Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: SW/slQjIqlZS7CyTMBFbTUe6zgqn+Dej5IGZTxslbD0=
Subject key identifier: C4:5A:54:81:6B:AE:00:0E:40:A7:97:21:37:24:7B:18:9D:9E:02:20
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 0199FD33F89983BF88A51D2C410F1E973AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0FA5
Signing time: Sun 19 Oct 2025 16:01:05 +0000
Manifest this update: Sun 19 Oct 2025 16:01:05 +0000
Manifest next update: Mon 20 Oct 2025 16:01:05 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: aOukWfDY4gkD6bTH/vThtKRtXTUcBVQ7yI+FQwp+/ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f8:99:83:bf:88:a5:1d:2c:41:0f:1e:97:3a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Oct 19 16:01:05 2025 GMT
Not After : Oct 20 16:01:05 2025 GMT
Subject: CN=c45a54816bae000e40a7972137247b189d9e0220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:24:f4:31:be:05:11:08:88:8d:29:2d:16:14:
2e:32:5f:b2:ad:96:c5:89:f2:6e:30:e3:1c:c7:b8:
0c:18:34:e5:02:d5:c2:b7:67:04:db:21:ef:04:14:
64:a1:b1:8b:67:d7:9d:47:aa:d5:77:39:2b:39:f1:
44:cb:0c:9c:d2:d3:e5:6e:e2:6d:9d:bc:9d:98:e9:
e7:52:09:b9:c7:f6:b7:c3:9b:e6:ae:8f:ba:31:fb:
93:b4:8b:94:46:ed:f5:75:5a:c3:1a:25:6f:35:ec:
21:17:e5:70:f2:06:83:95:d0:2b:22:4b:b0:b2:e6:
b6:af:e2:71:0f:23:90:5b:ee:3b:45:ec:12:0e:2e:
bc:3f:fc:21:99:b7:27:6e:ad:f7:01:de:2b:ad:17:
97:94:b4:fc:2b:98:cf:53:0b:8c:a5:6a:f9:33:c5:
79:bc:e2:11:5e:a8:2d:eb:e9:11:9c:66:67:d7:03:
48:13:6b:ad:04:dd:3e:f0:51:bb:14:78:99:68:41:
57:2b:57:92:2d:84:59:c1:7b:53:20:81:d2:ca:7b:
53:30:17:13:e4:15:43:d6:b8:8f:73:e3:de:3d:4a:
c7:9b:ed:ee:db:8e:9d:fd:1c:64:c8:df:bf:72:25:
33:ec:71:bf:9a:d5:12:04:66:5b:2d:3d:b4:3e:f7:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5A:54:81:6B:AE:00:0E:40:A7:97:21:37:24:7B:18:9D:9E:02:20
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:25:b6:a4:f5:a8:50:15:50:8c:ab:08:42:0a:c5:28:40:40:
4d:d3:e0:45:dc:f1:61:de:01:a9:11:1a:5d:74:26:ee:df:4b:
d5:47:11:0f:c0:5b:0a:4a:c0:39:cc:bc:31:cb:a1:73:db:9e:
8a:f3:97:f5:5c:b6:03:70:80:c9:86:e9:8a:ec:ef:e7:79:71:
a4:14:be:f8:5f:9e:b8:fa:80:68:a5:46:96:31:d5:a7:ce:9b:
c0:5f:ce:b0:e2:e7:de:26:a0:7f:48:d0:45:62:d6:75:e7:84:
a1:5e:77:16:b3:d7:7d:55:7b:19:c6:b5:3d:f3:1d:94:a1:31:
51:ac:b3:8a:5b:c5:99:4e:1a:3c:a3:73:d9:5e:e5:6e:08:b8:
89:18:aa:91:b4:9d:2a:c7:49:25:56:15:35:fa:51:2e:73:e3:
be:2e:21:c8:fb:df:cf:4e:98:9a:f3:d8:b1:08:0a:46:18:43:
6f:9d:ed:b6:c9:e8:23:c3:54:78:96:cc:0a:67:c3:66:29:cc:
35:3e:f4:d1:41:17:20:cf:53:49:d3:51:aa:21:2a:aa:91:a6:
d4:90:1c:24:e3:7f:f2:c6:84:5b:33:33:f7:1c:c1:a6:92:d1:
1a:dc:9b:da:78:f5:6d:92:01:f1:82:bc:d6:80:ee:0c:70:0f:
a6:16:6a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:38 2025 by rpki-client