Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: VpqEE4vBYS2ZDmsVgRhKxJxg0yE3Kpc2dsuLRRrx2wc=
Subject key identifier: 6B:1D:F3:7A:55:0B:6B:E5:75:BA:E1:40:9D:B9:42:34:0E:BE:75:6E
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 0199FEB4CAAC30E1205D0C55426A1C8975FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 0EF2
Signing time: Sun 19 Oct 2025 23:01:25 +0000
Manifest this update: Sun 19 Oct 2025 23:01:25 +0000
Manifest next update: Mon 20 Oct 2025 23:01:25 +0000
Files and hashes: 1: TYH4Ce0-k-wvqgRH0i5li3BgriI.roa (hash: Q3Et9vzkH2i83UUu897K4DdPhoe5uvwQSHH8BVd+9Y4=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: RNsZNdEqVIu9qFoAtU2FrYzBiyhBwiyTjz6g59HgDYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:ca:ac:30:e1:20:5d:0c:55:42:6a:1c:89:75:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Oct 19 23:01:25 2025 GMT
Not After : Oct 20 23:01:25 2025 GMT
Subject: CN=6b1df37a550b6be575bae1409db942340ebe756e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1b:76:44:55:27:49:6d:11:17:5d:29:d3:5e:
db:46:ed:54:91:84:a1:45:cd:85:96:29:c8:64:02:
da:6c:9b:3a:d7:a2:dd:0e:ce:87:66:6a:43:80:2b:
28:40:68:10:5e:8a:78:4e:d8:ab:f2:3b:17:e9:6a:
51:ca:39:e4:9a:fb:2e:c7:ff:ad:36:ac:08:73:b2:
af:65:0b:e0:46:4d:37:84:a1:e7:28:ab:6d:6d:bc:
cc:6d:40:84:e3:16:20:c8:ab:12:e8:89:4b:a8:c3:
06:ba:56:63:4e:a6:1e:7d:f3:a8:67:ec:99:24:a5:
62:63:a8:81:e1:2e:9d:4d:af:05:f2:52:2f:ca:c9:
fb:68:31:e3:03:e5:c3:25:e0:8b:c1:8a:32:61:38:
b7:a0:10:4b:e2:dd:7f:91:76:ea:a2:da:54:d0:34:
77:0a:70:d3:c0:c2:8d:58:5d:b6:0c:75:f2:ea:5f:
85:df:9c:c3:53:7a:dc:44:84:6d:83:71:4b:0f:ed:
2c:9a:80:51:21:ca:e6:3b:2d:29:bd:cb:63:b3:73:
fe:51:e4:38:8c:47:e3:3b:70:34:29:7f:7a:29:4d:
35:2f:63:66:7a:24:65:37:77:e0:04:c3:c2:60:26:
79:08:27:51:2f:86:fa:29:7b:54:a9:a3:04:14:1f:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:F3:7A:55:0B:6B:E5:75:BA:E1:40:9D:B9:42:34:0E:BE:75:6E
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0b:78:60:0b:7f:c4:a8:1b:4d:18:0a:25:96:c8:6b:39:74:
6d:f7:63:4f:c4:e4:e1:92:82:f7:11:aa:10:f8:e9:d2:a8:4b:
c9:e6:4d:2d:c2:61:9d:4b:d8:08:7a:63:8f:31:d5:a0:04:f0:
ec:19:f9:fd:81:fd:27:e7:c3:72:83:1f:d8:18:96:d8:38:4b:
62:7a:95:2c:53:77:35:c7:0d:3b:cd:37:5a:bf:48:6b:ee:40:
17:cb:8b:d2:47:03:d8:05:87:a9:ee:b3:a3:54:61:f7:c1:95:
a4:e2:1e:27:87:28:2c:0c:5d:64:e5:cb:f9:cc:c2:02:e5:be:
d6:75:2c:40:a3:49:41:87:6d:e3:60:14:42:68:23:5f:1c:1c:
0c:54:c2:6b:41:b3:1c:54:79:cb:fb:92:64:63:95:d6:e4:a3:
23:1a:d6:9a:93:7e:7e:df:8b:9a:4a:49:ba:dc:02:ae:05:32:
b5:53:0a:bc:e2:fe:4e:a4:18:84:b5:c5:5d:51:05:f7:36:ea:
5b:b5:f1:59:82:4f:f6:1c:4d:9b:8e:d1:25:d4:53:03:56:53:
38:5e:8f:3e:55:dc:80:ed:1e:33:9a:38:57:66:2a:61:b1:88:
f1:c8:c7:6c:bc:5b:d9:ce:f3:e2:12:9c:50:d0:68:63:f5:52:
dd:7c:1b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:39 2025 by rpki-client