Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier: 3EBMbULOIzsIqhuFa1ZiOMfOEjojFTYUoBotAQaRS1Q=
Subject key identifier: 51:D5:AF:BC:A2:56:D1:3B:A8:1B:67:32:0B:2B:66:07:0D:5D:B2:F2
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 0199FA69E3A4D955B991E46DFEC818E9BA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 03:01:07 +0000
Manifest this update: Sun 19 Oct 2025 03:01:07 +0000
Manifest next update: Mon 20 Oct 2025 03:01:07 +0000
Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=)
2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: /AvuEljc7clZBGAPNL2vhiQA/6ZiVajHW/dmJ7RI22M=)
3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=)
4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:e3:a4:d9:55:b9:91:e4:6d:fe:c8:18:e9:ba:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Oct 19 03:01:07 2025 GMT
Not After : Oct 20 03:01:07 2025 GMT
Subject: CN=51d5afbca256d13ba81b67320b2b66070d5db2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:b0:91:35:f7:d9:c6:ac:85:e8:2e:dc:5e:
e9:28:46:97:99:f4:35:92:80:0a:fc:b0:34:0c:d0:
bf:c5:bf:c0:09:87:88:1a:26:cc:72:6a:59:36:98:
de:b9:ca:20:c1:8e:c6:b0:bf:f1:96:59:0b:15:ab:
18:5f:d5:c7:fe:42:65:31:80:e2:34:3c:1a:d9:f8:
f8:e3:7f:93:d8:f4:c9:c1:47:70:33:d9:ec:8e:78:
66:08:3e:b3:14:72:87:01:fe:2e:e3:5f:af:76:64:
f3:9f:e1:a0:e1:09:41:94:96:8a:98:f6:cd:d1:3f:
a9:03:b7:70:41:a6:89:6a:c2:a4:7c:0e:9d:9c:01:
28:ca:97:73:75:38:16:0c:5e:61:91:42:5a:c3:de:
a7:ff:7c:a8:d6:87:b0:36:8e:bd:c2:bf:c6:52:ba:
02:ed:98:8f:79:33:06:0e:e6:1e:8f:f6:71:e3:40:
2d:ec:8f:5c:4b:df:8c:48:0d:90:5c:1a:1d:ee:02:
9c:57:49:ef:6c:6d:fd:3c:00:92:30:92:4b:74:3a:
c5:4c:a7:ea:5c:79:b0:61:29:ed:63:dc:e6:e8:85:
fe:21:94:b0:04:43:b2:78:bc:dc:30:cb:c9:d0:3c:
da:62:09:de:3a:0d:b8:38:ac:c6:f2:97:c4:20:d5:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:AF:BC:A2:56:D1:3B:A8:1B:67:32:0B:2B:66:07:0D:5D:B2:F2
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f2:21:e1:f6:b7:27:f4:17:01:af:ad:52:55:84:59:8e:73:
a8:9f:f2:6e:a7:c1:10:37:2e:c2:6b:8b:73:a1:1c:88:55:5d:
1c:a6:8a:a1:30:cd:07:f4:4e:e2:40:50:79:3c:3f:37:e5:0d:
70:5f:d1:3c:12:93:f3:92:0e:ee:c4:11:71:82:07:f6:37:d6:
f7:89:fc:17:52:b7:45:aa:8b:ce:aa:7c:b8:55:d1:d0:94:e3:
5f:2c:93:b2:7d:c1:0b:af:89:6c:df:2b:b2:11:a2:ae:33:26:
1b:b0:8b:49:d1:29:d1:27:5f:4b:2a:c4:3e:6f:d3:94:cb:bf:
b2:f3:42:06:37:98:9d:8e:5a:86:00:3f:54:aa:fc:5a:21:f4:
3a:aa:4c:37:9f:7c:b7:1c:68:3a:87:77:9f:4b:26:5e:1a:e2:
4a:c8:73:9b:1c:bc:40:b2:f1:a3:0f:bd:b5:b6:67:9a:dd:9b:
99:54:8a:f0:08:5b:0d:cd:d5:e9:e3:58:1e:11:2e:4f:16:30:
7f:95:35:b4:7e:79:9e:4c:c6:95:f4:05:aa:d0:29:67:c2:d1:
18:4a:a0:fc:36:0d:a9:78:c4:d7:52:5c:bf:cb:92:4c:2b:e4:
2a:ac:01:b1:24:79:b1:42:b6:9b:ef:83:5b:f1:53:5d:07:26:
25:ff:f6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:47 2025 by rpki-client