Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier: hm6PtaqyxMhc/BCoiQ6LXIAvyMlnbk2I/i2+jwLEoJg=
Subject key identifier: 3C:49:65:19:48:41:C7:E4:F6:E4:AC:70:4A:9C:08:9F:04:E8:2F:B0
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial: 0199FC58A2E9A3DDFB05B10AC5823E1C9AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:30 +0000
Manifest this update: Sun 19 Oct 2025 12:01:30 +0000
Manifest next update: Mon 20 Oct 2025 12:01:30 +0000
Files and hashes: 1: 4MUCYAZCB6NVOKQFb7pDQIHNpgE.roa (hash: J62BqBqvWBCAmGxGxzXNfz9RxMyKPvmpSv0G2g6PRts=)
2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: 30HdJO+4q4AiLGIcRiHPDdOA4IUZ+eK9WRb9ON/5zmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a2:e9:a3:dd:fb:05:b1:0a:c5:82:3e:1c:9a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Validity
Not Before: Oct 19 12:01:30 2025 GMT
Not After : Oct 20 12:01:30 2025 GMT
Subject: CN=3c4965194841c7e4f6e4ac704a9c089f04e82fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:c2:31:50:d5:bc:8e:73:d5:65:0c:86:53:
30:ea:79:1a:23:4c:ca:2d:a1:42:fc:ad:06:3c:37:
9f:50:1e:4c:c7:9a:cb:1e:13:b9:db:5a:80:57:e1:
df:1b:dc:bf:9b:0b:5f:a9:da:c0:a5:af:fc:94:a4:
55:14:f4:45:0f:49:95:c9:c4:f4:f8:e9:5c:cf:ab:
62:1d:4c:0f:f3:4c:ce:e7:36:ba:ea:21:65:15:66:
bf:cb:41:77:8d:1d:49:4b:c7:dc:7d:c5:9e:9b:8f:
bd:60:a6:87:30:91:07:c3:f5:f3:6e:ba:63:3e:e5:
79:ea:7a:ab:cf:1b:7e:86:1e:6b:c8:0a:2c:5e:05:
7a:25:ad:df:51:6e:2c:14:fc:29:57:de:c9:e2:5d:
68:8e:f6:88:7a:fb:5d:74:4e:96:b3:42:9e:cf:9b:
b9:7c:77:46:8f:bf:7a:ae:42:a3:b1:30:41:45:91:
fa:68:1c:cc:da:f1:b0:94:07:d3:0c:aa:f0:68:63:
e7:ee:68:45:e7:46:85:27:34:9a:09:eb:92:7b:1c:
53:3e:1e:35:de:2d:b7:37:2d:b5:a3:19:98:85:f0:
68:ef:19:28:89:8b:02:64:a7:6f:fd:84:3f:f8:92:
17:3c:a5:54:21:57:98:84:81:8f:f9:07:46:66:5f:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:49:65:19:48:41:C7:E4:F6:E4:AC:70:4A:9C:08:9F:04:E8:2F:B0
X509v3 Authority Key Identifier:
keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:83:16:ab:35:c6:12:ff:40:fa:c8:f5:7c:55:c4:b4:fc:bf:
de:6e:a7:8d:88:02:11:7a:b3:b3:60:5d:2d:a0:09:69:4b:cc:
4a:5c:c6:96:48:35:9b:a3:10:67:b1:52:ca:e8:dc:b4:82:4c:
d5:9a:69:3d:e2:18:f9:37:d4:36:43:fa:ca:22:29:25:8a:a5:
a0:2c:7f:52:95:d9:5b:83:61:09:63:d9:3d:6a:c9:77:ce:8a:
bd:06:88:03:3e:af:8f:a4:b5:3c:04:62:56:46:df:2c:62:27:
92:fb:f7:3a:a0:07:a9:4a:1d:46:3d:75:92:19:3c:bd:0f:64:
a0:dd:5c:6f:4c:a5:fb:db:05:b0:16:ec:7b:0b:8a:fa:a5:d9:
91:48:e9:38:e0:86:40:58:19:b8:9a:70:8b:26:7e:3a:d5:9c:
64:31:e5:4d:0b:00:e6:1a:d4:a1:91:51:84:ca:7b:02:10:e1:
c4:14:1b:c2:98:6d:44:fb:85:35:bd:f3:e5:45:38:1a:6e:ee:
91:10:7b:e7:3b:93:ad:52:e9:7e:b7:ba:48:b6:2b:cd:d0:68:
cd:5c:e9:aa:46:bb:46:65:ee:b0:b1:6a:0a:f7:83:b1:94:41:
b0:10:c2:1f:1d:dd:ab:22:16:a4:60:42:55:a6:fc:f4:08:8f:
f0:60:f2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:33 2025 by rpki-client