Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: rPeJsFgqFR/fzNt2BDBCHtuHSUp5kSwGpxHxkXxAiAA=
Subject key identifier: BF:26:2E:F7:01:DA:63:1D:DC:7E:EE:05:7A:C4:C2:95:76:6E:C9:F0
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 0199FDD9930AC6FFFB918A471E0A72A30A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 19:01:58 +0000
Manifest this update: Sun 19 Oct 2025 19:01:58 +0000
Manifest next update: Mon 20 Oct 2025 19:01:58 +0000
Files and hashes: 1: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=)
2: EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa (hash: sPo+QlStQLftRhFxrU43bCn4hciRtjvqBLkRQ+qUaq4=)
3: FCOMXnULUVL5uVnX_zvOHcdHJYc.roa (hash: 4uixJ9jDs2SwFvLmk4CIP+prYWqzHVN0aIW9iOFGL0s=)
4: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: c7YceuehgsDo0zELvoxG9tkXqwNrRBYG/HTjvwUpGTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:93:0a:c6:ff:fb:91:8a:47:1e:0a:72:a3:0a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Oct 19 19:01:58 2025 GMT
Not After : Oct 20 19:01:58 2025 GMT
Subject: CN=bf262ef701da631ddc7eee057ac4c295766ec9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:36:6a:5a:44:69:66:99:c4:c1:5f:84:e9:64:
90:b2:71:59:69:b1:23:e6:4c:8a:74:f1:53:bb:bd:
b8:4d:49:e7:da:d5:f0:03:5c:18:c3:c3:ce:b2:46:
b4:4f:09:7a:7e:8e:3d:20:e5:02:86:92:c0:89:11:
25:4d:2b:07:bf:83:28:0f:52:11:52:e0:0f:00:af:
85:26:ef:22:54:5b:b5:98:97:51:14:7a:d3:66:5b:
04:ba:1a:80:6d:3d:32:50:b5:0f:c3:92:42:ba:83:
fe:a4:c1:ff:c1:a5:9b:b3:70:70:0d:da:30:2f:b1:
4b:c0:e0:d3:ea:ec:04:a7:38:ad:61:81:ca:3b:77:
87:f5:32:02:d1:12:78:25:b3:21:2c:0f:fd:fb:06:
1a:c5:17:b4:40:64:60:12:b9:94:60:54:4c:b4:42:
83:81:2f:d9:3b:90:32:77:b8:37:28:29:fc:0a:e3:
6f:5a:e2:91:39:43:93:98:b7:08:a1:e5:d9:b3:39:
fa:a5:5f:0c:64:1d:27:b7:6e:2e:d9:df:88:25:4c:
65:6b:b0:55:c9:03:1d:e0:b2:73:af:f7:1c:1d:76:
2a:4f:95:0c:ed:2f:75:fb:34:95:0f:48:bb:15:c6:
d5:26:6c:c7:54:e9:b8:11:1b:07:3c:d3:1d:c7:19:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:26:2E:F7:01:DA:63:1D:DC:7E:EE:05:7A:C4:C2:95:76:6E:C9:F0
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b7:13:41:a2:6e:af:cb:79:ad:96:9f:3b:b7:51:ab:cb:e1:
51:24:af:e6:4c:0e:05:10:0b:31:0a:e4:f6:e4:79:20:97:3e:
b7:4c:b4:27:74:46:36:10:f6:e9:62:a7:8a:62:a4:06:f9:8d:
9e:28:c2:83:55:91:f4:80:c3:72:e8:b3:83:c7:73:3f:74:c6:
86:68:9b:8e:32:94:79:96:87:dc:f0:7c:2d:d4:0b:84:4d:a2:
01:55:29:ba:d8:19:b8:b1:e7:3f:0e:ed:3b:c5:5d:b6:da:5a:
44:75:11:ed:a3:72:d7:aa:35:7d:12:29:8e:54:dd:b9:4a:ce:
46:64:aa:39:51:7c:b0:0e:eb:91:22:7d:6e:4c:8a:49:66:c4:
a9:52:62:b5:c2:c5:9e:e8:ca:97:9b:1e:a1:0c:26:5b:c2:3b:
6b:09:1d:72:f2:c3:f1:fa:6b:f3:8f:c3:7d:71:25:c1:79:39:
00:8a:e9:73:46:24:f1:5e:52:fa:ed:cd:25:bd:aa:7d:61:7f:
a2:4b:28:5b:bf:ce:ad:5f:c0:34:ee:37:e3:f8:4f:bd:92:84:
4a:87:35:48:60:43:22:2b:04:e2:de:38:2f:6a:34:e7:df:38:
fa:de:fa:c8:8a:e8:af:46:95:aa:05:7d:e0:15:74:9e:0d:33:
de:6f:bc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:43 2025 by rpki-client