Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier: pR3FZevfA/kdJ/Cr/VulWggVgpJqqTxnKxgVYvhPjjU=
Subject key identifier: B4:7D:57:56:29:ED:FE:91:78:55:AF:64:EB:64:5B:7E:12:6A:07:A6
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 0199FCFD85FFBD03830F3EE799249862F0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 15:01:37 +0000
Manifest this update: Sun 19 Oct 2025 15:01:37 +0000
Manifest next update: Mon 20 Oct 2025 15:01:37 +0000
Files and hashes: 1: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (hash: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=)
2: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: eqrh5IYWG4sWNy2EZ9iOXpBfZ2Wc/oYO20EmuEh2pYM=)
3: 2Cx8NesV2FgXdhnelF2G7i5Bybw.roa (hash: 8z2f0ixyt/V0YgUez4ATct6QO89AWHzLa+ZNoGbwCzI=)
4: 8YGP0hkU08CaSTjLusnYfNoY0P4.roa (hash: jWZuJOzMx9s5Np/gPv2mn1+ybL0gZ2yjh5jQEUREZ9U=)
5: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (hash: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=)
6: g4GRCAwu2q3EL-X1WL9RVrJbAQI.roa (hash: slCTgIDY8YfOpbaBmeIbIqftrjDIQWNh6XUk0mKIj7o=)
7: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (hash: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=)
8: nFpp1sOKP4UepGIUoHswLN2IbRI.roa (hash: Ttm+Uf2laDwHJ/wFsX6jTAwI0vmckT+FtwvtYdaFusE=)
9: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (hash: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:85:ff:bd:03:83:0f:3e:e7:99:24:98:62:f0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Oct 19 15:01:37 2025 GMT
Not After : Oct 20 15:01:37 2025 GMT
Subject: CN=b47d575629edfe917855af64eb645b7e126a07a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:ff:a8:4e:f9:b4:56:39:df:a8:3d:84:94:
db:b7:bb:ff:54:f0:4c:db:49:04:f9:5c:de:f0:bb:
bb:ac:95:03:a9:52:05:f6:bd:bb:86:f5:fe:04:14:
c0:08:a0:5e:23:73:92:fa:79:f7:4a:2c:d6:fa:cd:
fe:6b:ca:48:0b:75:7f:3c:74:69:07:59:33:cb:c7:
0f:a4:8b:f5:cf:02:2f:ac:98:46:17:d2:0f:b8:4b:
ce:3f:4e:4a:75:2f:aa:9a:0d:ad:b4:fe:0b:d9:0a:
2e:83:41:08:b6:db:b6:a0:da:92:19:cb:46:fd:a7:
f2:49:ce:e1:f9:27:45:a2:ba:42:f5:10:05:93:67:
0e:f5:8e:e6:c7:48:89:87:5f:ba:39:c5:be:68:e9:
91:89:29:24:44:63:b9:20:8a:41:0c:5e:59:76:06:
84:65:b8:83:34:ef:a9:d6:53:71:d0:18:48:5e:df:
86:6c:6b:95:03:0d:6f:6c:d3:ef:02:46:b2:2d:21:
c5:6c:e4:4f:00:0e:02:63:71:95:2a:fe:f4:bc:ba:
6e:6a:d7:99:ef:66:43:6b:c5:11:a3:2f:2d:87:49:
7a:4d:b3:19:da:05:99:93:6f:c4:2b:93:66:3c:87:
5c:48:0a:51:28:21:fd:8c:72:3a:37:b9:e5:91:00:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7D:57:56:29:ED:FE:91:78:55:AF:64:EB:64:5B:7E:12:6A:07:A6
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cc:59:cd:82:d5:f3:fd:e0:85:69:13:0d:bf:25:ed:bd:74:
7b:4e:b7:95:4d:c0:32:2e:b4:af:dc:01:b8:11:7b:28:5d:e9:
04:04:8f:90:22:d1:d0:02:54:fb:e7:01:2b:7a:21:4c:9b:fd:
61:8b:00:e7:3c:cd:04:5b:85:44:02:19:66:3b:a7:a5:00:2c:
03:5e:0a:20:20:c9:56:ae:5a:13:a3:25:0d:d6:49:6f:de:0d:
57:69:bc:cd:0f:38:fa:15:85:6f:47:2e:94:d5:9b:5e:6e:06:
2c:e8:57:fa:56:e8:78:6e:b1:46:87:c4:e9:fe:fb:90:1a:f2:
49:e4:72:f9:bc:b2:10:46:9c:1f:a6:ae:b1:86:fd:b2:19:c7:
b1:64:49:ac:f4:74:4d:68:9e:bf:05:33:84:c0:19:6b:c0:84:
56:0c:7e:54:71:a8:b5:8b:1c:d5:ad:5c:de:17:73:81:74:9e:
9f:aa:8f:6f:2a:e4:09:8e:26:15:47:b5:33:67:d9:88:01:fe:
da:6c:f0:48:49:3e:15:08:df:01:a0:b6:48:68:6e:40:84:1a:
dd:12:df:ad:d6:3e:63:ad:28:0b:00:37:99:60:30:4b:3f:aa:
41:1d:3d:d8:30:b2:29:5b:8b:ea:d5:3c:6e:13:15:43:7a:4a:
73:2f:1f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:40 2025 by rpki-client