Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: lPd1CFCRvx4ZZyU/Sz2cWTi3MVEquASSkmrc8p1ExC8=
Subject key identifier: 95:70:B4:8A:A4:CC:A7:A6:0B:98:28:3E:3B:08:E9:23:3B:D6:E5:C3
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 0199FDD97F9595D596B1699D4912592683C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 0158
Signing time: Sun 19 Oct 2025 19:01:53 +0000
Manifest this update: Sun 19 Oct 2025 19:01:53 +0000
Manifest next update: Mon 20 Oct 2025 19:01:53 +0000
Files and hashes: 1: dlXIk7WimVWVHc3ungqiNoZMusw.roa (hash: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: txBSSwB8mf1GS6kOGUwcaAcCzEgnDvRU6q8T1fAYY7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:7f:95:95:d5:96:b1:69:9d:49:12:59:26:83:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Oct 19 19:01:53 2025 GMT
Not After : Oct 20 19:01:53 2025 GMT
Subject: CN=9570b48aa4cca7a60b98283e3b08e9233bd6e5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:6a:c8:d1:0b:66:74:d5:cd:cf:5a:fb:88:
81:23:cb:18:07:f6:c1:7d:4a:5c:f1:f5:97:fb:fa:
b8:87:da:57:31:a0:41:30:df:07:09:6b:05:36:d2:
0a:4f:ab:be:10:da:02:74:92:05:47:ef:4a:d4:0d:
41:96:3e:66:49:f8:f4:b7:9e:54:13:8e:21:2e:ac:
6f:ea:fc:38:4f:58:12:41:5f:ae:f4:a1:e9:83:2b:
76:a6:42:68:e4:ca:1b:e0:83:e1:fb:80:aa:af:22:
73:91:5b:16:8d:96:a1:e0:69:6a:92:67:7b:87:cb:
6a:ed:95:d9:6d:e1:ba:57:d9:66:1a:ae:77:c1:c4:
44:dc:4f:a3:55:3b:b4:37:44:18:3d:80:98:74:ce:
02:80:ca:69:65:89:42:90:2a:42:31:7c:59:92:b3:
5a:cc:1d:08:3d:d2:55:09:b7:b4:49:34:41:e8:63:
2b:1e:f8:25:06:be:9a:c0:bb:0c:af:ac:cb:5c:51:
ae:25:f3:b0:d6:21:1e:5e:ee:a5:ac:75:e3:e9:d0:
4d:db:32:e8:37:fe:d2:f2:0e:45:04:8e:47:14:87:
2f:e7:bd:19:86:82:0b:a8:6e:7c:5b:25:e5:c8:13:
f1:51:e6:52:d3:8c:ae:26:d3:31:89:c0:5c:f1:1a:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:70:B4:8A:A4:CC:A7:A6:0B:98:28:3E:3B:08:E9:23:3B:D6:E5:C3
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:98:d6:80:48:0a:16:f4:7b:53:0b:01:f4:b1:a1:e7:a1:5e:
80:93:22:00:ec:29:ed:06:ba:5c:ff:52:d9:4d:38:0b:44:8c:
7c:cc:eb:47:a1:b8:9d:df:0f:91:7d:29:be:61:d0:c3:07:c1:
8e:e4:28:42:60:d8:ce:91:38:c0:b7:f8:1a:78:7b:bb:28:86:
aa:b3:60:8a:ee:e0:ff:79:9d:73:51:38:cf:23:25:68:50:b7:
d5:12:fc:d8:af:8c:99:a8:b5:ab:25:e7:26:60:11:e8:68:b5:
2c:f2:f5:34:8e:be:d7:76:20:04:aa:34:57:4f:6b:77:75:7d:
1d:6c:75:25:3d:e0:d5:a4:85:51:fe:9a:95:8e:73:0b:71:fd:
7f:67:53:e4:0f:f9:5e:64:d5:2f:99:23:57:a3:8e:62:a2:df:
7a:32:b1:e3:68:e0:c2:21:f2:0e:37:1e:70:76:ed:92:b8:5b:
c9:13:7a:b2:bd:9e:88:f9:64:c2:34:e3:34:ca:64:7b:f9:23:
ca:d9:fc:07:a6:e3:ad:3a:47:7f:b1:2d:f3:ee:f4:0c:4b:84:
e3:3e:e8:bc:65:2e:f9:6c:4f:42:d9:57:0a:77:e1:be:5c:a9:
3c:57:56:65:79:d4:05:61:c2:1d:55:61:10:7a:1a:29:c8:71:
73:85:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:34 2025 by rpki-client