Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: jPzUkMFRmkKmTTnZ3ONC7Lb386Fjym1mg8TSLoauyMg=
Subject key identifier: 85:4D:6E:48:11:CF:2B:71:C2:36:D0:53:B8:96:74:9E:BC:F8:7E:BC
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 0199FC8F8CAC205A45635BE6E337C56F2C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: D3bynq/I1Sh6OUR5kBqOmlf7C4gBRATKDyEK3SJGUWE=)
2: Xz5fRm1rvrLEvX3nzQNpvfuqwdQ.roa (hash: 3vZNMQRQpFvLq3O7/5316ZbW91wqqPn0EJ7/sIa76eA=)
3: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
4: y4ueXY0ijBf4RZb4fGJVsXQLGA0.roa (hash: UvuMlXoUYXPwY2R/r9zwqG0BA2XfWQY7ClxJAXl4TJs=)
5: yoc8JMk-9f_YUHXEL_9_ZmX1Dg4.roa (hash: vHYZAYQIcTZ88hbC8SwB+Nm3QsYJxFwlJCLWjy+CEWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8c:ac:20:5a:45:63:5b:e6:e3:37:c5:6f:2c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=854d6e4811cf2b71c236d053b896749ebcf87ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:8e:8d:c5:05:0d:8b:b8:37:94:b4:89:33:
39:4b:40:e4:00:51:af:2a:61:a4:7f:35:bc:14:cb:
d0:ad:56:8a:c4:27:0f:fd:5f:b8:e3:66:9a:fa:76:
83:01:19:b2:6c:d5:43:01:8b:03:75:40:fd:bc:a6:
dd:12:57:a7:33:fa:a0:83:b1:99:53:a1:bc:87:ab:
83:82:24:6f:75:62:cb:bb:08:95:7f:08:ea:e7:60:
6f:80:6b:47:e3:18:52:ac:de:17:3c:48:5d:e3:9d:
32:23:c8:67:11:18:96:5b:72:f9:59:fa:4e:f2:7a:
6b:cb:4e:bc:84:ec:92:2f:83:76:41:fb:04:2d:0c:
c7:78:e9:71:1f:00:bd:d6:10:c0:79:6f:2b:ad:44:
c3:af:8d:6f:60:9b:4d:55:a4:45:be:7c:cd:e9:14:
cd:14:d1:56:0a:9d:73:d5:39:e1:dc:39:91:23:a8:
03:68:27:c3:c8:85:9b:f5:6f:1c:1c:2b:8d:1a:e8:
d0:02:8f:7d:25:3c:fa:3d:9d:d3:0f:bf:b7:ef:45:
09:56:d0:8b:1f:87:ef:01:f1:34:d3:66:ac:6e:3a:
d3:61:a4:6b:79:a2:8e:a2:e1:66:30:47:d6:58:5d:
8a:14:25:7b:e8:ec:08:af:49:12:7b:cd:80:b1:9f:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4D:6E:48:11:CF:2B:71:C2:36:D0:53:B8:96:74:9E:BC:F8:7E:BC
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:66:78:f1:ac:81:70:3a:da:3e:05:bd:b4:67:76:f0:b9:e9:
d2:73:33:63:5e:82:b3:55:7d:36:3c:72:d7:be:18:22:3b:40:
8a:86:f9:36:da:e2:da:07:8a:d0:b3:ab:1a:63:b8:32:47:92:
64:1a:15:f2:88:16:8b:58:19:f5:24:e1:7d:5f:8f:c8:d7:51:
97:e8:fe:7f:7e:94:80:3e:5a:c3:54:cc:c9:ca:c7:6f:1a:72:
db:eb:c4:81:47:b9:16:a1:bb:8f:9c:35:f7:00:65:38:0d:42:
d6:60:17:23:bd:ab:5b:34:54:0d:0a:85:85:bd:14:ef:c9:fa:
78:e7:b0:b9:c0:ff:5f:74:dd:ff:dd:08:43:da:75:b7:b1:44:
7e:89:d6:2f:92:f5:fe:37:62:46:3b:72:1b:28:26:b3:e6:25:
37:ca:23:0a:84:58:13:27:a9:99:84:94:a4:50:c8:83:3c:51:
d0:0d:58:e4:b9:93:50:63:b9:2a:7e:87:8e:7d:d5:d6:4c:95:
f0:bf:68:fc:3e:72:96:32:8a:4c:05:25:d2:fb:94:bb:48:0d:
07:ab:f2:95:8e:f5:d8:d3:b3:6e:aa:2b:43:0a:09:bd:be:20:
dd:3b:6b:64:42:83:94:79:15:f3:c8:f2:9b:9b:53:fc:71:af:
f0:08:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:12 2025 by rpki-client