Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File: k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier: aYtckEttT/sETnw2vV3wFqmAX4QSCZu02GLBKlwtPO4=
Subject key identifier: 47:85:12:4F:4E:24:6E:72:1D:76:7E:9F:5D:E2:78:0A:8F:EE:E3:E5
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer: /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial: 0199FCC6376B4DD327EF75B8BE38AB5D9B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: KMOni2Gdh7St0hHT/LDva9mbQr+ttPT9ASQ7FV2Wmug=)
2: yTJkU5c9_WyRyTlvE419PqU0IjM.roa (hash: ut55SdaCNgLg+kxFsJJtdQQgrsFKbAJo6+C/kBalZ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:37:6b:4d:d3:27:ef:75:b8:be:38:ab:5d:9b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=4785124f4e246e721d767e9f5de2780a8feee3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:56:9d:37:6a:86:1c:26:c2:0d:ca:48:28:
a2:f5:6f:38:b6:fc:c1:71:fb:93:cf:d2:eb:9d:59:
6b:12:36:5c:b7:8a:ba:19:82:dd:40:28:c2:94:e5:
c6:ee:63:24:97:cc:7f:2a:9f:6f:d2:e1:ca:a7:2b:
64:eb:6b:9b:98:a5:a0:9e:07:be:b2:4c:f0:f0:58:
f0:f6:4d:12:9c:b6:cd:b3:dc:f9:4f:42:ff:9a:43:
9d:16:7a:60:b7:09:6e:23:91:6b:f8:40:2b:10:ca:
24:30:11:ca:b9:b9:8f:c2:f7:5e:2e:06:c7:05:a9:
35:2a:f2:84:c3:8e:9c:be:3e:09:2b:a7:0e:8b:d9:
c9:ba:b7:f5:b0:13:ee:c5:1a:8c:e5:86:5c:06:e8:
f1:f5:84:97:ab:cf:fe:b2:79:e3:c8:ce:ff:89:6c:
f2:6d:09:88:e9:09:2f:a3:dc:ef:f2:71:f7:77:6f:
31:28:f3:41:8b:fe:b7:e9:90:ba:a5:d6:0f:57:24:
e1:0d:b5:37:8b:48:86:15:91:16:d4:c6:4d:b7:e8:
98:6b:8a:87:ea:21:7b:61:6b:9d:b4:04:79:6c:c5:
ee:c1:2d:a3:78:4d:12:3b:a3:ad:29:cb:a7:bc:f5:
08:ae:83:db:48:57:bb:33:de:56:4d:27:f0:63:fb:
69:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:85:12:4F:4E:24:6E:72:1D:76:7E:9F:5D:E2:78:0A:8F:EE:E3:E5
X509v3 Authority Key Identifier:
keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2c:1d:28:6c:05:17:39:12:d7:61:6c:5e:bd:7f:c7:40:35:
97:ab:3d:d9:71:17:d2:fd:87:ca:c8:21:94:a3:52:bc:72:ff:
5a:79:50:7f:76:4f:95:a1:c2:4d:43:a7:51:dd:20:58:37:79:
0d:c5:a3:9e:ef:34:b0:c1:37:d8:50:6a:ed:0f:88:ab:bf:e2:
9a:43:8a:1b:1b:57:6b:9b:73:8d:fc:a1:94:45:46:69:fa:46:
4a:30:8a:27:22:55:cb:19:ea:ff:1f:60:dc:b4:ef:df:ad:35:
f8:41:99:c6:18:4a:0e:05:7f:6e:22:01:3e:f2:e4:e2:c8:b8:
54:e9:90:7d:14:fd:48:76:f0:e0:1d:6c:31:69:30:d0:95:31:
cf:16:48:3c:e6:85:d7:a8:b9:c0:22:88:6b:a5:13:4e:22:12:
69:07:0e:cf:1c:14:aa:7b:9c:78:bc:5d:d2:55:1c:58:8b:16:
92:58:2c:d6:5d:5e:35:b0:0a:4c:bd:b7:97:b3:4e:af:99:3f:
98:12:91:b5:be:88:69:b6:be:69:31:68:29:a5:64:b2:ff:10:
24:24:59:3e:ca:c0:60:4d:15:59:9f:90:90:1e:ad:55:1d:ec:
60:c4:cb:75:c3:cd:a7:69:86:1c:a7:84:d4:72:72:de:fe:ba:
b8:bb:ee:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:56 2025 by rpki-client