Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: 2Pdh0Zqw7VSKH74EL/dl67Ou9V81ZYht4aYVGBoL/L8=
Subject key identifier: D9:F9:A6:A7:F0:88:0C:CD:66:80:BA:8D:BB:3E:E5:0E:1D:28:0D:F3
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 0199FB7C707D37566ED5CCE98AD78ECDF546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 16A7
Signing time: Sun 19 Oct 2025 08:01:00 +0000
Manifest this update: Sun 19 Oct 2025 08:01:00 +0000
Manifest next update: Mon 20 Oct 2025 08:01:00 +0000
Files and hashes: 1: MIfmeAoWN0nwDc_PxEMHlVixhH0.roa (hash: BGlglgWDBdgW/hvSdFfJEQ+q//PCVjKwrtXl1XRe9nc=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: eXEnCk7gD6ltVsuaHFtw0zU2CNQeJ3wwpvkqzoajuxs=)
3: ok0D6AFy1nokMBW7AtTQbtvoy-Q.roa (hash: OI8j87WnUAa44hUR7Jr4hBgPSlGVFL5uAjQD5u8Uzmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:70:7d:37:56:6e:d5:cc:e9:8a:d7:8e:cd:f5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Oct 19 08:01:00 2025 GMT
Not After : Oct 20 08:01:00 2025 GMT
Subject: CN=d9f9a6a7f0880ccd6680ba8dbb3ee50e1d280df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:89:dc:94:d5:10:ce:bf:81:a7:cb:25:e6:
13:fa:3b:23:8b:ae:cb:06:95:9d:26:b0:73:7f:cd:
de:dd:8a:8f:ab:55:c0:be:6f:5b:b3:96:14:7e:00:
e5:11:63:fe:b4:12:ed:c6:24:c2:c5:ad:64:b8:d8:
e1:44:21:44:1e:90:82:57:ae:9e:86:c2:7e:29:b1:
18:b4:b5:81:a8:43:2d:99:67:1c:20:21:52:64:f0:
89:3d:96:2c:f8:81:c3:1b:f7:05:a1:bf:40:c1:17:
c8:9e:17:70:02:7d:f8:82:5f:ff:b4:fa:79:4c:db:
38:1e:7a:7a:5a:13:3a:04:b0:50:2b:8f:81:ed:98:
c2:66:79:2e:a3:5c:37:3d:2b:55:f2:f3:fd:8f:d9:
8d:5e:4e:c9:fb:fc:36:ff:84:a5:66:12:ce:77:cd:
07:34:4e:f5:76:82:2d:10:99:1d:72:f7:df:01:3f:
71:73:62:aa:00:86:e1:ff:3f:ca:e2:af:99:a3:72:
b8:79:17:f6:6b:20:c3:19:7d:4b:7d:e5:81:6a:5a:
fc:42:62:37:7d:ee:ea:29:96:6c:fc:55:3b:92:4d:
d2:d2:ca:67:1d:2c:c6:71:33:6c:3e:b2:a0:13:df:
e3:54:5a:6f:db:7f:65:9f:33:a5:95:2e:cf:87:c2:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F9:A6:A7:F0:88:0C:CD:66:80:BA:8D:BB:3E:E5:0E:1D:28:0D:F3
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6a:36:ae:69:32:76:d6:a4:11:4c:39:d7:50:d9:8e:27:b8:
78:86:be:92:82:ba:58:c2:e0:8e:6e:f6:1d:de:84:a5:65:fb:
2f:4d:bb:76:d0:c5:af:92:46:4a:46:80:64:40:dc:e1:dd:d2:
22:8e:9f:ed:32:15:b7:29:46:01:c1:4f:14:0c:81:b3:e9:14:
c0:74:9a:9c:4c:35:f2:1d:2b:09:a2:9c:86:78:00:9b:d8:8a:
fe:57:86:5c:c4:24:3a:3c:85:2d:02:da:51:76:09:a8:d6:21:
a9:7f:ca:ed:9e:16:86:7c:2f:74:8f:3b:47:68:86:65:39:43:
e4:0c:74:6a:ca:eb:9a:7b:4b:5c:84:2c:73:7f:d2:21:57:03:
69:3a:a9:ca:3b:a4:24:f0:2a:d5:93:7c:af:53:28:5a:c0:d4:
15:09:20:8a:c4:d1:9f:77:6e:66:74:2d:0a:3e:76:c7:d0:8b:
1d:bd:1e:27:62:e6:90:83:81:f1:9b:12:e1:97:b5:ca:af:bb:
ef:9f:14:54:0c:96:17:0b:c2:04:a6:35:3e:d8:c2:4d:eb:5d:
bb:50:9b:7a:e8:17:88:cf:30:89:2d:b5:a9:1e:1a:88:63:64:
3d:68:84:be:cd:4e:f5:1e:00:4e:ae:2a:3d:fa:62:32:e7:1d:
58:50:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:52 2025 by rpki-client