Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File: K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier: +Ihbt7eQodXSNt3xUTCeulqOw0FTO5otFvAvMatXSCw=
Subject key identifier: 48:31:7D:F1:2D:CB:BC:E4:12:C7:DB:13:70:C0:26:97:AB:50:FA:1D
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 0199FCC641CB54845374F763DBBE14C93FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:15 +0000
Manifest this update: Sun 19 Oct 2025 14:01:15 +0000
Manifest next update: Mon 20 Oct 2025 14:01:15 +0000
Files and hashes: 1: 1R6LxgC-MSsXC8XcNc55PUWrpnA.roa (hash: eOlgUjGh2Sx9zQdK2p1WKLcAGtB58ts+W3RrmuzkDow=)
2: 2-psKgjkSNUOWnZFMoAD6l3epRU.roa (hash: gFGUN3be0G1hR2YAWLqKrs2cwQ3z+R+vgxUYB8SwE90=)
3: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: 9FZLVmvSc4kqj2cLk0pU3LTHxLy56IdUTT/P9lotRtI=)
4: gQebbEYT275J4Jd89tHKU2ac4sM.roa (hash: iKbGbenCLGdunx9L03flN4696vAcgVbczlqjT2YbIiI=)
5: otJ7nfoJ-zl16yzl1V2lDFiM0HA.roa (hash: ci4b1eT86BcKQNNV0LV6W2PZ/InXXcZnfo32SMed2tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:41:cb:54:84:53:74:f7:63:db:be:14:c9:3f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Oct 19 14:01:15 2025 GMT
Not After : Oct 20 14:01:15 2025 GMT
Subject: CN=48317df12dcbbce412c7db1370c02697ab50fa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:96:5d:2f:1f:89:5c:3a:13:01:a7:cc:65:
86:ca:da:b9:10:37:a7:84:e9:bd:7d:77:90:8c:e1:
a9:13:4b:9e:45:2f:3b:a4:dd:04:30:12:3d:06:6c:
c9:89:d0:8e:c8:c7:42:b1:25:50:aa:3d:90:a7:4e:
2a:f5:c0:f5:1e:40:fd:69:43:50:92:3e:d3:a7:f0:
8c:0d:6a:9c:99:2c:c7:84:98:29:f0:03:8f:0e:90:
95:1f:52:c5:f8:5e:34:a7:4d:9f:29:8d:84:5f:1a:
c8:10:ca:23:9d:64:77:32:c1:d0:2a:c6:d2:2c:c9:
c0:b5:51:52:f5:77:9f:76:4e:e9:b2:2c:30:a0:de:
c8:e1:0c:8a:1d:b1:27:11:35:ce:d5:a8:b3:c0:2a:
cb:91:23:f4:4a:71:d5:23:e7:e9:ce:ae:9d:1b:a6:
8e:27:f6:c6:ea:13:f9:a1:1c:94:ee:2b:cf:1f:4a:
3a:58:fd:72:bf:0d:18:ba:7e:5b:9f:7c:8f:68:53:
ba:b1:68:d8:3c:7c:d0:1a:4c:0e:e8:f4:41:e8:83:
33:05:ff:b5:1f:3f:91:6e:13:fa:cc:d4:54:ae:65:
84:b3:5f:85:b9:e4:2a:3b:5d:d6:aa:99:27:bb:3d:
8e:03:15:43:b7:05:14:ae:30:2e:fc:79:00:02:1b:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:31:7D:F1:2D:CB:BC:E4:12:C7:DB:13:70:C0:26:97:AB:50:FA:1D
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:15:2f:dc:5c:a1:a5:81:26:fc:fd:79:7b:aa:3b:3d:a0:20:
14:a8:a2:2b:42:02:90:1b:c7:c9:5e:a8:4e:93:dd:57:a7:44:
a4:06:21:63:c2:67:84:c2:a7:aa:7c:88:69:80:ef:15:49:b2:
7e:31:1a:a4:f4:7a:cd:76:7c:77:47:70:2c:4a:bd:1a:44:27:
97:21:98:ac:68:da:53:26:24:a3:52:70:bb:49:b7:b0:07:19:
db:1d:61:62:d2:54:6d:c3:bf:3e:cb:32:8b:d3:0e:3f:8c:93:
1d:b0:f1:7a:2a:ab:b9:1f:76:62:75:91:fc:08:c4:4f:28:81:
38:03:79:6a:2c:2e:64:21:2a:0b:35:26:2f:26:75:1d:47:37:
7c:ec:d2:17:bd:2a:ee:77:5f:02:63:6b:ab:84:0d:87:cf:b5:
88:24:70:88:8d:a1:36:71:1e:1d:ab:97:64:d3:de:03:9c:f0:
38:2f:8d:ba:b7:fc:a3:d8:b7:f2:b7:2f:71:02:ff:7a:70:5e:
a3:74:70:bb:4e:03:3a:8d:2d:2a:81:54:cb:63:0b:85:e5:81:
71:77:a9:da:ed:bd:75:a0:bd:05:88:d6:42:9e:31:21:b1:2c:
98:ac:7d:72:f5:c7:02:17:6a:a9:d7:69:90:ec:66:5c:d2:08:
e0:17:ae:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:00 2025 by rpki-client