
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: KuFuLJayGpcBaRxUgOF/bd8MpppZ/kIlC3DpRpTS2ck=
Subject key identifier: A6:09:70:BB:DB:16:E8:EE:CB:9A:69:DF:7A:9D:C6:FF:28:44:B2:E0
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 0199FBEA86C2458FEEDB907C946870A4C26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: gTFzQq8L5E5/RJKpWFIy/ae1J1bd8Onx2RYpxY31Zqg=)
3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:86:c2:45:8f:ee:db:90:7c:94:68:70:a4:c2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=a60970bbdb16e8eecb9a69df7a9dc6ff2844b2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:e9:7b:4a:0d:2c:fc:3c:e3:1e:f8:f6:b0:
09:c6:aa:77:08:2a:0f:e5:a2:f8:12:da:54:4f:08:
a3:60:f8:cc:01:3b:8a:89:7d:25:e7:bc:a4:b3:84:
0c:cb:33:75:21:ff:ed:e9:a7:6d:5e:12:28:52:5c:
eb:56:51:02:a4:23:30:eb:91:5e:95:bd:3b:fd:08:
10:28:43:da:90:88:69:2b:5e:2b:e0:e1:65:df:de:
7f:da:c5:c8:c0:cc:f1:06:c1:88:54:6c:60:ce:18:
e6:0c:ca:dc:b3:1b:10:59:61:e5:4c:ac:6e:cb:4b:
3e:7b:1e:42:25:b3:9f:b2:70:a5:51:1d:0d:eb:80:
7a:9c:3d:06:1d:16:e0:3e:c1:8c:2b:7d:e7:be:b9:
a5:fe:ff:44:19:fe:5d:01:9c:90:fa:a8:44:c3:e7:
18:a0:47:0f:5b:37:97:00:6f:fc:33:d1:a7:c1:b5:
08:c5:c5:fa:5d:06:30:a6:f5:90:ae:1c:fe:c0:1b:
d9:77:f1:17:be:6b:40:1f:4f:0f:f5:00:54:68:f2:
9d:aa:b7:dd:64:8e:9b:95:11:ef:96:43:fe:09:da:
1b:3a:3b:de:29:f4:44:81:2c:a5:20:b9:37:9c:41:
a1:ff:e4:01:1f:4b:ec:84:9b:59:27:df:69:bc:f7:
04:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:09:70:BB:DB:16:E8:EE:CB:9A:69:DF:7A:9D:C6:FF:28:44:B2:E0
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a9:49:98:16:e4:17:de:f1:71:f2:28:d4:66:a5:17:e7:49:
8d:bd:b0:01:a1:35:97:2e:4d:60:ff:d0:2c:54:a6:90:c6:a7:
02:cb:45:b6:e6:6d:07:cb:13:cc:1f:f0:f8:da:eb:99:2a:2f:
f7:5e:d7:18:ba:15:9b:ce:a3:38:3d:54:26:9d:a6:dc:d4:d2:
9b:5a:a4:e3:5b:ce:24:7e:50:13:49:be:87:ba:29:bc:0e:7e:
37:7b:7e:61:f5:ec:c2:78:94:0e:74:0b:85:27:24:f7:2c:df:
90:c8:3e:10:82:7f:5e:38:bb:fd:c6:f5:ab:23:12:87:12:47:
fd:43:a3:8a:78:db:1a:bf:67:93:97:05:73:a4:34:13:10:26:
90:96:89:cb:c1:4d:3b:e2:f3:fc:a5:76:e4:e0:fb:e1:dd:8f:
56:da:ef:9d:64:8d:20:be:3d:02:cf:5d:dc:c5:07:ee:15:c7:
5c:21:76:08:c4:66:ae:91:c8:0a:64:39:c3:17:a3:75:52:6e:
bc:ea:b3:a0:cf:da:97:2a:62:33:d9:00:06:f0:36:0a:ed:9b:
1e:55:06:8c:32:9d:ac:02:11:58:a4:2e:4e:6c:ae:52:0d:d3:
3c:e3:c9:bc:8d:b2:6e:40:e8:b7:2e:de:31:36:58:2c:a8:7c:
c2:37:bf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:22:25 2025 by rpki-client