Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier: xvNegIsrAzV3oTXBlhAFM+nig90I9c9pkO/7FRkFEEg=
Subject key identifier: 05:CA:1C:03:95:40:31:7B:99:C9:DC:68:97:9D:EA:83:99:7D:86:1B
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 0199FC5886E0D2BFA7BEEF4EEA647FEC30A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: GqA5UTC990ZFigxOynJ8MXXo8rI.roa (hash: YOFtkRTAig5lLMiPuaPFv21LA8hii5BrqwulK2FRjwI=)
2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: cUFkn9vwgJKPH0cSjaQ6LtbpOep9sG20A6BmzaDjxCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:86:e0:d2:bf:a7:be:ef:4e:ea:64:7f:ec:30:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=05ca1c039540317b99c9dc68979dea83997d861b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:fa:a1:19:f8:24:fe:4c:b4:0b:df:1c:b3:
04:85:09:3c:62:19:6c:92:a8:7b:c0:1f:44:15:7e:
36:be:17:76:ce:1f:df:d8:1f:4b:8f:dc:c4:d5:74:
73:d8:0f:2b:d7:36:6f:9d:5e:5f:ae:4a:85:97:5f:
24:c8:4c:63:ab:02:3f:bf:6b:49:97:f8:9a:6f:d6:
de:05:04:76:33:01:09:87:8c:56:e4:65:ff:44:19:
18:b8:ff:31:5a:ed:ef:33:a7:60:7b:36:bf:bf:86:
16:40:9e:af:f4:81:a9:21:85:7b:55:d6:5c:40:d5:
a1:25:b0:f3:fe:57:a7:05:9e:5c:06:73:30:e6:95:
44:7d:53:28:df:4f:84:89:dc:de:55:c5:fd:82:ca:
ef:ec:de:1d:4c:eb:40:bb:3c:8e:54:be:df:42:d9:
69:c9:9a:ac:95:63:b7:c6:e8:46:ca:be:e1:88:90:
d8:d5:d0:44:0f:c4:27:77:89:25:85:36:f7:a5:3c:
b5:95:39:11:8d:ec:d2:d6:c1:7c:f3:a4:37:fd:c1:
e1:52:50:f5:0d:c4:59:e2:f0:dd:6d:0f:b9:9c:95:
66:90:48:82:e2:20:8e:0a:4b:76:c5:49:be:df:65:
2a:c2:7f:cc:40:11:c1:4e:ff:0f:7b:1b:b8:25:e3:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CA:1C:03:95:40:31:7B:99:C9:DC:68:97:9D:EA:83:99:7D:86:1B
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:bf:97:8e:15:04:4d:28:cd:d1:d2:f7:e5:a1:0c:9e:b4:35:
de:81:d4:93:25:91:0e:0a:8a:f5:bc:59:89:a3:58:a1:ad:96:
7b:9d:e1:47:be:c7:ce:fd:bc:62:75:a1:ca:43:cd:5c:76:92:
e5:c3:26:f1:2a:27:3d:41:f4:11:6a:1d:4d:7b:d7:25:41:e2:
e2:d8:c8:2d:c4:86:0e:7e:e7:76:a9:7b:92:90:cd:7f:7a:3f:
93:5d:b5:13:a3:c2:86:5d:d6:19:51:84:22:89:21:79:c0:d2:
9a:b0:68:c4:fc:00:21:4d:42:c6:db:85:6b:39:a4:d5:d2:f0:
bf:93:c7:7e:56:68:aa:4c:1d:46:ae:2f:eb:15:4a:ea:33:ee:
e4:54:66:83:a1:16:8a:7b:35:c6:6c:be:88:50:85:d3:fb:33:
40:ce:f5:40:96:62:60:36:18:ad:5e:28:70:e3:85:f6:56:ad:
6c:d4:40:f6:47:95:68:70:77:3c:00:44:a8:82:ec:cc:0d:50:
df:62:c9:1b:a4:d8:7c:c4:b4:b3:6b:a8:1e:51:ea:e7:d4:19:
97:a9:dc:85:56:eb:b2:3a:93:a6:fa:44:64:35:64:0e:1b:a8:
45:29:32:e0:28:e4:62:43:ba:86:eb:28:a2:8c:bf:37:92:d3:
06:03:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:03 2025 by rpki-client