Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: MVM0W6ewqFwoXq8dB2c2Gxd1rbvubHqcoxFe4cdSiVc=
Subject key identifier: A5:92:AC:4F:B6:4A:B6:32:92:75:88:BF:11:63:8C:07:37:BC:ED:3D
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 0199FE7D826B266ABB7023AB7A0ED1BF6ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 1096
Signing time: Sun 19 Oct 2025 22:01:02 +0000
Manifest this update: Sun 19 Oct 2025 22:01:02 +0000
Manifest next update: Mon 20 Oct 2025 22:01:02 +0000
Files and hashes: 1: PQ_yvQsZl8a1BJZelz18O8KYziI.roa (hash: a9+EgNIf1zhqdc2reiY/K2IYhXxlOzKE9JswUeuIGNI=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: Un1X+spS4iHFgJ+N/0moT3dlfSYIOz7vp81ZPwxMHlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:82:6b:26:6a:bb:70:23:ab:7a:0e:d1:bf:6a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Oct 19 22:01:02 2025 GMT
Not After : Oct 20 22:01:02 2025 GMT
Subject: CN=a592ac4fb64ab632927588bf11638c0737bced3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:05:ed:4f:64:4a:f5:49:4a:7e:c9:c6:aa:
0e:94:92:b6:2e:94:ee:a8:12:bf:1e:07:d4:89:78:
c7:3c:af:22:0a:eb:f5:08:df:95:3f:33:0f:04:6f:
1c:2a:b8:b1:8a:e5:d3:c9:ea:10:08:a3:ba:6b:df:
08:f5:5c:2c:85:17:a5:8e:87:5c:32:6c:6d:d6:8b:
f5:a5:75:69:70:0c:f7:b2:2b:fc:ce:85:0b:20:4e:
7a:a6:56:e6:5c:34:27:7e:17:4f:12:06:b4:3f:bf:
32:17:8f:1f:fe:51:ce:40:82:97:d4:ae:15:b4:45:
b2:77:4d:ef:d0:65:fd:04:4b:4c:34:db:7f:dc:d0:
32:cc:26:b3:f7:ff:5d:62:1b:bf:66:96:28:cc:7c:
d2:9c:ce:73:8f:77:b4:a7:63:fa:a8:34:01:ed:cd:
8b:35:49:68:c1:ce:7a:24:c7:46:1e:f3:16:fe:0b:
d7:28:f2:d7:d2:eb:af:e3:0a:92:68:d6:6a:3d:ec:
8e:c1:ce:fa:02:b0:6d:5e:19:d1:1c:a5:d1:0a:b4:
a2:9f:d2:12:70:0e:bd:55:e1:ce:45:91:fc:3c:1b:
c9:9d:82:5c:7e:2c:b2:af:45:f2:13:88:56:af:9a:
5e:f3:a7:8f:57:fc:7c:e4:ff:dc:7c:29:65:91:04:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:92:AC:4F:B6:4A:B6:32:92:75:88:BF:11:63:8C:07:37:BC:ED:3D
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:87:c2:c9:cc:86:24:47:f1:45:c6:b9:a7:f8:72:ee:d1:e2:
eb:a2:fb:d9:2c:50:2e:05:f6:9c:63:8b:ac:2c:69:63:c0:f3:
b5:bd:6a:b6:81:50:a2:69:63:87:7b:21:72:25:dc:3a:9e:7d:
1a:4b:5c:dd:18:93:66:65:62:d7:af:f4:09:79:03:ac:53:16:
95:a5:5e:7f:ed:d1:ce:cc:50:74:bf:47:2c:ca:8a:b6:db:a0:
39:24:79:8f:99:38:4e:1c:38:b2:3d:ed:4d:de:9b:61:51:09:
c9:a6:93:aa:64:f1:96:1c:1b:e5:8a:c1:52:0d:09:aa:9f:48:
91:9e:77:8f:b6:ac:be:4e:dd:48:11:ca:bf:c5:d1:a0:bf:25:
24:2a:1d:b2:91:7a:11:4a:f7:b3:1d:ba:2e:d1:54:de:27:99:
77:72:dd:03:2d:0d:b3:cc:50:01:78:7d:02:3f:b6:c5:b1:ee:
94:52:98:3c:0f:b3:e9:f7:b2:01:68:24:19:95:98:26:2f:87:
72:d2:8c:11:88:75:ca:ed:e7:1e:43:98:c1:ca:4a:cb:c1:10:
9e:e2:5e:8a:cc:fd:50:b6:94:eb:91:4d:70:82:29:3e:9b:07:
e3:fb:97:fd:d3:88:1a:a2:1e:f0:9b:24:da:a7:7f:4e:a0:28:
10:57:be:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:33 2025 by rpki-client