Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier: xt+GHU366E/UKYaNKL9aA9HOdf7ejmXkO2D8aQ8ujus=
Subject key identifier: 68:A3:B6:13:BF:EA:B9:17:0F:F3:CB:A3:B7:A7:21:3F:30:3D:93:DE
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 0199FCC61AC6A3CF893B5B01E3E3A74E4F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number: 16F4
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: l0aW+j2P/Pof++xJtN81qLsx0hq+XaI/oW+laosYMPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1a:c6:a3:cf:89:3b:5b:01:e3:e3:a7:4e:4f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=68a3b613bfeab9170ff3cba3b7a7213f303d93de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:32:7b:83:a7:35:b6:c0:6b:f1:75:73:fd:
04:b0:77:8f:2e:40:0f:5f:14:0c:09:79:24:3f:60:
05:86:66:12:6b:fd:4f:b4:fc:41:eb:7c:e6:df:1f:
56:6e:cd:e6:83:b5:70:80:57:66:42:fe:58:27:22:
22:01:68:62:18:28:79:d8:11:66:8c:dd:eb:4e:e5:
91:52:17:51:b2:f0:42:66:71:29:7d:d4:12:4f:d6:
f7:96:e6:6a:d4:7d:b3:04:dd:a2:d8:ba:92:72:a7:
dd:e5:a2:6b:e7:1c:ef:06:22:10:be:bd:7e:95:e0:
b4:c0:ee:21:4a:d2:9e:88:f2:6b:52:be:1b:18:f2:
fb:6f:f8:72:ff:a0:0d:0e:88:bd:4e:f2:74:fb:20:
b9:5a:50:93:ed:3d:d4:a7:9f:2a:e0:f5:56:f6:40:
85:4b:79:d7:19:9c:43:86:6f:80:66:65:eb:26:9b:
a0:50:00:02:b9:1b:d5:f9:06:ff:97:c7:0f:c1:88:
ec:0d:01:cc:f9:0f:60:05:ff:95:98:32:8b:f5:d4:
6b:1f:ee:2f:f0:13:e6:57:ee:12:08:e1:4d:1c:fe:
18:d1:47:0a:e1:42:bb:2f:e0:3a:dd:b1:21:8b:e4:
36:9a:de:8d:01:be:5e:bf:3d:74:16:fe:53:d7:4d:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A3:B6:13:BF:EA:B9:17:0F:F3:CB:A3:B7:A7:21:3F:30:3D:93:DE
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e6:81:8d:ff:11:10:ba:91:60:ab:dd:38:a8:60:8c:c3:d3:
57:ac:6e:a3:1d:e7:9f:2c:27:02:99:23:22:20:fc:ef:5e:61:
eb:b3:39:7e:cd:47:bd:df:7b:0d:b7:38:30:dc:9d:54:bd:57:
e6:26:7a:da:a9:d9:8c:ce:11:64:7d:ce:d7:0d:1b:10:4e:f1:
90:f5:0c:31:e0:54:75:42:b3:ba:09:6f:1f:69:69:60:92:ff:
e7:0a:24:a4:6d:b4:b1:61:3e:20:68:29:92:b8:2f:7a:2b:9c:
fc:b6:3d:cf:c3:ce:22:19:7b:ea:0c:55:4e:5b:91:71:2e:c3:
f5:a8:bc:d0:bc:b3:db:b5:76:88:e6:10:63:da:cc:bf:89:87:
13:54:39:26:fa:cf:68:70:85:86:e5:13:2c:97:bc:5a:5e:05:
bc:4d:49:b4:fd:72:61:1f:20:b4:19:98:85:6f:02:25:f7:9c:
d1:bf:69:a7:46:c9:15:d9:df:71:4e:28:5e:fe:12:2b:b2:96:
90:92:20:01:4f:54:90:5a:3f:9d:5c:38:4f:61:6e:b3:1e:59:
47:97:26:ac:5c:84:cf:9c:d8:81:3a:97:9a:49:ac:0b:08:f5:
cc:f8:32:c0:81:ff:8e:11:82:a6:53:ad:5e:dc:91:82:f2:23:
bd:e0:64:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:11 2025 by rpki-client