Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: mp5x+UzjHF8JDy9JYtxIoqU2gdjpyLY34Y8MldsL8oE=
Subject key identifier: B8:69:C2:C9:55:FE:32:B3:50:73:10:A2:96:2E:26:41:63:9E:8E:C3
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 0199FBB36F7B845A914AEA4895C8CA8718A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: DnNAXyr4mJbh9D2dH8b-Eqlp6x0.roa (hash: cdWRTytNkhNuFkycWb/FtgfNdkALU3YMBn7zWtYw/bY=)
2: Se8nAg0-xrQhHXIbYS2eSChavY4.roa (hash: NDhJCH+ULsr3l5nHLuoOYh5KnKuXbhQ8t+mEi5JVlO4=)
3: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: MGUjocjL0JoT+o9Xxoo1Wo9l2KPdWP3mVSHM7dpI9Pk=)
4: t4twN0aSa0K9eQj9_U5RX1_3ON0.roa (hash: bDhB2OJvqSQD0pWiRQx+Ywx+t/naLGQ733yplp/x/5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6f:7b:84:5a:91:4a:ea:48:95:c8:ca:87:18:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=b869c2c955fe32b3507310a2962e2641639e8ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b3:c2:49:e6:02:43:67:b2:29:49:2a:e5:8e:
c3:e6:68:65:88:d3:fe:ee:71:34:f2:e4:a4:c7:54:
65:bf:c9:1e:d9:cf:a7:52:26:3d:d5:97:9b:a5:f6:
58:f5:b5:9d:a5:0f:55:2f:69:30:57:a6:37:a2:58:
de:7d:ff:6e:29:37:69:76:a5:ab:fb:5a:cf:fa:2e:
8f:40:79:f4:23:18:e6:9f:b0:d1:6d:2b:77:b3:60:
d0:fb:90:66:c7:6f:0b:ae:3e:06:78:8c:3f:e8:56:
45:a4:f8:59:4f:c5:c7:c2:d9:c8:1b:5b:ed:2c:c5:
24:b0:59:d2:eb:f7:0b:4d:8d:63:c7:0e:2d:53:b8:
8e:38:3e:fa:d1:0c:cb:a7:07:33:a1:7d:36:4b:16:
9c:2b:f8:e0:40:70:0a:18:51:94:ae:d6:04:31:46:
01:46:81:f0:be:c7:6f:ef:fb:98:81:8e:bf:c6:5f:
1d:ca:3e:3b:d7:50:22:6a:2d:49:d2:8b:0e:41:a1:
bf:93:b1:e9:45:03:8f:c2:78:41:c0:16:0f:ce:34:
c1:75:78:24:b6:f6:6b:d6:6e:9c:bc:e4:9d:d9:c3:
0d:28:55:0c:07:35:83:29:fc:76:ce:f3:ec:07:2c:
41:fe:f5:f9:c9:fe:b6:62:d0:63:84:ad:78:13:ac:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:69:C2:C9:55:FE:32:B3:50:73:10:A2:96:2E:26:41:63:9E:8E:C3
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ba:8c:90:fb:c3:e0:61:2a:0a:9e:9e:13:41:d2:9e:46:5b:
07:04:17:43:bc:04:e7:a5:fb:31:e0:7f:5d:42:aa:d9:d7:55:
67:1a:77:59:e9:ac:c4:d4:03:df:1b:39:75:90:25:2a:21:b4:
7e:fd:77:aa:9b:b4:39:92:9f:5b:be:0e:1e:3a:de:f2:dc:4c:
c6:ad:c5:99:95:a9:ca:d7:77:62:bf:4f:f7:02:3f:2b:8a:6b:
58:71:59:4d:1f:87:40:4f:3c:b8:61:21:d8:8c:76:4b:6c:f8:
14:8f:c9:0f:a7:b5:e8:96:cd:6f:20:0a:d8:72:45:57:16:c1:
e4:aa:4f:df:59:90:75:61:74:3c:d5:01:bc:b1:6b:97:0a:f2:
c7:00:15:ea:40:ad:78:a3:6a:b4:b9:b7:88:40:84:25:ac:0f:
10:cf:46:73:e6:50:75:fe:6d:21:5a:d8:5b:02:40:f4:2c:55:
b6:dc:6b:ba:58:25:43:b4:8c:25:67:09:9c:cb:9d:7b:c1:73:
aa:37:53:a1:d8:03:87:53:92:61:0c:d4:09:85:d3:b3:0f:62:
c5:1c:cc:d9:e4:ca:a8:bd:05:3b:cd:8a:4e:95:c4:bc:7c:c6:
c7:0f:28:9d:85:5e:97:6e:d5:ac:eb:3e:4f:db:b0:74:96:84:
24:ad:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:15 2025 by rpki-client