Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier: gTiV6HB2SgpDxkMdEN9F2VVQBD33BtFMl5S6wRSBsUo=
Subject key identifier: 09:A0:04:99:5E:7B:38:4C:95:BD:40:E1:49:32:A3:56:2E:6E:AD:86
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial: 019A0147AAAC8933A833B7AB1F66CF5793FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number: 0DC5
Signing time: Mon 20 Oct 2025 11:01:05 +0000
Manifest this update: Mon 20 Oct 2025 11:01:05 +0000
Manifest next update: Tue 21 Oct 2025 11:01:05 +0000
Files and hashes: 1: ilnYefv9qH3PNjv85ldcxCld-ls.roa (hash: SaAltYqG0WS/0wCUjq7LbhKFvPJZWUqyuxA3IK3kA+I=)
2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: UfuJ319FE1QHVU8E98O1SPcU9RNfgGxu8XnukGovYCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:aa:ac:89:33:a8:33:b7:ab:1f:66:cf:57:93:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Validity
Not Before: Oct 20 11:01:05 2025 GMT
Not After : Oct 21 11:01:05 2025 GMT
Subject: CN=09a004995e7b384c95bd40e14932a3562e6ead86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:0c:3c:a2:f1:5e:c4:e1:92:47:9f:e8:36:
57:9c:55:c5:b6:46:f9:7b:de:0f:43:fa:8f:fb:2f:
89:5b:82:d1:91:93:d6:bb:9e:70:bb:7a:bb:38:93:
3a:d5:23:97:91:03:4d:67:ea:7d:c8:8f:54:6b:dd:
49:5e:d5:16:e1:a2:3b:c6:bc:41:3a:cf:21:67:d0:
ad:db:88:80:b6:d1:86:37:af:e2:52:3e:ae:75:1c:
97:40:10:eb:95:29:55:02:78:14:23:bf:31:c2:9f:
e4:1c:fd:42:72:9e:03:20:e3:b8:27:ad:90:5b:51:
ea:05:b0:e7:8f:af:a6:33:90:00:68:0a:92:a0:d1:
77:79:48:fc:2e:9d:e3:4b:dd:67:a6:47:e4:a7:63:
0a:74:86:f5:6b:55:57:da:30:84:b5:14:c9:27:e5:
b6:ba:74:90:b3:17:8a:82:a1:b8:a6:12:0d:a7:b2:
86:ac:ce:28:42:b3:9a:24:90:44:50:98:1e:20:7f:
98:48:bf:0e:d5:5c:25:80:70:e7:41:37:c6:8a:ed:
b5:b3:d8:de:dd:91:22:01:60:3d:b3:74:1e:91:18:
d7:ae:b5:f2:5c:17:00:ba:4a:9c:21:f6:b5:90:60:
d0:44:21:53:a8:4c:6d:b4:3c:53:b2:4d:07:0e:74:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A0:04:99:5E:7B:38:4C:95:BD:40:E1:49:32:A3:56:2E:6E:AD:86
X509v3 Authority Key Identifier:
keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b0:b0:42:07:46:c5:89:16:7f:53:c2:da:a6:f1:a5:88:26:
9d:2d:8a:98:f8:aa:92:18:8e:ad:90:24:7c:85:e8:7f:21:aa:
e0:a1:65:e2:76:e1:24:9d:1d:43:a3:7d:35:f3:6e:45:e5:57:
2f:ad:09:7f:97:34:37:ab:96:38:7b:9d:a1:24:3d:00:35:43:
67:02:61:2c:ee:ba:8e:40:46:85:37:94:4b:7e:9c:87:5e:19:
fe:52:44:41:20:a5:5e:4b:90:c9:8e:e8:b9:f4:87:35:98:be:
d2:24:e4:2e:87:cd:63:eb:fb:94:64:16:bf:a2:b3:71:cc:6f:
e2:c6:5c:d5:06:96:c6:7a:c6:dc:39:65:2d:a9:69:29:7b:e8:
0f:48:52:9b:3b:74:4f:9b:e9:f3:06:f4:67:17:3b:31:38:11:
f4:ba:4a:2c:88:f0:2d:2b:d4:38:36:5a:bb:0d:1e:ae:ed:77:
dd:3a:26:3a:c2:98:2c:a9:8a:f1:70:fd:17:2d:2c:ce:24:c9:
ef:e0:97:c8:28:88:71:23:de:c2:70:5c:69:ee:cb:d2:3c:18:
83:a8:37:2d:65:a4:9f:af:99:af:6e:01:69:5c:8e:98:f2:1c:
48:99:5c:ac:2e:48:64:a1:ec:a1:4a:7f:46:21:ac:0f:d2:74:
64:b0:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:40 2025 by rpki-client