Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: GpPDg0hm8A516VylZQT8AIoxu5kdXFjltuhWf0xa/PU=
Subject key identifier: 53:3A:B4:51:C8:A3:2F:1B:FE:99:64:D5:21:AF:D4:99:21:9A:6A:C5
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 0199FEEBA589D6A21A3BF273073C20BE32C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 00:01:20 +0000
Manifest this update: Mon 20 Oct 2025 00:01:20 +0000
Manifest next update: Tue 21 Oct 2025 00:01:20 +0000
Files and hashes: 1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: pr2f+08O0XOE9iCNPZ8EV2wKvNzgJ5GJXwehkoBqKMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a5:89:d6:a2:1a:3b:f2:73:07:3c:20:be:32:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Oct 20 00:01:20 2025 GMT
Not After : Oct 21 00:01:20 2025 GMT
Subject: CN=533ab451c8a32f1bfe9964d521afd499219a6ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:71:6e:f6:b5:fd:8b:bc:72:2e:b1:51:58:
1c:ee:20:5c:fc:92:54:5e:e5:48:6e:6d:3c:2c:6a:
bf:54:80:ca:5a:dd:a9:d8:39:6b:55:7c:62:64:16:
6b:af:5b:ad:64:d1:6c:95:c7:c4:64:89:86:f7:67:
51:f1:b0:51:50:af:92:52:68:f8:29:d4:e1:3d:c2:
00:d3:0b:0a:b0:75:e6:cf:b9:29:e7:99:bd:79:30:
db:d9:6e:f0:d6:4d:58:33:88:41:4c:fc:42:d4:c8:
ba:75:8d:fe:8d:2d:6b:c2:12:41:12:76:d7:47:f6:
59:d7:55:db:9d:fb:dd:ba:7b:1b:15:44:d4:27:f3:
02:e8:c3:1c:2e:61:6d:8f:67:29:9d:ce:83:e5:df:
c2:c5:95:1b:f9:43:89:fa:06:e2:69:dc:78:c9:52:
1b:91:23:ab:fc:e1:64:b4:f8:65:05:6d:69:02:66:
ad:eb:53:2c:a8:e8:6c:dd:25:07:b1:b4:5e:c6:a6:
dc:4a:5c:bb:52:07:8c:c0:26:5c:75:ef:a1:fb:34:
87:e7:15:01:8d:f6:7b:0f:3a:fa:38:42:7c:d9:26:
b3:07:0a:61:20:36:4c:28:ed:ca:10:24:00:66:fe:
8c:76:95:66:f4:35:ac:fa:c9:bd:94:5c:4f:b0:b8:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3A:B4:51:C8:A3:2F:1B:FE:99:64:D5:21:AF:D4:99:21:9A:6A:C5
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:92:87:d5:54:04:7e:14:a2:bb:77:64:41:f9:94:eb:be:bb:
15:76:cd:29:d9:8f:4b:0a:d3:96:a5:86:8c:9e:24:dd:1d:ed:
62:cc:69:f6:16:b1:16:cb:b3:fa:13:f4:04:94:4c:f4:cc:f8:
2b:2e:df:fc:69:c2:89:e6:8a:24:04:5b:9d:20:bf:01:fe:a3:
11:7b:3c:e6:ba:82:6a:ab:ef:ac:e9:8a:31:53:c3:5c:3e:ec:
05:45:9f:3e:2c:94:a5:7f:12:03:fe:28:26:91:7e:10:6f:57:
14:29:40:63:af:f5:9b:58:f2:3b:b7:ac:15:50:27:cd:6d:05:
f4:0c:8a:c1:c3:04:21:5b:f8:a7:27:5f:71:19:01:c6:2d:05:
ae:77:74:75:d3:ff:fd:05:ab:99:a6:a5:dc:34:94:92:b5:6c:
8f:d6:21:86:29:25:46:e8:2f:d1:dd:28:c8:52:89:12:27:f4:
55:f7:06:b7:9c:30:e3:c2:11:b8:6f:99:a7:56:42:51:b2:d1:
ef:93:bc:a8:20:ae:df:c9:1c:1e:01:05:e2:29:6b:1e:ed:7b:
7d:84:5e:47:b6:dd:bf:07:6b:f5:64:00:90:9c:5f:a4:e3:59:
14:33:6a:b7:c9:28:d0:19:49:62:40:13:8c:a4:18:01:33:15:
e9:78:b6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:48:42 2025 by rpki-client