
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: /RA8Ndypivq1ybdxbaDpn8T/D7qv/emk2vVV3LAOG3I=
Subject key identifier: 35:23:85:F2:8E:BC:61:F6:53:84:6B:13:D3:AE:E6:4B:4F:23:01:87
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 0199FAD84964ED61101299E0027FB6AD1F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:01:42 +0000
Manifest this update: Sun 19 Oct 2025 05:01:42 +0000
Manifest next update: Mon 20 Oct 2025 05:01:42 +0000
Files and hashes: 1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: qkuYuN6aAlhAnttSx+0AOn2MsWjX5TuM31hkyRVLQOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:49:64:ed:61:10:12:99:e0:02:7f:b6:ad:1f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Oct 19 05:01:42 2025 GMT
Not After : Oct 20 05:01:42 2025 GMT
Subject: CN=352385f28ebc61f653846b13d3aee64b4f230187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1d:b4:00:9d:50:26:73:d0:cb:0a:a2:2f:7b:
d4:3d:73:10:65:4c:62:44:43:a4:c2:1c:c8:11:02:
10:36:16:97:3c:70:b1:e1:98:73:9d:19:09:46:d9:
4f:92:c0:e8:b6:48:df:2c:5b:7e:60:33:f0:b9:20:
5f:12:48:19:49:5a:f0:63:c1:2b:1b:83:b9:f9:d8:
b6:d1:50:98:b3:91:94:47:02:b6:49:88:ad:1f:72:
69:ab:1a:09:22:97:11:86:16:da:0c:d3:4e:8c:bf:
1d:ee:2c:52:69:4c:ba:cf:40:50:55:9e:22:36:b5:
37:a8:b3:39:35:26:34:f4:62:25:8c:50:c2:c9:fe:
09:0a:76:45:b3:76:33:aa:0f:9f:6b:17:ba:b0:cb:
5a:ea:81:3c:4e:51:93:47:fe:59:93:b1:1b:cc:d8:
92:bb:93:20:8b:11:67:39:2a:6f:4d:ad:69:60:07:
dd:7f:4c:f3:fc:a5:9d:91:0f:86:c5:56:42:ed:fc:
7a:c9:22:a4:a7:c8:97:41:39:3d:4e:3f:44:d7:65:
1b:0b:66:3f:92:49:2f:09:79:60:55:69:c4:98:a1:
3a:f4:8d:48:b6:30:e2:71:ff:b4:82:85:43:37:fa:
c4:7a:cd:5e:ed:b0:b1:6a:47:43:90:ed:93:cb:ee:
ac:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:23:85:F2:8E:BC:61:F6:53:84:6B:13:D3:AE:E6:4B:4F:23:01:87
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:28:9f:5d:57:90:3d:e5:c0:a6:28:0a:29:fe:c2:f2:ee:4f:
1c:ba:df:78:6a:8c:39:31:29:e2:22:4d:c3:2b:2a:f8:17:76:
5a:8e:0f:64:76:e0:d4:93:5f:1d:01:37:da:98:a5:68:63:fb:
46:93:aa:be:e3:ab:4b:e7:fe:40:96:ff:44:ab:30:a9:d5:34:
95:09:9b:b7:2b:03:49:5c:63:69:0c:6e:e1:6c:c4:92:aa:bd:
88:8b:8a:d2:d6:61:15:50:96:13:d1:a2:90:11:9c:1b:1d:48:
be:b2:cf:29:6b:fc:6b:e8:d5:67:f8:a2:5a:e2:43:b7:0e:3e:
81:98:c0:67:25:1d:dd:d4:7b:c1:b3:83:bc:10:10:87:89:5a:
01:63:01:c9:92:11:8d:db:06:f3:9c:fc:f4:0f:12:0e:a9:a4:
94:78:fb:b8:01:f9:d6:d7:12:ae:cf:2c:b0:7c:cb:31:bf:47:
d5:ee:4e:9e:9e:a1:2e:c8:5e:79:b5:0f:5d:cb:fe:22:03:ca:
ed:aa:85:53:3a:0a:a1:f1:8f:3d:8b:8a:cc:22:3c:8e:0c:da:
c0:70:d5:8c:2b:80:c0:bc:72:9b:1c:05:92:da:75:9a:62:60:
79:a0:d1:07:c6:89:43:86:5a:7b:7f:40:31:0e:06:80:2e:dd:
71:0a:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:33 2025 by rpki-client