Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: LWnsWPlrvcCr/DRNAwWuOOLBb+eEFBH4QGDjoR7BlDM=
Subject key identifier: 56:9A:33:98:B1:DD:4B:FE:78:CC:B6:F6:E3:22:B8:5A:2D:FB:D3:12
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 0199FCC64E299BC5976B8F40DE6A81BE6E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 14:01:18 +0000
Manifest this update: Sun 19 Oct 2025 14:01:18 +0000
Manifest next update: Mon 20 Oct 2025 14:01:18 +0000
Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=)
2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: 1/M4YXTSuVO6L0Z0HhsaqBzKEbvUVFYHBW4xOEHLNsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4e:29:9b:c5:97:6b:8f:40:de:6a:81:be:6e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Oct 19 14:01:18 2025 GMT
Not After : Oct 20 14:01:18 2025 GMT
Subject: CN=569a3398b1dd4bfe78ccb6f6e322b85a2dfbd312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:43:9e:86:b2:64:86:19:7d:cc:ef:55:11:
ca:51:be:20:8d:1d:c0:34:d0:e5:de:16:b8:2f:07:
ad:ea:44:98:bb:20:5c:e2:52:db:aa:a5:86:1e:e5:
18:06:fe:ae:5f:8b:29:24:de:48:fc:63:5e:f6:7a:
de:12:ad:6e:58:64:ec:36:5a:6e:4f:64:26:4d:2e:
f9:79:f6:e8:21:b3:de:47:af:35:6f:58:49:d1:86:
c3:af:b8:32:58:7c:29:00:ae:05:87:3d:0c:df:0e:
eb:97:5e:2e:56:b1:65:81:21:12:c8:e0:a9:20:f8:
ec:e2:68:d8:81:4e:90:83:18:e9:63:bd:82:53:95:
f3:c1:08:79:ef:09:74:d7:ce:b0:c7:9b:fd:74:7b:
38:76:b6:1c:01:01:0d:cf:4b:d8:99:a6:e1:50:5c:
1c:36:fd:c3:3a:a0:e9:89:16:bc:fd:2f:cf:cc:2c:
80:37:09:f3:7d:ad:38:16:70:29:47:fb:45:3e:2b:
ed:47:be:30:83:46:0f:8e:87:4f:17:1d:f0:9c:60:
e4:86:23:8b:64:bd:15:cd:f3:3f:4f:2c:e1:8d:35:
42:48:ea:19:b0:dd:d6:46:08:ff:0b:a7:f9:5f:9d:
d8:06:d3:1a:99:09:9e:a4:a9:83:17:11:77:f5:3b:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9A:33:98:B1:DD:4B:FE:78:CC:B6:F6:E3:22:B8:5A:2D:FB:D3:12
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:63:75:cc:95:4f:86:5a:9e:8c:d1:12:77:3e:cb:36:31:c0:
f8:4b:51:af:97:86:51:74:24:f9:22:ee:62:16:bf:a2:d8:7c:
ef:08:6d:9d:2a:d0:8d:eb:64:a6:8d:80:39:62:eb:4e:6a:12:
bc:2a:e3:78:70:b9:b1:0a:5b:fd:b8:c1:bb:67:10:09:dc:70:
1e:4f:f8:2c:bc:92:ce:14:7f:7c:96:d1:e9:43:47:e6:7f:36:
c7:b0:ca:f5:99:66:7a:d5:d1:14:6c:db:f6:c2:a0:c7:24:ad:
85:32:05:b1:87:32:71:9d:36:31:a5:6a:fc:e2:9a:d4:e0:b0:
d9:4c:b7:a1:3a:4c:7c:b0:4b:5b:3c:68:fb:2c:a1:c5:a4:41:
03:52:7b:e1:73:12:eb:74:25:ae:1f:ec:78:4f:cf:b4:14:2d:
03:a8:12:8d:f8:78:f2:3d:ec:ce:bd:09:dd:fa:3e:64:11:8c:
d6:92:be:6e:cc:c5:65:ac:45:8c:2c:97:6e:27:7c:ae:3c:85:
cb:10:0f:68:c2:c2:a6:59:50:4f:50:f4:94:c8:d2:ae:ba:ec:
b0:1a:bc:1b:3a:9a:a5:bf:0b:da:8b:7c:d6:54:3c:ce:25:b6:
99:7b:14:86:84:2d:c7:1b:7f:a1:41:ad:bd:be:a8:47:99:9b:
e5:31:72:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:48 2025 by rpki-client