Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: QnILsaoTr4wUO0GNvY2qoi1N/FZLpIeeht8K83LFBpo=
Subject key identifier: 17:06:89:BD:65:78:B7:CB:47:34:B2:20:34:7A:4D:DE:E4:D6:AB:FB
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 0199FC58E509FFAD8CAC9E1047FCE7D2B376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:48 +0000
Manifest this update: Sun 19 Oct 2025 12:01:48 +0000
Manifest next update: Mon 20 Oct 2025 12:01:48 +0000
Files and hashes: 1: 6d9Ml28WO2fAjTVW7MUT4p6IuIc.roa (hash: gkVSjCGx8IsHv5K/Qw9S9gdePh2YLb49mTKwa/5dQoA=)
2: ZO9mngdXNIl_VPA2Mn28l-sVzI0.roa (hash: hmCSaS0Wu7YEQqY6nNJRdpritFyq3hIDgudp8EuE1fw=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: AFxOYpyzs4rdD4nBnx8AjStF4nRQmS1rBDn7onYB05Q=)
4: rd6hfh2x52BDGiRJllR6149itW8.roa (hash: CEiJf5vw/0k6qBwbBaFAB9ewgzEg3Zx08ds/2EBhN80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e5:09:ff:ad:8c:ac:9e:10:47:fc:e7:d2:b3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Oct 19 12:01:48 2025 GMT
Not After : Oct 20 12:01:48 2025 GMT
Subject: CN=170689bd6578b7cb4734b220347a4ddee4d6abfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:4f:45:c7:1b:c2:c0:bb:bb:92:d7:a4:1b:
59:f5:00:f2:e3:6c:75:a9:f4:ad:ce:9b:cb:ed:c1:
23:7d:f2:0c:a5:0e:eb:50:38:cd:b5:9a:ba:8a:0d:
f4:8f:41:cd:f9:34:e3:bb:6c:0c:dd:13:03:84:fe:
1e:ac:1f:41:62:7e:8d:a2:cf:8d:e0:20:c6:de:10:
9f:4d:43:07:85:d2:0e:e8:0a:da:14:35:4a:3e:1e:
27:35:29:27:5c:a8:6f:05:1a:bf:70:0c:50:b8:af:
eb:5a:27:81:62:25:5a:cf:40:2a:b7:a2:c0:a2:43:
e9:49:aa:40:8d:b1:c3:8b:65:90:74:61:75:f5:57:
bd:b4:e9:40:d8:f7:f4:ff:07:86:52:45:c0:0c:40:
d4:a0:3a:74:43:c8:60:db:df:f1:fc:1f:9d:8a:71:
e7:da:73:09:0e:29:ce:25:70:62:25:ff:04:d1:ad:
b6:f9:93:99:94:b1:4c:a3:34:85:01:4d:76:69:32:
e8:33:d4:f9:7a:91:b0:ac:d9:a3:f6:aa:2d:d0:4a:
98:f0:0e:fd:10:73:dc:3e:5e:55:e3:10:37:1c:96:
f4:5f:de:34:05:91:3a:c5:a1:12:97:79:08:7b:12:
85:87:4d:f6:e2:ae:bc:9b:12:4a:4a:04:98:b8:4d:
6f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:06:89:BD:65:78:B7:CB:47:34:B2:20:34:7A:4D:DE:E4:D6:AB:FB
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4e:2c:ad:88:35:12:b9:1a:9c:6a:c2:2f:fd:86:e2:82:76:
70:6f:5d:eb:5a:f0:5a:79:ae:8d:fa:11:6c:b4:5b:63:85:33:
f7:43:55:3c:8b:87:37:00:5e:96:fc:19:a1:07:b6:f8:6d:92:
07:e9:b0:b4:13:e1:48:6b:3e:5a:85:52:ab:49:78:88:7e:ba:
c1:cc:f6:38:0c:ee:be:6e:54:17:b3:ab:18:61:49:44:6f:b4:
f2:9b:e0:1b:94:1d:6b:02:df:11:d9:5d:5b:29:19:0a:cb:0a:
95:e7:53:61:9c:9c:5d:27:48:83:fa:e0:d2:d4:d1:28:74:20:
94:e0:bb:c5:f6:bd:ef:8f:eb:da:b8:b6:8d:33:a8:31:54:e6:
71:e5:d8:45:35:94:f1:06:8e:87:c0:52:e8:10:e7:13:2a:15:
ed:71:d2:48:cf:e3:04:cf:c8:7e:af:e8:ab:31:9c:04:b2:bd:
66:16:69:c0:58:aa:66:5c:a2:95:6c:de:a9:68:42:50:19:83:
74:b0:42:5c:98:3a:be:90:c2:f0:ec:3f:ca:1d:31:9f:5d:7a:
c2:ff:60:4b:15:d8:66:92:71:e4:ca:be:7c:c7:38:f7:9d:09:
d9:f6:e6:76:36:48:d9:d5:30:38:77:d4:88:88:4a:4a:b1:02:
66:11:21:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:02 2025 by rpki-client