Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: YzWShNe1aACNZVtBdp0/plUAX7MDOXWtMB3aNoH2KO8=
Subject key identifier: F2:79:C2:D0:FE:5E:C7:2C:90:6E:0B:4C:7C:BB:6F:F7:DF:F6:42:2B
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 0199FC5854B6DE80C2CEC77BB9681E59EA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 1147
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: z5o9tKYB01iSiyhzldhxQ6uSzgrCOT8p8HI6I4QCZMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:54:b6:de:80:c2:ce:c7:7b:b9:68:1e:59:ea:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=f279c2d0fe5ec72c906e0b4c7cbb6ff7dff6422b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:ca:fa:24:e1:2b:8d:c5:db:7d:d5:9a:26:
56:b3:d1:f5:d5:f5:96:4f:56:0b:89:6e:c8:86:f8:
d6:1e:d9:d8:f5:0b:68:93:8e:1f:1e:17:22:ba:b7:
b2:27:57:92:08:45:35:3e:fc:6b:04:58:3f:bd:b0:
e9:17:2d:4c:9a:47:ad:96:0f:bf:c5:7c:90:26:b6:
22:18:a2:8a:c1:27:9d:e8:a3:6a:eb:34:38:25:02:
11:d7:4f:ab:36:9e:de:62:82:6d:7d:0c:1d:ce:78:
d7:51:41:51:9c:b6:31:e5:e3:43:72:a0:b2:28:83:
95:61:7d:7d:0b:33:5a:78:3b:2c:97:3d:ef:0e:a3:
1f:b0:6a:73:66:79:02:4b:e1:0b:71:48:9a:2f:64:
ae:cb:6a:e5:da:cb:74:46:bf:7f:c0:d6:bd:e8:4b:
f9:ef:2d:f0:8b:c4:ef:88:2e:0f:25:a0:0d:85:e9:
1a:7b:f9:dc:f7:e2:4e:9b:82:dc:d3:3f:7a:fd:c1:
4a:94:32:e9:7b:d2:93:23:72:4e:de:e7:93:e5:b3:
78:9f:1c:e3:25:23:e1:d1:d1:58:a9:fc:4d:4e:5f:
3a:f0:2e:f9:3d:84:42:3f:22:c7:1c:9e:a4:53:b1:
5a:0a:78:d1:32:00:26:05:33:1e:dd:1b:3a:c9:e1:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:C2:D0:FE:5E:C7:2C:90:6E:0B:4C:7C:BB:6F:F7:DF:F6:42:2B
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ad:59:4d:a2:a4:04:06:f2:e6:45:10:c3:b9:8a:60:8e:4a:
56:12:9a:cb:e0:f2:1d:71:55:41:ba:65:9c:06:87:3d:1f:71:
44:5c:26:35:d8:68:dd:13:5e:12:b3:31:55:3b:2c:d7:dd:b3:
61:bb:2b:78:67:62:36:5e:42:3d:7b:1e:e2:4b:45:e5:9c:b6:
f3:91:5f:73:85:3b:c1:d6:e0:c6:37:92:2a:41:1a:4d:22:82:
b0:21:68:78:e7:18:fc:bf:9a:65:70:f1:91:eb:19:aa:7b:d6:
25:cc:1c:76:20:d9:2a:c8:9d:a1:c3:ad:50:72:2c:5b:fc:01:
8e:cb:e2:ab:c0:c5:d2:d9:34:10:ea:23:b2:00:7d:35:94:ab:
cf:04:d5:11:ae:37:88:c5:7a:b3:67:8c:89:d7:8c:f5:6c:94:
a7:1c:07:ce:dd:24:5e:7b:5f:d7:34:3c:91:02:56:1d:86:9b:
30:2c:b8:32:e4:20:1a:c2:86:e2:d8:67:d2:7f:77:07:69:ca:
a0:4e:b7:ed:d1:33:cc:e5:c9:fd:a3:b7:b8:32:68:4e:89:ec:
e9:8c:4e:a3:1d:ae:c4:df:f7:0d:ae:1e:a1:03:73:49:98:7f:
e1:96:2e:10:54:3f:94:d1:32:62:31:92:a0:9d:3f:64:3d:9a:
7f:ab:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:39 2025 by rpki-client