Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: w+s1wbf//X7qjtKa7fPE5k49CLCNNOgQSP7XGz2PL0c=
Subject key identifier: 77:3C:ED:7E:57:F8:F4:0A:58:37:AA:19:4D:29:D5:7A:50:FA:48:51
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 019A00DA067B8EC94DDA2F815FDBBAD00BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 09:01:19 +0000
Manifest this update: Mon 20 Oct 2025 09:01:19 +0000
Manifest next update: Tue 21 Oct 2025 09:01:19 +0000
Files and hashes: 1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: /RvR4sQA8yjhRXs1eM8I4NhJdZCQzZTVaes+N405Lmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:06:7b:8e:c9:4d:da:2f:81:5f:db:ba:d0:0b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Oct 20 09:01:19 2025 GMT
Not After : Oct 21 09:01:19 2025 GMT
Subject: CN=773ced7e57f8f40a5837aa194d29d57a50fa4851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:3f:13:8b:1c:0c:d3:09:f2:c2:4b:7f:5d:
48:ae:ed:86:fe:1f:5c:89:9b:cf:39:64:ff:53:e0:
c1:db:8e:d9:5a:27:9b:78:8f:ce:fb:08:e1:d7:28:
48:96:a3:68:34:de:c3:44:49:bf:5f:c4:ee:12:04:
fa:b5:ee:fe:f7:95:e3:be:f9:15:14:c5:35:b7:04:
85:2a:98:98:cb:11:95:dd:19:ee:94:08:3e:ce:c6:
fe:55:44:2d:4a:c6:e6:b0:e7:5e:ba:a6:4d:84:4c:
38:94:37:50:2b:a1:8c:e4:7c:72:43:19:93:61:2c:
f8:37:0e:ea:17:15:17:f9:27:dd:8f:f8:d6:92:44:
a9:1a:c5:f8:3c:89:7c:a0:53:55:6f:7f:c6:6a:44:
b2:a0:09:50:27:7a:2a:29:85:f5:7b:93:19:36:0d:
bc:22:24:1e:07:32:93:5c:37:42:58:09:17:01:a3:
f9:ca:29:bd:f0:e2:91:cf:70:72:1d:84:ba:ab:16:
87:d1:e9:0b:d1:75:ac:db:ad:83:09:49:7e:4d:9c:
04:22:b1:3a:d4:d1:b9:a3:1c:77:af:27:3e:e1:7e:
0c:5d:ea:0e:f9:59:5a:51:a4:5f:36:b4:d3:56:4b:
f3:c8:37:4d:62:c4:40:f1:78:16:f6:d9:ce:55:f3:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3C:ED:7E:57:F8:F4:0A:58:37:AA:19:4D:29:D5:7A:50:FA:48:51
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d4:c5:10:92:df:14:9c:8d:b8:d7:3b:ea:66:8e:9b:cb:40:
a5:0c:9a:dc:b9:41:51:51:55:84:10:ef:65:0e:ae:75:36:5e:
c2:b5:4f:8c:35:c6:7c:b0:89:77:8b:e9:07:cd:fe:d1:42:89:
a0:50:37:81:88:0a:68:b2:a5:61:0e:7d:3a:74:3a:86:e4:b6:
1c:05:42:c6:84:bc:b5:fc:d1:d3:39:d2:07:f2:d0:39:0d:89:
85:1d:f7:46:5c:a3:24:1d:d0:12:28:13:90:c6:4f:b2:73:03:
17:2c:c4:e7:9b:de:02:32:87:b6:0f:76:09:e4:04:30:2f:45:
0c:05:d4:48:a8:fc:dd:35:52:97:a6:ae:da:a5:f8:a1:66:38:
e9:9b:e0:48:72:f1:bf:da:53:08:a8:fb:8a:f0:cb:c6:1f:41:
c7:3f:c6:d0:f6:99:9b:40:90:03:c7:c2:7e:b4:f2:ea:8c:70:
f4:81:bd:a7:7e:70:51:4f:a8:c5:86:f5:c1:c0:ae:5f:85:02:
c0:77:07:f5:a9:da:c4:b9:68:0a:a4:65:b8:64:a3:d8:b5:b1:
ff:48:4e:56:dc:36:65:6b:a0:53:c1:2e:ec:c0:dd:26:7b:6e:
ce:a7:57:36:35:26:7d:b2:23:9d:e3:e9:3f:de:af:14:ba:87:
64:bb:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:58 2025 by rpki-client