Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
File: kNPlNxtkq5QtbcugSt_yrnq3xxI.mft (raw, json)
Hash identifier: 4PB5Hhjr4SEdulx+UUBl9678kCBvLnUXfXXBc5KXL5c=
Subject key identifier: D9:73:77:1F:56:DD:09:A0:DC:54:B1:61:D6:2A:FB:36:53:B4:7D:52
Authority key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Certificate issuer: /CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Certificate serial: 0199FDD975646B47AE1AD4CD790670B09E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:50 +0000
Manifest this update: Sun 19 Oct 2025 19:01:50 +0000
Manifest next update: Mon 20 Oct 2025 19:01:50 +0000
Files and hashes: 1: 8qr5TNtGc99EM-QMiEzlHX-eukY.roa (hash: dcTHPs/n6VDmLIgcktF37rlPg3cwpYptx2bPoNDPRlM=)
2: kNPlNxtkq5QtbcugSt_yrnq3xxI.crl (hash: PG9lr7c12n+En4fwXJPpW7d9dIOQybxEEVx8Q1/V37g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:75:64:6b:47:ae:1a:d4:cd:79:06:70:b0:9e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Validity
Not Before: Oct 19 19:01:50 2025 GMT
Not After : Oct 20 19:01:50 2025 GMT
Subject: CN=d973771f56dd09a0dc54b161d62afb3653b47d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:7d:4d:c7:08:c0:0c:52:0b:89:82:be:98:
f5:71:32:8c:1d:05:45:98:c8:94:39:cd:ff:6d:cf:
a0:a4:d9:34:85:20:4b:60:5c:92:b7:78:42:30:d6:
c0:eb:b0:a3:a4:7f:06:df:9a:a3:ba:49:4e:30:50:
00:2c:dd:b4:06:c5:8b:f9:8f:7c:67:e4:91:47:89:
28:76:59:b9:46:9d:62:26:bd:60:bc:81:2d:ec:00:
ed:9a:e4:4c:b3:db:85:56:18:90:4c:0b:5a:34:95:
d0:b3:27:59:9d:d6:c0:59:b0:5c:f4:72:e4:c4:bf:
09:92:5b:14:82:e5:4a:1b:d3:a3:44:8a:c4:7a:34:
cf:c4:59:0d:a2:1a:fa:b6:cf:63:d9:c6:a7:52:d7:
ef:b2:bc:41:0d:a0:d6:8c:90:cd:3b:2f:b8:52:ca:
50:2c:79:8a:2b:1c:14:23:79:bc:7f:19:43:52:bb:
3d:55:b3:84:43:6c:53:3a:70:ff:c2:e0:ad:8d:b1:
2d:9d:cb:7e:75:14:73:de:ba:38:ab:1e:fc:c0:1f:
53:96:cd:68:aa:4e:39:35:66:65:48:95:36:18:c9:
58:39:01:8e:f1:1b:94:51:f9:90:96:00:74:45:89:
0b:e2:d9:2c:32:da:3a:d5:a2:80:71:2a:c6:64:bc:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:73:77:1F:56:DD:09:A0:DC:54:B1:61:D6:2A:FB:36:53:B4:7D:52
X509v3 Authority Key Identifier:
keyid:90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e1:59:19:8a:27:4a:4f:de:53:9d:78:cc:fa:ef:e2:c3:cb:
24:69:32:dc:1b:6d:f1:c2:b5:bb:8f:27:21:a0:68:08:f0:99:
fa:a3:b6:3e:2e:10:99:04:ff:fd:61:55:c9:18:22:d7:5b:e8:
64:3c:27:89:bb:ea:8d:ef:93:38:64:4f:36:64:af:b7:04:27:
c2:dc:d4:ae:a2:50:3e:19:68:89:2f:bc:45:63:86:fe:67:d9:
6d:af:e0:23:4f:9a:94:a5:ef:fb:46:32:46:3a:a6:ad:ff:2c:
3e:ba:1a:85:0c:fa:da:68:05:d2:02:20:80:7a:02:f2:94:a7:
22:9a:25:ea:08:cc:74:c9:d0:6a:07:86:81:ac:f1:dc:ca:5e:
d1:dc:41:46:75:cb:04:04:97:cd:1a:a8:40:e2:ca:55:ca:46:
c4:ea:86:e2:d4:38:8c:38:86:0c:e5:d2:6a:f1:c5:a3:e2:ad:
fa:6f:4c:b8:e6:ff:70:d4:a8:f6:a2:18:08:24:19:9c:98:64:
9d:bc:1b:5e:76:9c:68:99:05:21:ac:5d:7f:b1:a8:eb:df:d9:
d1:61:b6:42:86:8e:e8:db:65:0f:4d:f4:c7:91:d8:fc:6d:40:
8f:b3:10:59:cb:5f:ff:86:56:aa:bd:15:6b:50:ab:dc:53:6c:
5e:a9:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:39:07 2025 by rpki-client