Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
File: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft (raw, json)
Hash identifier: maTbYkNJbKkStq6xNpE9WRl0jrwsLp/um8CZHPy9jSs=
Subject key identifier: F6:A5:D6:49:54:53:72:10:2F:F3:2A:E1:73:8A:9C:45:78:0F:3E:54
Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Certificate serial: 0199FCFD8361477746351F59DAE8F4707205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: Et82Ox-YoPWswPFqxd1JmT5HiVY.roa (hash: dKjp2M/qEJfQktMuqf3U3untvmBMHbGfy5ZX8hyRWlU=)
2: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl (hash: Z0rnnU6Rbakqa6iZRxhfP5Mydilg3xO+QnM3A6TfkP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:83:61:47:77:46:35:1f:59:da:e8:f4:70:72:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=f6a5d649545372102ff32ae1738a9c45780f3e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:9e:01:d4:70:60:4a:eb:00:3d:c5:02:eb:
a8:16:92:18:83:ff:79:19:0a:77:0c:6c:e4:0e:3f:
e5:63:23:4d:d6:40:bb:43:37:8f:73:4e:c8:87:08:
3a:0a:73:4a:6f:27:3d:1a:36:cc:e5:28:dc:e6:c3:
15:85:be:a4:87:72:be:52:52:bd:64:90:24:31:b8:
91:91:68:a7:d4:65:9d:2f:2f:58:fe:ab:7a:05:14:
de:ef:8e:ec:be:7e:e7:2c:51:24:53:26:67:68:fc:
64:39:1e:72:73:ea:c3:8e:a6:fe:a8:53:df:76:38:
5a:2c:c8:76:96:67:0f:fd:97:7e:f0:51:22:dc:65:
0a:9a:ae:34:ea:51:a7:fa:ef:68:22:3a:f9:0a:76:
53:3d:72:02:f1:9d:96:05:7b:88:31:19:b9:d5:54:
c3:f4:84:e2:27:2f:c3:5c:46:ea:f6:2f:49:16:9d:
96:22:9e:41:08:6b:ae:b2:77:24:e0:36:e5:35:b9:
5d:85:8b:96:96:3f:c2:52:51:b1:fa:b9:07:35:2f:
b8:7f:1c:95:42:3e:7c:d9:9a:e0:4a:16:7e:c9:a1:
1e:c9:68:a1:ba:51:ae:64:3a:7e:45:5e:2a:7d:2e:
fa:db:e6:68:a3:1e:96:7d:8f:19:97:7f:70:80:9c:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A5:D6:49:54:53:72:10:2F:F3:2A:E1:73:8A:9C:45:78:0F:3E:54
X509v3 Authority Key Identifier:
keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e4:4d:b1:20:1c:2e:2e:e1:76:67:a9:9d:e1:79:82:92:60:
af:38:18:e3:bc:82:d6:98:71:e7:c8:15:b6:6a:f7:60:b1:6e:
65:4e:9c:8b:c4:79:61:68:56:8f:7f:97:61:50:70:b1:ac:98:
af:fe:1c:54:7a:d8:11:96:e3:fb:59:e1:5a:f3:d5:11:23:8e:
06:f9:87:28:50:f1:72:31:14:60:97:20:55:79:c1:2b:5b:66:
cf:03:b4:19:0c:90:d9:22:10:00:59:29:e0:3b:cb:68:ec:fd:
11:05:04:d9:33:8d:93:ef:f9:60:63:68:17:5c:88:b5:20:59:
ae:5d:e8:17:ca:0c:b3:6f:e5:a1:4e:ec:46:4c:1d:0e:a2:39:
b2:3e:14:1f:e2:ff:15:e4:19:9e:c9:2a:0f:eb:ce:6b:b1:b0:
a6:9a:97:2f:44:6d:70:af:c2:66:a6:53:a9:2e:ac:f9:18:78:
21:14:c5:f2:b3:6b:86:c7:c1:19:bd:b7:26:89:55:c6:42:59:
98:ce:f8:03:b7:e5:f9:0b:60:04:1b:a9:a5:d2:c5:2a:5e:88:
39:cc:43:f1:d9:16:c2:e5:95:60:49:52:6d:08:4d:78:bd:76:
28:cf:39:08:46:9a:0c:40:e3:ae:f1:52:43:26:33:e8:44:b2:
c1:0b:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:30 2025 by rpki-client