
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
File: k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json)
Hash identifier: mV9b/VYbZRLLNAJiRKcOlFyRhA3ckOgDLWHLhzah/Dc=
Subject key identifier: 89:7F:C4:01:9E:85:58:FB:EE:6B:82:9C:C4:6B:5A:BE:4A:48:B7:B5
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial: 0199FC583BBB51F6BCEEF2722A448857E101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
Manifest number: 14A8
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: FwydALoErM6-8yE8TcsoXe9fkyI.roa (hash: S5UsOTTZ1j9ByeHOH+4PHSRQbib1Nk4JqrfciZPb4Cc=)
2: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: ont1DqpqHNPphefo9SFs6E8dn8UFVzVW3FpPsX/mHW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3b:bb:51:f6:bc:ee:f2:72:2a:44:88:57:e1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=897fc4019e8558fbee6b829cc46b5abe4a48b7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d9:03:f9:e0:8f:98:ed:ce:67:3a:80:c3:46:
a2:ed:fd:6f:69:9d:16:3a:88:9e:16:86:a0:4d:5e:
bf:23:f3:83:8e:36:da:28:90:65:1e:48:4a:96:ba:
b6:e7:13:5d:0f:f3:fd:10:de:09:c5:e2:34:dd:7f:
ff:e0:20:75:a4:d4:5d:93:f8:b5:70:c2:ed:c0:2b:
2c:1a:8c:f1:54:35:af:33:bc:4a:43:dc:11:8f:1e:
7b:6d:70:18:c2:ca:b6:5f:74:66:40:80:c7:0f:f5:
10:43:fc:7f:78:64:dd:8b:4b:c3:c9:d5:cb:d5:a6:
b4:b5:8a:01:6b:17:8d:6a:96:15:fc:e9:2a:f2:9c:
86:03:cb:08:2d:ae:df:59:4a:e3:b9:57:39:71:ee:
a7:ec:c7:f0:a0:9e:6a:34:a2:65:f7:5a:91:a0:d7:
64:1c:54:ae:00:b3:4e:39:12:f4:f5:bd:f9:80:48:
fd:9e:19:16:c6:a7:4a:42:8e:0b:0d:44:18:ab:5f:
0b:b7:16:ad:e8:47:9f:f3:b3:f0:fa:73:5f:2b:b5:
db:47:17:53:d8:53:a8:51:2a:7b:49:16:f1:b9:d9:
eb:af:12:53:95:66:d5:0a:2e:65:e0:ac:d9:f1:74:
3d:c6:81:e2:2f:8d:1a:3f:58:24:2b:34:83:49:c7:
ae:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7F:C4:01:9E:85:58:FB:EE:6B:82:9C:C4:6B:5A:BE:4A:48:B7:B5
X509v3 Authority Key Identifier:
keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f2:7a:55:1a:bd:23:ab:f3:04:4b:26:3d:0a:74:ec:52:a0:
54:1d:1b:60:84:b0:d4:f6:32:f2:2e:59:a4:25:37:00:d3:4c:
10:f5:ed:5b:17:67:83:69:e3:6a:06:3d:46:ff:b9:95:0f:e6:
eb:e3:3c:33:0c:c7:d5:ae:1a:7a:c9:5a:c6:66:44:1c:af:7d:
b4:48:3f:8b:c4:5e:58:07:4c:10:52:7a:f7:18:f7:58:61:22:
2f:03:5e:a2:ba:dc:ad:51:82:cc:1e:0f:45:09:22:3e:38:e4:
d4:4b:9d:0e:9b:48:5b:ec:bb:00:8f:f4:0c:c5:ca:22:3d:30:
0c:d5:3e:8e:91:bf:e7:f4:2d:af:b5:75:fe:5d:ed:8d:24:84:
ff:13:a5:7b:85:cd:9c:96:8a:06:b1:b5:ca:73:c3:2b:37:2f:
2e:2d:52:c6:6f:47:51:f7:ec:c5:5a:16:98:f1:ba:cb:61:61:
14:7b:06:b1:e0:f4:48:48:19:15:ea:48:b0:1e:5e:ef:e1:6f:
60:6a:df:a2:83:6e:f3:c1:17:66:6e:1f:16:ed:77:4f:01:4c:
04:2c:39:74:db:8b:84:76:ad:25:97:98:0b:76:1a:dd:43:75:
7b:e6:29:ac:6b:7f:0d:d5:70:30:74:50:96:96:e4:a3:a6:27:
b0:24:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:56 2025 by rpki-client