Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: CPF72rfMZsEc70F30N+Ppt3T2NDUo8WF2XbUNw76nKA=
Subject key identifier: 23:DA:3A:AF:FE:35:E3:0B:76:DE:78:2D:4B:9E:80:3B:DB:8E:B4:34
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 0199FCFDB36C4CAB6319E6801E56D5154F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 15:01:48 +0000
Manifest this update: Sun 19 Oct 2025 15:01:48 +0000
Manifest next update: Mon 20 Oct 2025 15:01:48 +0000
Files and hashes: 1: Df7DTn2zEEq5-3nYcXjduzyZcpE.roa (hash: K9WfaPyx3uuwdfYwGbIQG2MYAnUVk/3ZAaJt4gKJZ0M=)
2: aYuOMRleQsCQtZg3X-RrYGmlGWU.roa (hash: MqwbamaP+A+XdjoWsCuBh8Vc+mp43ckOX8NYE92d8oY=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: Hir3V1TWUzzCGdJFYZMLJdqCIrawXuhRJRv6d/L6ekk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b3:6c:4c:ab:63:19:e6:80:1e:56:d5:15:4f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Oct 19 15:01:48 2025 GMT
Not After : Oct 20 15:01:48 2025 GMT
Subject: CN=23da3aaffe35e30b76de782d4b9e803bdb8eb434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:fa:ac:e1:c5:d6:a3:7a:7e:af:57:6b:ac:
1c:36:4f:86:91:cf:f9:7c:f3:d9:cd:86:73:b3:54:
69:0a:0d:b4:93:da:1b:ce:0b:82:3d:f0:25:06:9f:
92:12:3f:f4:3c:10:f4:72:87:44:11:a7:01:cf:22:
72:bc:ef:6a:68:42:93:5e:d7:fa:23:0e:83:a3:ed:
67:b7:7e:60:5d:c8:d5:3b:78:69:4a:73:a9:5a:21:
e9:f8:60:2d:20:8f:d2:6f:b1:2e:02:e6:16:4c:29:
dd:6f:72:90:6e:e4:0a:83:6b:15:cf:e9:41:5d:aa:
86:04:14:27:37:1c:7f:24:2f:bf:42:39:90:65:31:
01:fc:25:da:19:2b:ef:0d:5e:24:9d:32:68:57:9d:
fe:94:2e:00:98:8c:ce:04:b5:dd:7e:fb:a2:52:c8:
2a:9b:08:f8:6c:f4:98:3e:5e:4d:cc:b6:0e:4b:65:
2e:3d:e6:06:60:32:b5:35:c2:29:1a:6d:45:1c:81:
e6:63:e3:90:50:17:49:dd:49:68:88:93:96:10:18:
89:fe:a1:bb:20:c9:5e:a4:2b:65:d0:a0:45:2e:dc:
09:7c:df:08:0b:7f:1c:45:a0:ef:b0:3e:f3:9c:9f:
30:95:d1:f6:1b:11:c4:88:5b:d4:ce:ce:94:6c:2c:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DA:3A:AF:FE:35:E3:0B:76:DE:78:2D:4B:9E:80:3B:DB:8E:B4:34
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8d:c7:36:1f:2d:0e:8e:21:e7:0a:39:a1:74:4a:01:eb:67:
4c:a4:44:5c:81:ad:90:f4:5a:d8:21:0e:f5:a1:5f:ca:95:ed:
0c:7c:48:eb:85:dc:64:6e:4c:23:17:f3:c4:77:e9:46:50:5a:
73:7d:63:1f:8b:7c:5e:0f:d2:45:b4:c4:18:f8:c4:89:ba:6c:
08:be:bf:77:e8:33:a0:4e:aa:68:ef:0a:7a:c0:cb:79:f2:70:
c4:8b:1b:1b:a3:ae:02:e2:ed:de:44:20:3b:11:76:d6:49:cd:
fc:0b:1a:49:ce:76:81:ae:ca:9e:c5:a2:36:c3:b3:00:b8:cf:
6f:05:7d:60:2b:e5:13:a1:eb:7c:fb:c3:ce:30:3b:c6:3b:57:
d3:46:1e:ec:66:4d:d3:8f:69:8d:76:47:06:08:27:47:9c:c0:
e3:48:a2:8d:b3:62:a7:6c:16:12:8a:2c:ed:26:91:29:1d:77:
3e:69:f4:c9:c9:d3:31:7c:1e:cd:90:e9:79:43:db:b9:83:5b:
90:e7:f7:68:84:b1:c9:d3:c2:25:4c:63:ff:ca:bd:a6:99:3f:
87:92:e8:5c:17:82:30:48:0b:b4:38:bb:cb:8e:e6:e4:5c:60:
96:36:3d:fc:a2:8d:fa:70:db:fd:84:97:36:ed:69:1f:9b:33:
a0:ad:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:47 2025 by rpki-client