Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: lT7UNFc3o/E9t6qkrSqHaALVRdRKMScD5ZappadTTVU=
Subject key identifier: 1C:44:94:D0:FA:65:09:EC:45:D3:81:06:5E:A1:E7:BD:69:64:2B:D6
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 0199FCFD5B5170BDCBAA3E0DB48DD9DC3866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:26 +0000
Manifest this update: Sun 19 Oct 2025 15:01:26 +0000
Manifest next update: Mon 20 Oct 2025 15:01:26 +0000
Files and hashes: 1: I9i3fnf4Nk0WsFMmWEWJhe5vh40.roa (hash: llYywC4U70yW6sSChiJ+ZHwIZzZjQAej/EchqIalMeA=)
2: IGJfVzvhS1XNfQJqw7b44W8rh5Q.roa (hash: ps4BuWOubuNVlVOQpqaTImNMOhN/B2m1xTG8lC4cqCo=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: MJ8DBtBnzcm807Vgs0rlTCpWf77bHKB2ssNkEtKl100=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5b:51:70:bd:cb:aa:3e:0d:b4:8d:d9:dc:38:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Oct 19 15:01:26 2025 GMT
Not After : Oct 20 15:01:26 2025 GMT
Subject: CN=1c4494d0fa6509ec45d381065ea1e7bd69642bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:fa:77:76:75:8c:07:a6:7c:90:ae:14:ee:
f1:b5:77:a4:bc:49:3f:34:81:03:fb:41:c4:ed:d5:
8a:7f:26:6f:6e:68:dc:d6:b3:32:da:79:89:44:6c:
ad:b7:04:9e:41:f7:80:0e:87:25:e7:20:43:24:a9:
10:51:16:de:f4:02:4d:2f:ee:80:48:06:3b:17:d0:
1d:53:33:d5:b4:87:eb:51:5d:6c:16:32:d9:e5:25:
bd:fa:c6:40:8b:1c:9c:f1:f9:8c:c7:63:d0:7c:84:
d3:fd:19:43:b2:02:94:fb:71:06:42:08:fa:45:d8:
30:9f:99:79:6a:61:93:f0:8c:5b:40:fa:a1:dc:dd:
8a:87:08:d4:36:c5:cd:06:48:20:66:5f:9e:38:33:
55:c6:b8:97:b7:46:b4:dd:de:b7:d1:f9:0d:51:24:
6a:b4:33:2c:c0:ea:6b:6d:ff:1b:05:0c:99:7e:e7:
7b:b0:f8:31:97:5d:89:a5:23:e9:ba:be:95:3a:c2:
55:59:25:82:8d:eb:16:8c:e0:90:ac:e7:c6:77:bb:
5f:9a:22:64:7f:d9:79:5d:23:78:fe:51:a3:16:42:
98:b5:dd:11:d1:cf:e9:ba:a9:40:e3:d5:60:fb:72:
69:14:e3:ec:35:13:c0:98:98:05:60:db:50:41:12:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:44:94:D0:FA:65:09:EC:45:D3:81:06:5E:A1:E7:BD:69:64:2B:D6
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1f:b3:44:eb:72:ed:0e:16:be:5f:6d:e0:17:42:d0:07:49:
8d:ec:4a:84:40:0e:60:44:dd:62:ae:67:68:db:30:a0:29:72:
5d:a8:88:8f:dd:a8:2a:47:a7:4e:85:34:42:39:d9:99:70:ef:
67:76:75:4f:f9:a6:d5:d4:ec:8b:8e:2c:5c:49:8f:f2:dd:45:
20:86:c6:50:29:f2:b6:3b:a8:ec:ac:81:35:5a:67:ae:10:11:
02:dd:6d:28:b5:ff:78:70:aa:c0:ed:da:88:85:55:71:0b:e1:
21:7c:56:2f:6b:56:b5:81:ee:9b:b8:2b:18:72:a1:e2:2c:4b:
dc:91:55:48:91:09:06:3e:f7:b3:6b:3a:8c:bf:5a:0f:ac:d6:
d5:4c:d5:7f:f0:d7:19:90:d0:b7:5c:83:f1:28:8c:58:03:e0:
eb:cf:be:51:53:d7:f7:58:7c:83:72:a9:c4:4e:f6:b6:4c:4b:
1f:b2:1f:dd:5c:d2:56:52:68:3e:cb:d8:43:0e:7a:c3:d8:58:
97:8b:22:da:40:34:56:c3:e2:70:3e:b1:b2:45:ab:2c:46:0f:
4d:19:57:20:5f:41:81:c3:6a:e4:29:7d:86:a0:ce:97:2c:5f:
62:30:bc:9a:12:c4:be:6b:e3:72:79:cf:6f:e1:4f:41:95:41:
da:64:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:32 2025 by rpki-client