Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
File: kKBl7vQNwBahvn8o1uZsp6h-f-U.mft (raw, json)
Hash identifier: 3cXbVtyPVPSSAWvBXjAsbLoyUUXm8t/m0Xks+t8gAT0=
Subject key identifier: 15:CD:88:80:3F:0B:2E:6C:4A:B3:1C:83:B3:3D:B9:9B:D4:48:AC:EE
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial: 0199FCFD2CF9839FC0E6085840297D8FAAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: FXtyRxy310ujzM3-FcQZ1xIE8BM.roa (hash: sjb/b0eSiH//cLJ9qvCys98Peom21sTpufoCnNtl4os=)
2: kKBl7vQNwBahvn8o1uZsp6h-f-U.crl (hash: +XApDw25o5ByMAu+lzzYRhbqc+FCxVVAic0Rbf/9KHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2c:f9:83:9f:c0:e6:08:58:40:29:7d:8f:aa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=15cd88803f0b2e6c4ab31c83b33db99bd448acee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:6c:c5:2c:8e:85:27:e5:a3:d3:9d:13:43:
73:9a:35:4b:7e:9d:81:53:de:2e:0f:e0:96:4f:e9:
56:86:27:53:6f:07:5e:f5:92:2d:a2:fe:1f:5f:a1:
cc:c8:ce:00:fa:9f:f0:af:05:a8:d5:56:e4:21:e0:
be:c2:02:8d:6b:ab:48:d2:fc:47:2a:2d:a2:75:64:
e1:e5:c6:2d:5e:27:e3:a2:c9:6f:07:15:9c:b5:55:
5f:c6:d0:7f:42:24:fa:a4:26:be:76:e3:c6:96:6c:
23:d1:c0:45:53:bc:4e:39:9a:12:d0:b6:ff:8e:ee:
26:1b:7f:6f:c1:bb:31:9f:50:d8:3f:a2:7a:cb:be:
e8:fc:4b:7c:50:93:1e:e8:8c:8c:42:3a:6e:33:82:
87:e3:b8:db:8a:33:56:51:bf:26:bb:7d:8b:dd:fd:
52:00:3b:57:6d:2b:9b:7b:31:4c:de:8e:77:78:3d:
c5:17:67:53:69:83:e5:29:38:0e:34:a6:93:12:d1:
7c:02:bc:7e:a9:25:e9:55:b9:4c:51:bd:d4:b9:61:
46:f3:36:ae:61:72:88:ee:7b:c7:31:d2:32:5e:26:
99:ed:f0:15:43:45:f4:84:a2:90:55:c7:02:7a:b3:
7c:12:df:a9:7b:93:84:2f:f0:3a:c8:6d:ed:74:ed:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CD:88:80:3F:0B:2E:6C:4A:B3:1C:83:B3:3D:B9:9B:D4:48:AC:EE
X509v3 Authority Key Identifier:
keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3d:79:8c:30:82:a7:e8:7f:f1:a3:d0:68:63:7c:2b:ae:6e:
c2:3a:f0:15:2f:f6:c0:0f:53:2b:17:a6:5f:64:81:52:93:d4:
5e:a6:58:eb:59:b8:9d:ee:4b:54:fc:a2:3d:0e:ab:65:51:1a:
f7:c0:d2:0d:f5:67:bd:ae:be:a3:f6:e9:5d:de:20:28:52:c1:
e9:95:a9:de:cd:71:af:24:b2:ab:59:d9:b8:3b:ee:0b:f9:fe:
b3:e4:80:dc:2b:c4:7d:77:e1:90:7f:84:1c:64:e4:a7:1c:c8:
d0:53:85:10:48:e2:b3:26:f9:cf:c0:a4:22:82:ee:96:2c:3e:
26:de:e3:e5:6a:34:f7:4d:2a:18:bd:7f:61:bc:72:1f:8e:c3:
87:8e:b0:03:79:ca:2e:08:24:51:f4:19:76:cb:07:4c:a4:4a:
af:7c:d5:e5:37:cd:20:c0:a4:48:27:03:3d:bf:e4:34:35:51:
88:81:6a:90:36:e2:87:bf:1f:83:8f:30:ad:75:61:d6:8e:79:
c8:91:a8:f0:75:16:87:04:ac:12:da:52:8a:69:02:28:7d:e6:
ce:0f:69:f7:9a:bf:43:1f:53:2f:e5:d8:dd:cb:85:7c:e7:0d:
98:c8:4b:0c:20:5d:0b:38:31:20:7e:52:81:7e:6a:62:05:a2:
38:81:39:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:46 2025 by rpki-client