Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: wPEBKtixiaFA1FcOZJJQZi+DVzQLu/vCahYNLLW//ac=
Subject key identifier: 8D:A4:53:CB:02:6D:6D:09:17:78:1B:13:82:A8:AE:CE:DB:F4:D2:65
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 0199FCC60F19065B611BA123669B11D97F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 06A4
Signing time: Sun 19 Oct 2025 14:01:02 +0000
Manifest this update: Sun 19 Oct 2025 14:01:02 +0000
Manifest next update: Mon 20 Oct 2025 14:01:02 +0000
Files and hashes: 1: 7Z41l5GCvkmQM0-AZptE0q-8N2c.roa (hash: W0spFBvn9EFz2Rg+2ALTObth8eVz6Jz8Eki0R5kperk=)
2: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: PsF5h+5Kktl0d4b7euUUIHhEq4fomLobN7ROkZJzgfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:0f:19:06:5b:61:1b:a1:23:66:9b:11:d9:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Oct 19 14:01:02 2025 GMT
Not After : Oct 20 14:01:02 2025 GMT
Subject: CN=8da453cb026d6d0917781b1382a8aecedbf4d265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:ac:81:6c:33:7c:48:13:ba:4d:10:78:0d:
1d:1d:5f:41:fc:7f:20:60:10:ae:5b:e2:68:f4:59:
3c:79:db:a7:90:4d:ff:cc:3a:2e:7b:44:1d:1e:1f:
16:89:9f:20:24:a2:72:0c:fc:fb:4a:5f:ca:45:7d:
b7:28:8f:b7:8a:20:cf:c2:85:1b:0d:49:d6:b5:c7:
bf:30:5a:7b:cf:83:bc:9a:a8:a4:a8:92:47:34:26:
a4:72:c6:4a:94:77:52:a0:eb:cb:c1:14:ff:9f:92:
20:23:b0:40:1a:ef:c9:f4:4e:26:0b:b4:57:15:0b:
15:57:32:92:a7:f4:c1:fc:fe:a1:ba:dd:d2:20:0b:
c9:15:3a:c2:ae:c6:75:ed:86:60:35:86:20:47:66:
6e:fc:fe:61:8f:ff:5f:7a:be:e9:5c:f8:32:bf:79:
6b:65:d9:49:f4:14:73:f6:48:47:0d:47:db:ca:0c:
45:cf:bd:e5:7c:9f:cf:4e:3c:1d:02:7f:73:1c:5b:
a1:85:9d:5e:f9:0c:2c:69:b7:23:8e:b3:14:a5:c3:
8f:5c:f6:c4:bd:f9:3c:be:5e:bc:fc:5b:8b:58:98:
73:f7:81:c8:47:8c:04:13:8d:58:1b:d6:fb:33:8b:
5c:6e:ea:2e:fe:bc:75:15:d0:73:23:0c:4b:ba:c0:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A4:53:CB:02:6D:6D:09:17:78:1B:13:82:A8:AE:CE:DB:F4:D2:65
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3c:1e:e3:2c:6b:7d:0e:5e:4e:87:96:32:65:c1:92:e6:f6:
a5:54:1c:cf:91:74:38:eb:30:6f:00:fd:81:ab:04:bf:33:64:
e5:4d:aa:33:4c:0e:b4:53:8b:e7:ac:74:d8:d8:66:c8:8a:ab:
b7:82:18:c1:4e:0f:b0:4d:f4:f5:f7:01:95:69:3f:c5:5a:22:
6e:a0:64:59:f5:fa:33:7a:44:58:c2:8a:c3:1c:03:dc:3a:4f:
0d:35:5e:d5:7b:99:4e:ec:81:57:db:a7:e2:77:cc:9b:f8:1e:
63:c3:05:1d:ed:72:fb:2a:ee:e5:b0:df:4f:9a:1a:7e:3a:7e:
09:ff:ed:7a:9f:db:3f:ee:5e:ac:09:04:5e:be:8f:08:5d:e7:
62:09:2b:f5:05:e2:5e:8a:d8:7d:18:76:77:ae:0a:92:f9:90:
f5:82:16:f0:48:75:95:52:53:ec:59:91:6c:3b:a9:86:66:3c:
39:e7:71:f0:13:2d:b5:9c:86:46:dd:71:d5:04:1a:3a:d3:7a:
84:bf:14:2d:ed:a1:c4:6f:76:5d:32:40:6f:62:aa:f2:76:57:
bc:e0:17:cb:bc:02:96:83:fe:21:37:56:51:54:5f:26:36:e1:
59:f4:60:5d:c0:a4:93:17:52:59:3b:d4:33:93:63:cc:a6:ea:
27:dd:dc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:37 2025 by rpki-client