Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
File: kGSznoDKHN5MrcC8jqK0HqbSfHY.mft (raw, json)
Hash identifier: NpyAxgjKNZ2NI4cVZIEHkuuZr3zCwVyhfnHUDntUCkg=
Subject key identifier: B7:F8:47:14:87:F3:90:5F:EC:6E:E5:A0:3B:1E:1C:80:EE:AD:9B:0F
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial: 0199FCC694EFD780A8C3DB69E57B99B49B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa (hash: zIG0SkUcjt7d+bJLn+B2ubk7D8sMo7IcD8uDUAn5toQ=)
2: kGSznoDKHN5MrcC8jqK0HqbSfHY.crl (hash: tFviNU9hGUMmL9qGFJ+wqv0x3LN3SwOiKUmKmkWlEpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:94:ef:d7:80:a8:c3:db:69:e5:7b:99:b4:9b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=b7f8471487f3905fec6ee5a03b1e1c80eead9b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:1b:f7:1c:84:a4:03:31:e2:7f:39:54:da:
28:4d:bf:93:f5:1e:bd:08:32:de:42:2a:ab:e7:e1:
4d:f4:bd:bf:e1:2a:bc:b4:31:01:b2:2d:44:4f:39:
87:4b:90:17:c9:34:cf:0b:b5:66:91:5b:ba:20:45:
94:e3:75:0d:02:71:88:72:54:99:f4:ea:27:37:f6:
21:44:05:f1:0a:92:ed:94:1b:81:ec:7c:a9:3c:e6:
63:76:49:90:94:21:32:d4:46:aa:9c:9f:fd:ce:ab:
bb:66:de:a9:48:c7:42:e2:a3:c6:33:22:2a:3c:97:
90:c0:82:f9:ed:6e:ba:90:5e:5f:18:de:b7:b1:c1:
c2:dd:d1:38:ca:1a:46:09:a3:64:ad:e5:a4:8b:59:
e4:c3:8f:89:ef:31:86:2c:d0:e2:ef:4d:02:2f:1e:
ac:e7:f9:9d:be:ae:8b:95:15:ab:00:32:e0:51:b3:
34:80:a6:04:49:07:0b:c1:01:ec:3f:ea:5d:46:67:
23:31:c5:81:9d:31:9c:21:7a:cb:b5:0b:67:ad:3f:
94:59:89:5b:d2:8f:bf:01:ba:e8:69:6a:ea:bd:59:
f9:53:7b:4f:a6:cb:b6:94:75:f3:50:91:ee:c6:8a:
05:85:6e:a9:dd:28:96:4c:56:08:f6:24:97:02:6c:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F8:47:14:87:F3:90:5F:EC:6E:E5:A0:3B:1E:1C:80:EE:AD:9B:0F
X509v3 Authority Key Identifier:
keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ca:95:28:8c:7e:6e:f6:d3:a5:c2:3b:7f:7a:35:a0:90:7f:
9c:c8:a4:d8:d9:21:6f:f6:8e:d6:21:23:86:aa:0c:e3:d0:fc:
e3:37:09:4b:59:48:b7:34:6f:2d:e8:b0:6d:65:21:f6:52:18:
36:25:30:7f:78:3e:f6:a7:fa:c1:ba:6c:c0:b5:fa:4a:4a:48:
2f:20:68:52:ff:9c:45:c4:09:3a:fa:45:de:63:54:37:d3:63:
05:e0:6d:c9:d7:55:e6:2b:52:e1:b4:e4:64:95:24:0d:1c:91:
fb:e3:ff:cb:78:85:7c:9b:cc:de:56:4a:13:22:f0:01:24:af:
a6:ce:8b:9e:b5:21:04:a2:59:5f:eb:e2:bb:79:1d:de:97:e3:
ae:24:96:2d:8d:0e:d4:00:9e:52:8b:e8:0c:0e:68:a6:3b:0b:
e8:c6:28:ff:0f:74:ab:26:24:db:5b:08:21:e9:1b:6b:fc:3a:
fd:87:82:14:54:fe:fa:11:57:4b:b2:9f:f7:55:f4:62:e8:25:
ca:62:87:79:7d:b8:04:25:5b:79:b7:42:c5:52:e0:17:7a:22:
53:2e:d4:86:ba:e0:c3:c0:35:ab:32:e5:88:2e:52:3d:7e:5f:
01:81:2a:55:61:97:77:05:80:be:e9:fe:ea:ee:00:75:ca:13:
7d:cc:b9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:31 2025 by rpki-client