Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
File: k1x7dikZzzbcFCY_XllV6P-jXTs.mft (raw, json)
Hash identifier: cIkgOD0x0mT5KU03zxtGDefeurfmSuRHqWfGmegVXx0=
Subject key identifier: 6A:C3:87:89:CD:99:DB:2B:53:D3:AD:B7:6D:73:B8:DB:4F:22:75:CC
Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Certificate serial: 0199FFC7E32D3E698ECD6D44BDB4151AEA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 04:01:53 +0000
Manifest this update: Mon 20 Oct 2025 04:01:53 +0000
Manifest next update: Tue 21 Oct 2025 04:01:53 +0000
Files and hashes: 1: k1x7dikZzzbcFCY_XllV6P-jXTs.crl (hash: ai1UfWTY0zH5S1mPuTlAXQd9AFa+BWVV3RwRx+hwV8Q=)
2: mPtwMPDBjS-jkWgS9uuTF9_ZOaw.roa (hash: 2rJnzrY1kifgjd6LuERI+YOBEpbALMoWfYZ9TooQij0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:e3:2d:3e:69:8e:cd:6d:44:bd:b4:15:1a:ea:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Validity
Not Before: Oct 20 04:01:53 2025 GMT
Not After : Oct 21 04:01:53 2025 GMT
Subject: CN=6ac38789cd99db2b53d3adb76d73b8db4f2275cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:1a:d5:f5:b6:c4:d3:b4:34:20:e6:4a:c2:
d2:aa:44:2d:2e:6c:77:b4:89:2b:87:0e:47:91:67:
c0:9e:26:c4:cb:b1:4a:91:37:69:41:90:5c:37:61:
d3:d8:a5:8f:74:d3:25:a4:8a:81:c7:3c:6c:52:eb:
e9:72:4a:ff:84:89:d0:17:0d:42:0b:4d:61:f7:50:
6f:8e:9d:59:73:66:44:a4:0d:93:0d:e3:7d:53:df:
a0:6d:dc:21:12:f3:2a:a5:da:fc:df:d5:ea:fe:a4:
bd:3a:57:23:67:23:c2:bf:5b:cd:10:f2:9e:90:a1:
38:49:90:c4:be:fc:e1:43:b2:f1:62:08:45:41:fc:
71:ba:3a:ec:23:ce:09:4b:d3:76:d1:cf:72:8a:d1:
d8:f7:ea:d3:69:79:c5:ac:f6:e1:04:a9:fa:d6:8d:
6c:4e:3d:72:88:2b:23:d9:f2:b9:59:d1:f0:94:2a:
2e:e2:44:31:cb:89:0a:b1:56:ff:57:25:fd:1c:30:
1d:c5:28:64:e5:cc:b6:a2:a1:51:95:26:79:a9:20:
d6:cf:48:17:cf:16:65:f7:b8:d2:70:68:b5:57:11:
f2:12:7d:d3:3b:8a:75:ca:83:c0:80:fa:03:ee:35:
80:04:7d:34:1d:39:3a:23:8c:8c:7b:43:62:53:35:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C3:87:89:CD:99:DB:2B:53:D3:AD:B7:6D:73:B8:DB:4F:22:75:CC
X509v3 Authority Key Identifier:
keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b3:5a:76:2f:4b:1e:10:20:3c:27:a7:7c:bf:17:69:b0:da:
2e:68:5c:75:0f:f2:dd:4f:24:e4:56:9a:0f:73:ba:46:06:d6:
2b:1d:8e:e8:e4:59:ba:ed:0f:7c:c7:c8:c9:b5:05:ba:80:a2:
95:cb:d8:18:21:e4:45:b3:03:36:12:13:17:76:5d:f8:6d:ac:
d6:83:b2:ac:0e:3a:84:a9:8d:6c:e3:4f:30:32:8e:ca:42:f0:
48:aa:34:27:1f:3f:9c:ac:72:7b:76:c6:07:ea:0b:e5:2d:e3:
af:fd:85:52:20:c7:5e:9d:dc:e7:bc:7c:a3:94:f9:e4:50:f4:
5f:6e:89:46:34:44:f9:57:b6:d3:44:8a:f2:32:0a:cf:e5:f4:
4d:02:7e:b7:45:6d:48:31:b6:08:a2:ed:7e:b6:33:64:2c:c3:
3d:59:40:51:bd:7a:f7:e1:b6:c9:36:1d:b1:4c:b8:24:0d:5f:
d6:f3:84:15:7c:3b:04:9e:8a:d3:89:f5:0f:d1:16:a7:f4:2a:
db:4c:b3:c7:db:a0:fe:fc:a9:69:b3:42:6f:15:b5:10:b0:d6:
0c:cf:b0:8d:65:2b:64:ed:d5:d4:2a:37:2f:c0:2b:dc:f1:87:
ad:a9:5b:b7:0f:30:d2:da:e9:7e:5b:20:f7:c5:89:ec:ed:b8:
85:97:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:19 2025 by rpki-client