Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: YSBIJbuFC/28Lfersbfd8mjo9P9otqcxrNlLXY5hB1U=
Subject key identifier: 75:51:2F:0E:64:7D:EA:F1:05:A0:9E:D5:78:C3:8E:92:74:62:1A:11
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 0199FC8F1E01250795272222A518E66DBE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 13:01:01 +0000
Manifest this update: Sun 19 Oct 2025 13:01:01 +0000
Manifest next update: Mon 20 Oct 2025 13:01:01 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: sy8I0dik8vx6u8RqX4N41/tFcDKFwiwZxXlRABiJi2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1e:01:25:07:95:27:22:22:a5:18:e6:6d:be:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Oct 19 13:01:01 2025 GMT
Not After : Oct 20 13:01:01 2025 GMT
Subject: CN=75512f0e647deaf105a09ed578c38e9274621a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:eb:74:d2:c1:18:28:58:fe:da:85:39:fd:
c2:68:64:53:eb:10:eb:54:de:90:c2:da:8b:0a:f4:
f5:4d:71:10:ac:ae:d4:91:da:4e:db:81:d6:b0:7d:
de:cd:af:f8:4c:95:c5:05:8e:52:94:8e:25:f1:cc:
be:f7:06:e4:8c:4f:f3:6d:b9:8e:11:e3:17:7d:85:
04:83:cd:ec:7d:11:f3:71:bf:ab:40:df:f7:26:3c:
e4:ab:07:af:14:8f:02:69:dc:cf:f9:42:a7:4a:4d:
2f:cb:ec:cb:36:0b:3f:fc:00:a2:9b:43:81:1a:25:
88:97:dd:0e:17:fa:9f:19:90:b3:8d:8c:ea:10:f8:
e2:78:91:79:2b:9a:1f:52:51:74:75:c8:0c:08:a7:
b2:f1:d7:c7:3a:d2:f2:d9:48:59:cc:75:a9:43:39:
c1:5f:04:24:38:a7:d6:99:6e:e4:5e:5d:e8:55:b6:
50:fe:d0:42:7a:79:b8:24:1e:1e:85:dc:2b:88:09:
60:33:26:48:95:20:87:99:2b:2a:1d:ac:e8:47:da:
52:b1:41:e8:eb:0b:c1:a9:2d:7e:f3:99:dc:38:b6:
f0:18:3e:05:6e:24:8e:d9:3c:8f:c9:bf:63:d4:92:
a8:af:33:d5:0e:4d:0d:c5:fe:2e:e9:b2:4c:e6:05:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:51:2F:0E:64:7D:EA:F1:05:A0:9E:D5:78:C3:8E:92:74:62:1A:11
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ba:28:40:31:d0:73:16:25:83:bd:e7:b7:4d:43:ab:13:f0:
b1:34:e7:24:a1:db:94:be:5f:e0:52:59:83:30:57:73:2e:ac:
c7:eb:5b:ca:df:82:fd:cd:cc:c4:89:8b:91:f8:a8:ce:10:cc:
47:6f:22:32:40:a8:2e:90:59:96:c0:90:3b:5a:98:36:cd:6b:
2e:1f:87:13:e7:bd:53:94:32:0d:62:c6:a0:e0:bf:00:a5:fd:
a1:6e:36:31:c2:9e:b3:91:90:e1:c7:99:ab:ba:1b:4c:e1:9a:
2a:3b:52:cc:a3:d3:1d:ca:62:99:fd:5f:2c:24:6d:ce:80:21:
8e:3e:0c:ca:4f:ee:72:cc:6b:ca:82:2c:01:05:d2:a5:9f:e5:
3e:3d:73:b8:8b:fa:54:c0:15:f2:86:86:ea:e2:99:ce:a6:34:
5a:c2:cf:0e:e8:10:cc:72:9e:08:17:fe:70:51:ca:54:c0:20:
4e:ef:81:98:11:32:31:8e:43:34:1d:5b:e9:8b:86:ea:6c:90:
16:83:42:f5:fa:49:64:0f:45:9f:1e:85:01:7c:f1:80:37:cc:
5d:66:dc:89:34:3e:07:3c:01:a3:d4:a7:80:cd:2f:c2:e9:6b:
ea:9c:29:4a:0f:cd:4f:94:fe:1e:be:2c:df:94:f1:5b:cb:3c:
28:16:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:26 2025 by rpki-client