Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: vXsEDQadwU2nyrdn0Tw9TTGXC6ZyoUQduI7SjNJ7RZU=
Subject key identifier: FA:01:7C:F9:C1:3D:81:52:86:17:AE:71:3F:37:03:C8:A3:BF:5C:94
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 0199FBEB04715F7FB1A01FA65F1021B7658D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: 7RAqHY11jOxdhwafpBSsu3h3x4Eh3Q4jB6frUOR81NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:04:71:5f:7f:b1:a0:1f:a6:5f:10:21:b7:65:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=fa017cf9c13d81528617ae713f3703c8a3bf5c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:3b:50:80:de:20:ba:08:7d:68:41:7b:ba:
bd:c7:ab:8b:72:1b:27:c1:11:c0:59:23:7b:79:10:
cb:fe:bf:1f:23:87:14:8b:5a:58:a9:44:04:b2:de:
2f:e2:c0:f5:c5:16:4f:07:e2:30:09:e7:ff:9c:67:
e6:79:9e:4d:e6:c8:8b:40:b5:cd:2e:29:90:5b:df:
7d:ab:a4:2e:04:85:7d:8f:53:16:0e:cc:68:74:ae:
80:a5:ff:c7:c8:df:d4:fd:6c:3d:fc:20:ab:c3:b8:
dc:a2:f0:26:e2:10:4b:6c:38:19:a9:7f:0a:05:b2:
89:d6:53:0d:13:3b:46:62:fd:01:02:cf:a6:24:50:
99:10:c7:eb:41:5a:0c:a5:09:a0:af:8c:a1:7b:d5:
29:43:7b:39:54:84:71:a6:49:67:0f:37:da:76:79:
3d:7e:62:bc:ac:a7:90:a7:48:ed:e0:a9:4b:6f:ab:
84:f3:c0:05:d7:6f:a9:a9:fc:8d:1c:6e:8d:48:dd:
04:95:de:a2:e6:04:db:95:b4:24:22:ee:ca:fd:e9:
59:a1:e7:6d:97:ba:10:f6:2c:a3:8d:dd:93:7d:99:
c6:cd:5d:47:cb:62:fa:e9:d9:d7:a5:25:fb:88:2a:
ae:8b:30:97:62:2c:a5:05:a5:bf:82:f3:b6:45:c2:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:7C:F9:C1:3D:81:52:86:17:AE:71:3F:37:03:C8:A3:BF:5C:94
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c8:87:a9:6e:32:ce:4d:09:fe:e0:99:23:45:19:19:e4:c6:
8d:3e:f6:f6:e0:f8:6e:99:44:3a:e6:77:d1:05:aa:94:34:8a:
42:15:93:32:ae:2e:8e:83:79:c0:8c:99:b0:7b:b1:a2:2d:98:
65:4a:ce:15:f0:c4:88:48:22:6b:f2:0e:7f:84:d0:f3:c2:60:
41:f7:ac:9c:f3:34:73:34:d4:6f:00:76:30:0a:2f:e5:dd:27:
0b:a5:55:c7:5f:61:ed:96:98:a7:2c:20:f4:c5:c5:2b:e9:00:
6d:c1:a4:58:55:cf:16:f3:ce:ac:c2:e3:6d:07:74:38:c6:39:
37:21:77:0f:73:e3:fe:fc:21:06:e9:fb:98:b1:01:6c:f6:62:
9e:11:2d:89:26:73:91:6b:63:9a:68:b6:91:8b:56:eb:2e:ce:
14:50:28:8a:66:db:65:41:d5:b4:0f:db:70:be:b1:19:9b:28:
b0:7c:5d:c4:90:19:25:53:9b:c9:fe:53:b4:9d:0c:e0:cf:a3:
d8:88:ec:3b:43:a9:3c:48:4a:53:b2:91:db:4b:fb:91:4c:fa:
bb:1f:c9:e0:2e:d0:bf:c9:89:13:cf:f5:60:0b:9d:30:12:10:
ce:0b:16:a4:f8:39:f4:dd:30:e9:77:7c:09:db:8b:db:8c:2d:
82:ab:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:52 2025 by rpki-client