Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: taOYMp0tdVOrj12tt1GdJQRXoHKUfS79sbfnztDDQ0A=
Subject key identifier: 1C:12:BD:2E:23:4D:FD:FB:CE:BB:7D:B1:21:48:06:55:D9:E7:7E:11
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 0199FCC6915A0A26E04DFB5D6D8E401EBA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 05C0
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: ITvafiNBv4ylSij6nbuKyZmdE8k.roa (hash: eQlQlT15GdOmzPkZPFcmwxbiVSUvzPGQ2MQSNNK3BEo=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: mazDN/6YuZQd2ScjCY2OamhGbvkjphyPNKsfNz8kjAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:91:5a:0a:26:e0:4d:fb:5d:6d:8e:40:1e:ba:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=1c12bd2e234dfdfbcebb7db121480655d9e77e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:a1:e4:aa:57:4d:a3:66:15:ab:aa:9b:5d:
03:4f:00:59:cd:71:1f:e9:1f:b8:dc:73:b4:6f:f6:
2e:ab:4c:54:a6:20:1d:93:da:eb:44:59:57:03:c1:
97:81:5c:ed:d5:09:35:b6:95:a7:37:00:27:18:cc:
ee:59:4f:fe:de:33:aa:ce:3e:85:c6:49:77:d1:bd:
a8:23:2f:b7:23:74:0e:dd:ff:ce:3d:e8:aa:8a:62:
07:de:06:37:53:9f:30:77:83:96:8e:03:c8:b7:ee:
f2:8f:da:52:dc:59:6f:dc:92:94:91:34:85:46:cb:
d6:02:11:e3:a1:85:8c:86:b6:69:9f:b6:23:b0:80:
0f:9a:00:01:2b:d9:4d:dd:c7:ce:95:df:94:a2:c5:
8e:48:bb:eb:a0:d3:30:63:2b:f2:26:5f:23:5b:d4:
fb:26:9f:28:d7:42:1c:94:b3:a3:c0:a7:c6:52:62:
57:65:09:12:14:e4:16:1a:f2:2a:8a:78:48:45:b9:
5c:77:fc:89:d4:7d:fc:38:38:d4:59:cc:3c:c8:89:
c4:7b:b2:b2:26:e1:77:dc:64:7f:7c:9d:d0:02:b9:
da:6d:7e:a2:75:4d:4f:00:2e:63:7b:4a:13:56:d2:
15:50:3f:ba:23:53:6a:1b:ee:fa:2f:e5:81:05:d4:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:12:BD:2E:23:4D:FD:FB:CE:BB:7D:B1:21:48:06:55:D9:E7:7E:11
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:be:da:3b:22:05:00:01:03:ba:44:b7:1e:18:58:bf:44:20:
aa:11:53:aa:72:4e:22:b0:85:ab:c3:87:a8:ac:b1:58:04:fc:
bc:9d:f4:43:49:79:52:bc:87:c2:fe:d2:35:0d:5c:3c:ef:27:
7d:48:64:c8:aa:1d:b1:ad:db:a5:2d:cc:52:81:99:32:9c:01:
f4:fd:42:5d:49:d9:10:16:b6:b5:7e:d1:61:41:e7:5c:27:db:
00:48:16:5d:84:ed:6d:27:49:f4:8e:11:9f:a7:b2:eb:6a:41:
c7:41:49:f6:07:18:6a:5d:88:13:fc:9f:34:8f:8a:ca:a2:83:
3e:16:12:a5:e7:ad:85:65:b2:98:84:4f:ba:20:54:a7:fb:b4:
b6:6c:04:ea:fa:a1:89:e4:ee:51:7e:f8:a9:c8:b0:ed:d8:1c:
2d:df:f9:15:16:39:0b:c8:3f:47:e2:ed:b7:8a:47:48:20:86:
db:6c:2d:f4:17:bd:68:51:ac:b1:ed:f4:24:b7:99:a9:3f:f1:
44:1a:8c:43:7b:39:f2:6c:d7:1c:b0:27:25:d3:0a:33:08:d4:
67:f8:f4:4f:33:b4:66:9c:d9:ec:4e:2a:88:84:4f:25:59:56:
e2:2d:3f:3f:d4:d0:8a:37:82:15:00:f5:cb:f1:cc:3f:39:d5:
02:0b:0a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:27 2025 by rpki-client