
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
File: kF3q_qO62SSCF7FinkLP_H5JG9k.mft (raw, json)
Hash identifier: v/IpRjU37CyqqEc/9H+BCNwA5FwDHgIWNwZAeQPWuvk=
Subject key identifier: 09:06:FA:B0:97:72:1C:B8:3E:97:69:F9:12:F3:24:CB:3D:2F:82:B8
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Certificate issuer: /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial: 0199FBEC0F7DD9E4889C2211AD81AABAC153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:55 +0000
Manifest this update: Sun 19 Oct 2025 10:02:55 +0000
Manifest next update: Mon 20 Oct 2025 10:02:55 +0000
Files and hashes: 1: F6NVdh8A853FlObS61QBXhYoWUw.roa (hash: bTYe6HPxoy2DgVEr4roCOuCgASU45dN4RfTtGTEfBzY=)
2: kF3q_qO62SSCF7FinkLP_H5JG9k.crl (hash: 8vTYS8PA7jOU+vSsfUyjE2sRB4IbqMJQht0BJyh+orM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0f:7d:d9:e4:88:9c:22:11:ad:81:aa:ba:c1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
Validity
Not Before: Oct 19 10:02:55 2025 GMT
Not After : Oct 20 10:02:55 2025 GMT
Subject: CN=0906fab097721cb83e9769f912f324cb3d2f82b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c9:f8:7e:22:85:30:c4:00:d6:46:46:5a:ee:
c4:3c:c4:e8:83:83:f8:45:bd:4e:6d:2c:ab:89:72:
c1:22:91:89:11:21:25:75:8c:2b:95:ce:23:0e:73:
64:37:d0:59:6b:c7:3c:c7:4b:a1:f5:2d:47:42:59:
58:1e:e8:4d:55:e9:c9:80:97:d1:3b:2f:43:93:38:
c2:7a:93:a1:db:d8:b4:a4:69:d0:ee:3f:29:85:80:
6e:e1:c7:37:c2:82:6b:6a:9f:ff:44:43:f4:7f:d3:
4e:47:20:5e:db:4e:7b:cb:b6:25:8d:b7:c0:79:ad:
a3:d6:24:d4:af:e2:10:9e:69:cb:a3:81:46:8f:5c:
1e:8f:36:5a:43:e4:cb:32:47:df:a1:ed:38:dc:63:
a8:f5:a7:92:0a:e3:39:3a:51:15:83:1a:5b:cd:63:
15:e9:62:41:1e:12:9d:71:97:0e:e2:be:e1:27:80:
f5:ce:49:b4:ff:9d:57:c6:e6:62:72:f0:37:cb:da:
c0:0d:89:f8:17:03:0b:ea:c1:44:5a:76:3c:b1:15:
88:d5:03:d1:ed:8e:2f:1a:b8:58:2e:bc:fe:7e:62:
b1:e7:9b:a7:7a:ae:31:c5:96:39:43:c6:54:25:28:
a9:17:d1:82:1f:fc:c9:50:33:6f:2d:96:1b:00:00:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:06:FA:B0:97:72:1C:B8:3E:97:69:F9:12:F3:24:CB:3D:2F:82:B8
X509v3 Authority Key Identifier:
keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:89:6a:b2:d8:f8:08:8f:7f:68:25:40:4d:cf:82:54:c9:ca:
80:e1:81:1a:1d:e9:a0:b3:ac:5c:7a:2e:72:05:98:b1:27:5a:
4b:1c:a7:51:1b:a7:8b:6a:ca:20:57:2d:63:d9:c2:a4:2c:9f:
5f:7d:d2:39:86:57:6a:5c:84:bd:b3:8c:68:71:73:81:c5:3b:
9b:a5:d6:b6:63:4e:e7:22:29:fa:24:f4:da:df:0d:1c:66:ab:
f6:20:14:aa:0f:00:91:b4:15:6e:c6:7a:6b:9c:e6:c3:5c:47:
14:33:b6:57:0e:55:0b:91:1f:63:32:82:bd:a3:2a:87:04:b7:
c6:c1:05:ae:71:f5:e7:ac:5a:89:8e:8f:31:26:76:ec:e9:5f:
e9:b7:f4:bf:4d:53:07:ac:c5:45:ce:3b:7d:25:25:dd:5e:4c:
12:79:f3:44:4a:f6:1c:54:bf:bf:a2:5f:7f:98:07:54:24:c5:
5f:3c:73:36:3c:18:70:84:dd:92:e0:00:18:5a:b9:9c:ef:53:
db:c1:22:d4:f9:26:96:3c:9f:3d:5a:06:9d:1c:b9:10:ec:c8:
b6:af:47:38:e5:72:42:49:73:f2:58:db:36:ec:53:87:07:d1:
db:44:56:ee:d5:85:08:60:7b:7a:8a:a2:7b:b6:69:6c:77:0c:
10:e6:8e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:08 2025 by rpki-client