Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: ixlmWfg5+YLbYMOMtWXHe6FQ0/Zndu9OuYS4mrLrmp4=
Subject key identifier: 3F:EC:78:86:F4:A3:13:AF:B3:DE:10:E3:47:1C:95:30:93:2E:34:9E
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 0199FD6B161FB537C7D2610BEAAA4B486014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 1184
Signing time: Sun 19 Oct 2025 17:01:17 +0000
Manifest this update: Sun 19 Oct 2025 17:01:17 +0000
Manifest next update: Mon 20 Oct 2025 17:01:17 +0000
Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: O4CHF9wvRZWcIfKQws7Ff51U6qaIGrsF8YvU4+3ae8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:16:1f:b5:37:c7:d2:61:0b:ea:aa:4b:48:60:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Oct 19 17:01:17 2025 GMT
Not After : Oct 20 17:01:17 2025 GMT
Subject: CN=3fec7886f4a313afb3de10e3471c9530932e349e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:f3:79:a5:19:66:b8:5f:fe:e2:57:79:08:
36:b9:da:31:1f:1a:55:e9:71:be:7d:81:4f:f5:60:
2d:e1:40:b3:b2:66:04:52:dd:80:d2:31:74:41:82:
40:8b:d7:44:e9:bf:cd:29:3a:c5:e8:24:c6:59:48:
f3:ec:04:db:52:ca:aa:96:06:35:ca:cd:ab:5e:2f:
12:28:81:10:b2:c1:4f:bd:83:f5:17:05:29:b7:86:
82:ce:11:a3:bc:79:97:30:bb:8e:65:9c:92:0a:5f:
d8:ba:81:4a:8d:b7:73:bb:b3:0a:57:27:23:ec:38:
98:20:58:7b:9e:39:9f:e4:ce:48:4e:40:2e:6f:9b:
33:fd:7f:6a:ef:2b:51:b7:e0:8c:37:e3:58:c5:c0:
95:88:55:54:a4:57:1e:89:c8:4c:c1:05:82:0b:71:
96:4a:13:0b:f0:1e:df:1a:57:ef:1f:d5:57:b8:00:
0f:a7:5b:64:c1:40:3e:42:78:03:0b:1a:ea:93:6d:
02:f4:0e:59:26:1e:e8:5a:9f:2e:9b:34:ed:4a:e9:
15:ef:49:7c:1f:23:c5:7d:f0:c2:0f:30:90:10:dd:
21:63:24:30:dc:62:18:12:cd:5b:00:58:8a:59:16:
fd:16:49:b2:df:6b:0e:96:f9:59:e9:9a:19:f4:46:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:78:86:F4:A3:13:AF:B3:DE:10:E3:47:1C:95:30:93:2E:34:9E
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e6:b2:40:ac:50:f1:47:f3:78:23:34:97:87:7b:9f:e5:ab:
a6:56:c2:4d:5a:ad:d0:bd:cb:1d:cc:20:53:30:e4:ca:3b:6d:
a3:d0:2e:e9:d9:a4:85:c6:b7:cf:eb:5d:06:79:77:32:2f:f5:
98:fc:99:12:63:7f:fe:91:83:91:eb:67:96:c8:f5:cd:b6:6f:
23:1e:3e:bf:73:b2:0d:dc:91:eb:f4:ac:ed:a0:2e:c6:53:19:
99:47:4f:ce:40:db:6c:ea:19:45:f8:5d:59:95:dd:a8:6d:5d:
20:55:9a:ca:29:37:1b:c1:85:42:61:24:17:bd:20:46:db:2a:
7e:fb:e7:6e:37:70:ee:c9:35:76:03:ab:aa:eb:01:16:35:00:
c2:1f:06:05:6b:85:f0:a5:f4:a9:ac:c3:63:10:56:61:f4:bd:
35:4f:1a:a4:50:14:d0:39:ec:b9:8f:d9:14:aa:83:b6:3f:7c:
a0:cf:b1:54:3f:cc:60:34:19:14:5b:cf:0c:40:4f:cf:46:29:
78:3e:38:aa:18:20:5d:ca:db:6b:79:6e:88:9a:66:68:dd:62:
87:2e:42:73:e3:de:c3:b4:c0:f7:96:a1:b1:1c:c2:96:23:a2:
28:89:58:ef:38:3e:5c:01:6b:0b:3e:63:38:6b:0a:22:bc:75:
32:b6:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:09 2025 by rpki-client