Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: 0g6Fd4t3gPWb/6iX9sQyI5RwvWZlWzTTiK6RjDdqIgE=
Subject key identifier: EA:1D:C7:F2:49:A2:19:DD:44:01:ED:AE:DA:E1:EF:DB:42:C5:14:46
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 0199FCFD9ACBEE9434CD646D2DFB23B451DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:42 +0000
Manifest this update: Sun 19 Oct 2025 15:01:42 +0000
Manifest next update: Mon 20 Oct 2025 15:01:42 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: Adik6Y1n2Ovp0ADJllVehBbIXF3c6NrtN2mad0DnMEY=)
2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9a:cb:ee:94:34:cd:64:6d:2d:fb:23:b4:51:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Oct 19 15:01:42 2025 GMT
Not After : Oct 20 15:01:42 2025 GMT
Subject: CN=ea1dc7f249a219dd4401edaedae1efdb42c51446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:e4:38:69:3b:4b:38:ba:e1:7f:a5:7a:bf:
43:ec:63:43:5c:39:85:0c:68:94:2f:49:bc:1b:97:
2b:c8:0d:c3:70:af:ea:3a:2f:10:ce:48:63:79:25:
1a:90:fa:73:4a:3c:8a:33:a9:28:c3:1a:ed:0c:36:
d0:a8:39:dd:6a:9e:33:1c:34:62:a7:17:a9:89:8b:
e0:5b:2c:61:6f:eb:ba:0f:aa:f0:1c:e2:29:6d:04:
15:ca:02:78:9d:06:c2:7f:f1:be:95:b1:73:33:90:
df:6c:ab:1a:90:d8:42:26:9c:7e:6f:fc:bb:a9:cf:
7e:c9:e0:0b:74:41:78:7c:2a:3a:84:88:46:c9:31:
c2:9b:02:a8:4b:f0:1b:e8:b9:fc:b2:4d:4c:90:11:
e1:e1:ae:12:cd:eb:a9:f5:5e:28:b3:01:14:90:d3:
37:cf:07:1a:09:ac:d8:3a:c9:df:5e:ca:71:f3:71:
04:5e:7a:63:bf:1d:5f:39:1a:4c:28:5c:ab:a8:fe:
b0:4b:59:24:03:d8:d7:a1:24:4f:ab:d0:c1:b6:ca:
7e:7f:02:59:28:50:e2:88:bf:7d:f5:17:5c:2c:13:
ab:18:72:76:e5:bc:db:c2:ad:06:5a:bc:d1:71:93:
25:3a:11:fe:1e:cb:cc:15:1b:71:c7:d9:ea:44:46:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1D:C7:F2:49:A2:19:DD:44:01:ED:AE:DA:E1:EF:DB:42:C5:14:46
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:97:0f:90:21:1f:c8:b5:60:47:92:30:49:a5:4c:6b:84:d6:
ab:72:40:0c:15:9c:1c:9b:6f:0e:f2:2d:f1:5d:1b:05:b5:ff:
18:f2:f5:bb:30:55:99:01:ad:ba:83:c5:3e:08:04:1e:21:20:
b8:87:98:0f:14:b8:f9:71:f7:c0:1b:19:8d:f0:82:66:7b:19:
e6:5e:c6:3f:5f:db:a7:49:4f:cb:86:b2:c8:e4:3c:a1:3b:c9:
e9:ff:57:53:5d:0c:55:54:1f:4d:0e:63:be:c1:8f:2b:4f:c4:
76:68:77:6a:e4:0e:c6:a6:cf:0c:79:94:4c:26:c2:03:7e:f1:
df:05:38:64:15:cb:d1:43:d4:9f:5c:f0:ed:3e:d3:18:c1:29:
21:16:cf:fd:82:9e:a6:f9:a5:18:e7:e7:2f:67:72:7c:78:d8:
60:07:ca:80:16:1b:2c:cf:77:aa:66:b0:59:c0:ae:d2:1f:4c:
d9:f1:0e:7b:8f:04:6c:9c:b2:74:9b:75:b3:32:62:be:68:d3:
b3:ac:12:cf:ee:42:71:d8:da:e6:60:76:ec:5e:78:75:52:71:
33:3f:58:f0:a3:01:f6:7f:ef:91:64:a9:d3:ea:5f:e3:40:cb:
1d:7e:9b:a4:a4:ff:c4:fa:28:d2:10:c0:e5:b9:24:2f:64:1c:
7a:f6:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:10 2025 by rpki-client