Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: qWcMlXYnIGAvTbLQKiHo1FzEse9dTwD3Si9P/JzWlLU=
Subject key identifier: D7:81:BB:11:82:40:77:CA:15:40:C7:AC:59:DB:C1:AC:C3:22:4F:9E
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 0199FC590FDD88D6AD46F21A004FEE44FA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: 0eBNXDs625wWt3eSViaFroIf-H4.roa (hash: GT9Q8SAk5DHsclX/025XYQZy9SsVDxGpUQis2WozehI=)
2: k4iKGO7UoCQelG-VE7Zb37GDHAA.roa (hash: CfgOFR+eRUjr0ITmkPf/YrPGm8/0mSRvig8pVJqGkMU=)
3: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: 96zxkESN9DBzkT0C1cn0jMg3mvuvIDTcSXPmN8gQM5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0f:dd:88:d6:ad:46:f2:1a:00:4f:ee:44:fa:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=d781bb11824077ca1540c7ac59dbc1acc3224f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d3:4b:20:a1:74:e0:99:5e:bb:f5:1e:e7:32:
5f:f2:0f:02:4a:ed:9e:7e:73:d1:d8:b2:1a:9e:36:
e2:64:0f:5e:32:94:18:33:86:da:cf:ec:7b:33:a7:
c7:08:d8:8e:85:36:25:a2:35:53:65:83:48:b2:64:
c8:89:46:1a:cc:74:76:8c:40:ed:ea:ca:6f:7c:49:
4d:ce:bf:69:4a:97:59:a8:95:c3:35:c7:b7:2d:47:
ff:94:31:85:0d:c0:cd:c1:bc:15:78:ca:7b:52:c5:
b6:9c:0b:af:fb:42:17:dc:14:0d:f9:ac:17:66:f3:
1c:47:0c:8c:97:f8:35:e0:95:5e:41:8f:74:b8:b0:
6d:4e:d1:d5:93:cb:b5:ab:0f:ed:e8:fd:62:0a:58:
9c:60:ab:43:8c:71:d3:09:6e:a3:f9:04:b8:86:2b:
e7:99:ab:23:87:40:fa:15:88:d0:1c:ee:b2:49:d8:
15:63:31:12:10:34:26:a7:f3:04:e8:78:e6:ed:c8:
9e:04:78:d0:70:4b:7a:7f:6a:a9:9e:24:30:31:63:
d2:fd:2b:67:4e:71:4d:00:63:b9:8d:27:7f:32:5e:
7f:3a:e8:24:25:76:52:05:2a:f3:d2:bc:23:2e:36:
db:0d:50:74:ed:b2:30:12:ce:5f:90:4f:f6:70:86:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:81:BB:11:82:40:77:CA:15:40:C7:AC:59:DB:C1:AC:C3:22:4F:9E
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9a:bb:b9:3b:bb:3a:d6:38:71:c0:cc:a8:73:c0:00:6c:8f:
7e:bf:17:d2:df:a3:6a:c5:74:31:0f:f0:41:70:f7:14:58:8f:
8f:7c:30:a9:80:6e:05:d8:b9:d1:fb:94:e1:bb:e5:75:b3:64:
2b:1e:02:81:1f:33:7a:96:00:e9:27:1a:82:36:2f:ba:bc:6a:
e4:6a:85:58:99:5c:8b:6a:29:22:8e:28:ad:63:5f:12:ea:9b:
ad:a6:64:66:42:93:c4:6a:b6:a8:9d:52:49:db:b3:ea:83:02:
a8:89:01:ab:65:7b:8f:5c:77:19:45:d2:55:8f:cb:30:93:3e:
79:91:c3:4a:44:2c:58:3c:44:01:7f:43:34:0b:da:0d:0c:69:
0c:0b:b4:43:fc:1f:f3:d1:84:48:3d:db:db:4c:a0:ee:71:0f:
d5:df:9d:a0:4a:b1:3e:3e:b2:a0:31:5a:f9:68:08:61:09:88:
62:65:cb:63:b7:9e:05:fd:d6:ad:2f:33:32:15:76:e5:f8:8e:
e2:a6:7f:56:17:c0:c5:76:63:0c:9d:aa:df:c7:88:1b:dd:e8:
b0:ac:c5:38:53:71:91:46:ad:e4:74:b1:69:28:3f:8f:a4:6e:
0e:b0:6a:d8:e9:db:4c:65:73:6c:bc:db:ac:5b:55:e6:52:53:
bc:64:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:32 2025 by rpki-client