Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
File: kW-Aw18gLrAnZkGb-30oISX_4Vg.mft (raw, json)
Hash identifier: HOy72kjOyUMv3ymxFvwxzk91A43L9t5Y4KzbS3FJP28=
Subject key identifier: 0A:D5:2F:AD:64:B9:89:79:28:91:E5:A9:CB:25:98:E4:48:7A:58:C3
Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
Certificate issuer: /CN=916f80c35f202eb02766419bfb7d282125ffe158
Certificate serial: 0199FBEBFD01520225F57C7F94842D543911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: Nooohr4P5yKkhRHUp5WOKPpdMDs.roa (hash: yQvSjkqhAqaWpvZ1QnemaJY2V/F+jwI7osUi/29zs8c=)
2: kW-Aw18gLrAnZkGb-30oISX_4Vg.crl (hash: E7wW8r28joA+Yx+YslYvNO7MEYESgi09F16OrqnFk48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fd:01:52:02:25:f5:7c:7f:94:84:2d:54:39:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=0ad52fad64b989792891e5a9cb2598e4487a58c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:af:2b:1e:21:d1:9a:3a:bf:1b:7d:3b:1b:
ee:dd:a8:fa:1a:f9:57:72:28:47:ae:3a:14:cc:bf:
0a:b4:aa:1e:5d:29:d3:6a:38:47:a0:33:94:df:96:
e9:d9:8e:5a:63:c2:19:3b:7b:5a:9a:76:5d:3b:dc:
a4:3c:3a:2e:80:3d:1b:56:06:e9:e9:6a:48:85:83:
1d:e8:34:6a:63:cf:21:72:2f:db:fe:75:12:0c:57:
59:ce:48:be:0c:7b:89:56:0a:46:64:7d:ef:6f:6d:
34:f7:1e:4c:76:28:6d:49:86:52:46:39:35:25:1f:
2e:7b:1b:c0:31:d4:27:aa:0b:d5:9c:0b:c4:5a:0b:
8d:32:51:13:c4:d1:ec:ec:c7:72:da:d6:62:c9:24:
5c:09:1a:38:2e:eb:ba:80:1d:b4:55:76:72:ca:09:
ad:c4:c4:23:09:b7:52:20:8e:e0:5b:94:c7:8a:4d:
ea:38:81:93:b1:25:03:0c:8f:db:fd:32:16:5d:ce:
22:f3:3a:c7:20:f0:29:12:84:24:70:cd:8d:eb:ed:
7d:ab:8e:95:ea:7b:a3:99:46:74:47:31:fc:78:c6:
5d:f5:c0:82:eb:9f:2e:07:c2:5a:24:19:65:5b:b3:
93:8f:2c:17:47:0b:19:a9:55:f3:23:79:dd:b0:b5:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D5:2F:AD:64:B9:89:79:28:91:E5:A9:CB:25:98:E4:48:7A:58:C3
X509v3 Authority Key Identifier:
keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ca:79:8d:3e:5e:ff:bf:19:a7:bd:8a:d5:ff:50:10:91:4d:
cd:13:5d:d1:ad:c0:97:4a:e3:2d:a7:b0:03:f6:72:d6:ec:a0:
de:b9:de:d5:e6:76:da:04:d8:4c:54:8a:a8:ba:ee:09:52:f3:
d8:8c:f3:26:b5:84:32:fb:14:66:8a:cb:75:91:0f:52:7a:e5:
70:88:12:6d:0c:c4:a0:93:e9:60:9d:1b:5c:a0:1c:3b:1a:b6:
4f:af:04:6c:82:12:20:e5:0c:f0:ce:cd:04:c9:e2:5b:46:93:
ce:46:91:63:2d:10:f1:f9:b9:03:26:0c:fb:5f:1c:f8:ce:22:
26:84:0c:38:05:e3:6a:2f:30:cd:2c:e7:ec:e1:58:dd:65:ba:
89:4c:90:61:40:e5:53:11:f2:a0:29:db:09:ac:43:df:c6:86:
94:87:12:e8:f3:06:f8:a8:7b:7c:fe:0f:35:13:96:67:81:31:
ef:1e:a6:91:24:02:76:bd:9a:1d:fc:e2:26:e3:63:20:3e:eb:
09:73:d1:1c:d9:f5:78:5f:31:57:57:1c:3f:30:95:63:2d:ce:
e9:08:77:a6:36:f9:59:1e:80:0d:41:5d:93:b3:76:69:8f:d3:
f1:30:20:f0:43:51:4d:d7:f4:cb:72:bb:2a:2d:0b:5e:80:9e:
5d:ba:9f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:34 2025 by rpki-client