Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json)
Hash identifier: KeP/TZtAwUVFcU7p1KG5nCdQc22KFSfLrd+boLPYVCY=
Subject key identifier: 7A:6B:36:8A:43:18:FE:3E:C8:DB:2C:97:1F:35:04:60:61:53:CD:13
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 0199FDD980477DA000FB876A4BB393BD437E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:53 +0000
Manifest this update: Sun 19 Oct 2025 19:01:53 +0000
Manifest next update: Mon 20 Oct 2025 19:01:53 +0000
Files and hashes: 1: 6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa (hash: t2pawZUDG8w+/7kKSZlwszt2WDbCUFiInD9rYvACGhw=)
2: AKC2vs0Xv6myd7svsj2_92wUeLg.roa (hash: YNCrFS5xfYguBMhlJjrv+olyy/Sk3uL/9WxwO9r8P9Y=)
3: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: TACsKFCWc0OgwV4OjYqC644VCsr+yLFqe/ew7x/ObhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:80:47:7d:a0:00:fb:87:6a:4b:b3:93:bd:43:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Oct 19 19:01:53 2025 GMT
Not After : Oct 20 19:01:53 2025 GMT
Subject: CN=7a6b368a4318fe3ec8db2c971f3504606153cd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:30:8a:12:e1:fe:35:7e:6a:7a:c8:e6:5d:
ab:31:ea:a6:7d:8e:23:22:76:ff:ac:da:a1:1d:2a:
a4:dd:d2:fe:99:ef:24:a3:5a:91:02:9f:70:bd:15:
74:93:4f:87:b3:91:c6:d5:99:8d:35:7f:dc:b3:06:
af:1f:14:4b:aa:01:f5:f6:bb:aa:a9:2a:dc:a1:64:
ab:02:62:ca:07:09:01:84:a3:6d:aa:70:1e:7e:82:
c4:54:6d:fd:46:49:a3:b5:9c:02:9b:dd:9d:d2:5f:
3a:be:ce:a1:a0:71:b0:cc:27:b0:04:c5:10:98:0b:
4c:d8:ba:2f:81:28:06:ff:43:b5:ae:8b:17:84:13:
8e:d4:5e:97:7c:9d:cb:31:41:4b:04:6b:54:3a:a9:
d2:c3:85:88:0e:d4:05:78:a3:77:d1:c3:b9:ff:2b:
19:76:5c:8c:ea:1d:34:88:bf:90:fb:37:bf:3f:3a:
32:b0:3d:7f:c4:b0:fc:2e:36:eb:24:09:e1:c4:e0:
b9:8a:3e:17:e8:9d:8b:01:d7:84:22:9d:85:d3:22:
f8:24:70:1e:5e:ba:72:aa:a8:9e:6d:ed:9d:5b:75:
d7:cf:4d:5f:69:11:14:dc:d3:34:86:74:b9:af:5d:
78:32:bf:27:9b:60:0f:47:6f:ec:5f:42:23:9c:cc:
44:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6B:36:8A:43:18:FE:3E:C8:DB:2C:97:1F:35:04:60:61:53:CD:13
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5b:20:38:fc:dd:cc:5f:d3:c0:21:9b:82:33:5b:13:2d:4c:
3e:1d:18:37:ca:6b:da:c1:bc:23:d6:00:a8:63:d8:9a:9c:25:
58:28:d9:de:ee:b9:d0:4b:06:ee:cc:f6:c7:bf:d4:ff:26:9b:
2d:fe:89:38:90:9a:bc:b0:32:d0:b7:8b:28:b0:4f:8f:87:34:
d4:f4:a2:1a:6b:f0:41:a5:19:a8:68:48:86:fd:8a:3d:ca:75:
b4:ef:31:63:b0:34:18:85:c3:52:d3:7c:e8:b0:57:97:73:65:
6a:a1:9d:de:dc:7e:b6:1e:bf:f0:6d:19:5d:8f:c1:94:20:5a:
0d:b1:f1:70:4c:22:b3:7d:56:44:c8:51:bd:99:bd:54:54:e7:
c2:95:ba:04:26:7f:57:27:b5:0e:bf:54:64:5f:3b:32:9d:79:
0d:15:ce:15:3c:e8:47:49:0a:f9:c6:03:6c:0b:2b:d8:52:80:
6f:32:4d:7e:43:45:2e:c0:79:23:b8:aa:94:b6:5e:b6:aa:83:
62:08:e7:ed:99:b8:d6:0f:e0:1b:b9:30:58:04:29:cf:bd:56:
90:8b:45:16:66:54:6a:44:1e:7f:9f:e2:0d:a2:77:26:ae:cc:
db:62:df:7a:c2:fc:3c:ed:ed:a3:ca:da:74:58:3c:66:21:b6:
ed:2d:22:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:10 2025 by rpki-client