30:7b:b1:87:69:38:74:f8:8a:bc:
d8:e6:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:59 2025 by rpki-client