Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
File: k6lZwl27w2fKqJgl6L_1tLTxHJs.mft (raw, json)
Hash identifier: yEp43hs25k5pecrKFJ3nfGn78a146KdVEf4/blTELxM=
Subject key identifier: 0E:39:C8:AE:12:7F:49:2F:BB:76:6A:BA:D2:2B:45:BC:CA:A9:ED:92
Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
Certificate issuer: /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Certificate serial: 019A0110D0BF9E7A8D63A02DC7B8CE246677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
Manifest number: 094A
Signing time: Mon 20 Oct 2025 10:01:10 +0000
Manifest this update: Mon 20 Oct 2025 10:01:10 +0000
Manifest next update: Tue 21 Oct 2025 10:01:10 +0000
Files and hashes: 1: eUO5ySVwcP9_G0v6iAlEgACbaIE.roa (hash: iPv7iNvhmBCQA31XIl1TxzIvDTe0R7e3zG8RhS2DPPs=)
2: k6lZwl27w2fKqJgl6L_1tLTxHJs.crl (hash: 7Zz5idxfzAoyIaRN4YNAD33UhaFyQQKeB4yZV2muev0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:d0:bf:9e:7a:8d:63:a0:2d:c7:b8:ce:24:66:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Validity
Not Before: Oct 20 10:01:10 2025 GMT
Not After : Oct 21 10:01:10 2025 GMT
Subject: CN=0e39c8ae127f492fbb766abad22b45bccaa9ed92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:55:2d:96:76:b2:c8:f9:8f:99:db:58:48:
2a:8a:b2:21:b2:52:8f:b7:30:80:ee:55:20:68:ed:
5a:bc:0d:2f:86:ae:a5:d0:4c:99:bc:ce:8c:79:30:
7b:04:f8:c1:0d:e7:16:b6:a2:48:9c:e4:a6:2f:b3:
db:a7:df:6e:4a:35:86:e2:cc:9c:36:92:70:de:e6:
56:4c:5b:4c:8b:f8:b4:03:62:18:1e:19:67:04:f0:
52:75:a8:d3:5e:64:72:a5:e1:5e:5f:f4:18:1c:14:
e4:28:6e:21:45:d3:61:60:c2:a8:03:2c:09:64:30:
e8:dd:b1:bf:b7:21:b2:c8:94:6d:b0:85:1b:20:ed:
56:05:ea:97:74:76:03:83:21:c6:19:2c:90:2d:52:
b5:8c:09:c3:a9:c2:c4:34:e8:59:29:91:c8:22:70:
3e:af:81:05:e0:14:74:f9:5c:9b:88:a4:f6:db:70:
46:e2:84:1a:21:66:97:b3:5f:74:2f:e4:3f:d5:05:
03:17:a1:70:39:c7:f9:93:30:84:f8:53:d3:31:89:
34:b7:71:66:53:0e:80:8a:9f:54:40:b4:db:95:29:
d6:83:74:e8:0f:d6:9d:23:a5:8f:92:26:bd:0a:a3:
ef:d8:21:28:0f:6a:68:3e:0a:8d:53:a1:80:7a:21:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:39:C8:AE:12:7F:49:2F:BB:76:6A:BA:D2:2B:45:BC:CA:A9:ED:92
X509v3 Authority Key Identifier:
keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7a:18:7f:80:6a:60:92:70:78:72:e5:a8:0b:a4:5b:0d:e2:
d4:10:44:f1:52:e2:d5:ac:96:22:b8:96:62:87:aa:52:3c:18:
87:0c:4b:95:c0:78:8e:18:48:bb:e4:79:ae:a3:8a:6a:7a:f1:
d3:c8:0d:e0:e7:49:7c:e0:30:eb:51:99:6e:71:15:e0:53:10:
3c:52:d8:8c:30:2d:d0:90:f9:f2:01:de:05:7f:68:5a:2d:39:
be:79:02:1b:22:ae:73:47:96:10:4b:85:84:df:56:58:41:b3:
9a:04:82:70:0e:e2:34:fe:d8:f8:bc:53:59:f2:8c:65:0e:78:
17:b3:4c:20:27:55:55:08:fa:61:db:93:a0:ac:0d:27:79:64:
5b:ed:73:10:03:0f:8b:f1:41:71:aa:ae:d8:8b:68:e0:08:5c:
85:15:ed:06:3b:49:02:9f:6d:69:23:90:59:6d:eb:7f:77:6d:
eb:29:10:b1:30:e4:a8:0e:53:17:b7:19:d9:71:d9:72:49:95:
ec:62:81:bf:72:50:c6:e2:e9:37:b2:f0:a7:9b:c1:8f:76:d8:
88:1c:f4:49:e9:39:11:ac:0b:a4:04:c0:2f:fc:36:45:e3:f2:
b6:a0:e1:cf:f4:01:fb:3f:40:70:3c:78:23:5e:98:a7:fe:85:
75:cd:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:03 2025 by rpki-client