Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier: iJvs7NLkGBk6gvw/Hj+2NoQuuo5GMl2j4msuvHHmdy0=
Subject key identifier: 9B:F9:7F:5D:B0:63:8F:AC:03:82:8E:A6:76:CA:E3:F6:65:9C:E8:0D
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 0199FBEB1886AE97149D453868C5FFDB9443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number: 16F3
Signing time: Sun 19 Oct 2025 10:01:52 +0000
Manifest this update: Sun 19 Oct 2025 10:01:52 +0000
Manifest next update: Mon 20 Oct 2025 10:01:52 +0000
Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=)
2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=)
3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=)
4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=)
5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=)
6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=)
7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: Yj6oM+DL9LiADt1tmJ2H+OozlZMf2XdnDwQDRH2A7hw=)
8: cWm4lcomb_7tGOMAKfN645HZ4lY.roa (hash: Q1Xtl3Tt4xDVvissECGJZtzvYROTu/HRq3nIK5nwbTU=)
9: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:18:86:ae:97:14:9d:45:38:68:c5:ff:db:94:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Oct 19 10:01:52 2025 GMT
Not After : Oct 20 10:01:52 2025 GMT
Subject: CN=9bf97f5db0638fac03828ea676cae3f6659ce80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:61:8a:90:95:c5:f9:ba:ab:01:53:8e:eb:
32:9e:21:98:f8:67:8e:bd:6d:07:0b:d8:d9:27:7d:
1f:bb:b0:08:f4:33:24:5b:bc:df:84:07:c2:22:f4:
d9:8f:e7:08:06:a1:bf:cf:1e:32:88:48:5e:a4:8b:
0d:f6:ff:bf:9f:a6:ad:ad:27:f5:eb:e8:6a:67:ac:
0d:93:b2:e5:de:52:b9:c6:05:73:f8:4b:02:36:fb:
2d:c1:d3:a1:cd:53:a0:6b:fb:2f:10:44:3a:f6:4d:
b0:e8:82:5a:91:1f:72:7a:57:a1:95:49:1b:00:b7:
78:d1:08:03:c0:22:57:bc:1f:5e:f0:cb:43:5c:6f:
de:38:1b:79:f1:59:ee:09:2b:3f:05:26:9c:62:34:
a4:3a:74:21:32:7b:ea:7f:60:98:70:b2:d2:25:00:
a4:b3:a9:e7:cd:cb:a6:45:6f:57:e5:ef:fe:d9:6e:
1f:27:b6:79:a8:42:0c:c9:9c:97:5b:ab:80:07:43:
b3:72:76:20:0a:36:a9:da:36:9f:69:0e:0c:5b:91:
f2:e7:d0:86:35:c6:17:57:1e:be:3d:dc:49:23:73:
23:b2:21:84:d4:0b:5c:5d:52:d7:1f:fd:f9:95:e6:
76:10:85:40:a8:17:f5:5c:98:cb:a6:df:85:c6:99:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F9:7F:5D:B0:63:8F:AC:03:82:8E:A6:76:CA:E3:F6:65:9C:E8:0D
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:31:54:49:6a:a4:b7:83:49:fd:b0:fd:bd:63:6b:e4:1d:a0:
fc:90:30:54:66:5b:d2:f4:09:18:cb:2b:37:d6:53:7c:07:c6:
6a:05:08:f6:a0:9f:59:b5:3c:e2:de:cb:8e:f3:37:28:b8:c7:
cd:4b:c2:15:6d:32:d2:14:14:b8:58:7a:bc:72:e9:d1:fd:4d:
70:18:1f:e6:c1:3d:8b:b6:f5:16:61:1e:f0:47:96:b8:d0:45:
e2:5f:a5:ed:55:c2:89:a8:ce:5f:15:10:1c:fa:d4:86:e8:94:
ac:64:8b:42:a5:41:de:0b:ef:f3:89:97:fe:ee:4d:21:0f:11:
ea:1e:6a:70:3a:21:db:0e:e9:67:df:72:f2:50:6a:83:c8:4a:
b2:3c:a3:21:07:a4:6f:93:bf:55:7c:42:59:82:bf:6f:bf:4b:
58:c6:00:a1:13:83:39:33:3d:2e:f4:1f:ff:c9:46:36:1c:fa:
8f:ae:d4:9d:82:8a:7e:03:32:7d:a0:f2:b7:9d:9a:db:11:70:
1e:e3:83:49:aa:d8:49:f2:22:c6:7d:17:be:b5:08:3f:d0:11:
ea:6a:72:3b:f3:f9:47:4b:88:ef:fc:42:27:f0:09:03:b1:4f:
73:42:d7:2a:ad:9f:7a:c5:79:c8:da:99:c1:e2:24:76:28:a8:
98:4f:ed:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:47 2025 by rpki-client