Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier: rNmyXOAOf88tRxNZ+ZR4SLaltpB/4qUZpOSn5y48oWA=
Subject key identifier: 41:2A:E3:50:90:36:9F:DD:A4:89:AB:DE:50:B0:74:2B:B6:73:87:69
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 0199FCC6B32F12365615BA95489549EF7AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:44 +0000
Manifest this update: Sun 19 Oct 2025 14:01:44 +0000
Manifest next update: Mon 20 Oct 2025 14:01:44 +0000
Files and hashes: 1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=)
2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: 9jieIgIIW34wgCVsHKWzdQN3OgxrEi0RD0LEGeO6BP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b3:2f:12:36:56:15:ba:95:48:95:49:ef:7a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Oct 19 14:01:44 2025 GMT
Not After : Oct 20 14:01:44 2025 GMT
Subject: CN=412ae35090369fdda489abde50b0742bb6738769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:b4:2a:84:e7:ac:e9:65:bc:27:e7:d4:ae:
f5:46:3a:36:1c:be:23:4a:eb:7b:c1:c0:37:f0:1a:
7b:0b:58:70:22:67:02:8a:a2:15:55:b3:f1:19:e9:
63:aa:ac:cb:f9:8c:8c:47:66:d5:02:48:64:42:6a:
27:db:af:a7:73:d9:18:14:02:64:c0:18:a6:a8:dd:
af:e5:27:90:d4:62:f3:3a:a2:94:42:4e:10:1e:b1:
d4:89:02:e3:0b:d0:56:af:9e:96:c1:9f:49:e7:33:
fa:c9:de:83:c4:39:06:2f:fb:19:8d:5d:b0:ec:51:
e9:05:13:26:e3:e8:89:0d:e2:21:4b:95:40:aa:31:
ee:0b:f6:2a:5f:d7:04:b6:cf:69:a7:35:aa:19:ba:
ca:1e:61:9a:7a:76:c0:07:ac:79:cb:21:7f:25:24:
a4:d7:95:41:54:cd:9b:52:12:4d:eb:70:df:38:08:
1c:9a:5a:77:6c:35:4a:09:74:03:97:7f:db:98:64:
18:cb:fb:b1:aa:2c:79:8a:aa:58:34:87:e5:3d:c2:
5d:90:26:db:cf:b9:74:13:68:1e:d1:cb:ff:0c:0b:
27:48:d9:dd:b0:7b:82:3a:65:94:3e:ea:5e:86:3f:
b5:38:89:c8:ba:aa:db:98:34:a4:e9:dc:90:70:26:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2A:E3:50:90:36:9F:DD:A4:89:AB:DE:50:B0:74:2B:B6:73:87:69
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0d:9d:65:d7:d4:87:4d:73:a0:ba:1f:26:6e:13:17:0c:ce:
6e:08:02:cd:97:47:d5:b4:ef:b3:8c:90:f4:1f:9e:7e:9a:da:
5b:e6:ff:29:08:21:ae:52:ef:3b:30:31:90:88:10:27:63:6f:
75:2b:7b:54:f7:fe:f4:f5:ee:7e:2e:4d:92:f9:14:8b:03:1d:
7d:a7:1c:91:4a:73:31:fc:e5:a2:4f:5c:4c:1c:44:c0:f6:72:
36:7c:ef:65:79:21:84:1b:e8:19:36:0b:b8:54:07:9c:0f:ec:
1d:e1:ae:4c:db:db:31:ad:aa:31:01:49:95:43:84:1c:b2:13:
22:cc:f9:17:27:90:44:49:4b:e2:f3:dd:58:6c:ce:e0:f4:34:
e8:ce:69:94:5c:ea:fe:57:02:fa:f8:e3:0b:0d:6f:0e:95:8f:
1b:ad:5b:47:75:79:e3:42:ef:76:ea:53:ee:09:f7:29:9e:c7:
24:ee:36:12:5c:bb:39:a0:41:6d:5a:eb:b1:15:75:14:87:44:
f3:1b:a0:7a:1e:0b:cf:1d:68:7a:19:af:e6:88:70:9b:56:95:
17:6b:99:26:26:63:cc:70:c9:03:71:db:0f:37:91:d3:1d:a9:
4e:4a:f0:f8:9a:72:a1:c6:a9:7a:58:67:a3:b1:e6:29:95:d4:
e5:22:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:19 2025 by rpki-client