Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: ar4NV4tfxXP9vlMN5qutVn6dGi3ukSGzcnZSunUwcKs=
Subject key identifier: 9B:13:FE:3C:8B:9A:1D:DF:F1:42:98:5A:1F:EC:80:22:7B:7B:AB:E8
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 0199FEB4D9E415A0DAFBB841282B44ED8603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 23:01:29 +0000
Manifest this update: Sun 19 Oct 2025 23:01:29 +0000
Manifest next update: Mon 20 Oct 2025 23:01:29 +0000
Files and hashes: 1: EpBy5lEF1BDLVRWSQ7QWoN5zbUU.roa (hash: 1y3tSjFaZERbPwiKrhlP5/eJ5GlotVuhhvMAWtoaIrk=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: Er4AUDe6JNrd3dbHT9+vbdDowIh/CUw+TqiBfoqbGvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:d9:e4:15:a0:da:fb:b8:41:28:2b:44:ed:86:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Oct 19 23:01:29 2025 GMT
Not After : Oct 20 23:01:29 2025 GMT
Subject: CN=9b13fe3c8b9a1ddff142985a1fec80227b7babe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ad:f2:42:db:3c:f9:85:1f:77:27:f5:a8:8f:
e1:17:33:89:7f:08:1d:d9:6c:a9:a1:94:4a:d2:5a:
82:6a:f6:23:b7:0b:b0:66:ca:eb:fc:1f:5f:9a:22:
0d:de:9c:8f:61:7b:8e:02:7c:59:f3:df:9b:e1:7a:
08:5c:f6:2f:10:ec:4e:7f:58:9f:6e:35:6e:7c:e3:
98:49:97:e5:fc:ac:d7:d1:6b:d2:7c:76:73:41:4a:
fd:69:8d:93:33:64:70:ff:9b:b5:fd:f5:8f:07:ed:
80:5b:62:9a:e5:8b:04:1f:37:ec:89:4b:ec:40:7e:
0d:f3:50:20:81:e9:21:21:43:b8:ed:b8:55:9c:ed:
ef:06:fe:a5:08:5e:20:42:ef:2a:ac:f7:5f:ed:37:
4b:6b:8a:d7:31:c4:c3:2b:f0:a5:0e:c8:0c:3b:96:
d5:a7:29:94:4d:db:69:98:43:d6:f7:40:24:29:a1:
d7:3e:ba:f6:13:16:ca:a0:31:b9:70:e8:63:0c:99:
37:23:71:8a:15:ac:56:99:a8:64:ed:b1:98:b1:04:
22:06:1c:3f:cf:da:d5:7d:60:66:b0:a6:4a:da:ac:
bf:f3:9a:19:1d:ca:64:90:01:ae:ca:f6:f1:2a:20:
bc:1e:67:d7:58:90:43:6b:a7:33:d6:dc:d4:70:57:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:FE:3C:8B:9A:1D:DF:F1:42:98:5A:1F:EC:80:22:7B:7B:AB:E8
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4e:85:be:4b:50:6b:28:aa:11:15:7b:fd:f7:f2:df:0b:ae:
4a:5a:11:47:e4:f8:f9:e0:14:1c:d0:59:d0:73:54:a2:43:5c:
a3:53:49:a0:59:4c:01:e1:e6:15:ed:a9:7b:be:c5:d5:50:f6:
55:bf:09:2d:2f:99:96:41:ab:0e:ab:ab:62:87:9c:6c:08:f3:
e9:93:de:1d:bb:2f:5d:fa:cb:cb:b9:f1:de:94:64:ce:7b:3a:
e3:dd:54:ff:3b:3e:b0:c3:4d:15:f0:07:08:c6:7d:b6:da:30:
f4:19:09:bc:af:03:cd:f8:fe:75:de:ab:8b:9c:e7:ae:c4:2f:
b8:59:c1:d3:5d:ed:ef:ba:b0:34:ed:d9:e0:61:50:7d:9f:89:
4c:9e:9c:c1:7e:90:19:df:fa:4c:1d:0a:8d:f6:af:8d:a7:e4:
02:98:82:20:c6:ca:c8:8e:96:66:54:e3:e6:9c:bb:87:24:10:
74:81:f7:7c:31:bb:80:85:65:ad:45:e6:51:5b:be:b9:4a:94:
10:ad:8d:10:c5:f4:82:06:28:aa:65:ac:e2:48:02:95:3e:7b:
51:99:b6:e9:10:ca:b6:58:90:d9:c0:01:36:6b:56:b9:c0:49:
fc:d0:cf:13:bd:40:1f:0f:85:e4:be:0b:67:ce:c9:12:e0:99:
ce:d5:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:05 2025 by rpki-client