Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: Xkad0NGrKqXr7ePQlLqCK1ZOjU0oBnZz6yna2LzGbmI=
Subject key identifier: 28:34:B2:7F:99:DB:B3:E2:ED:81:76:6F:0D:F8:9F:7F:78:79:F0:01
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 0199FE46C774D73433A669E7F3DA75217864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 21:01:15 +0000
Manifest this update: Sun 19 Oct 2025 21:01:15 +0000
Manifest next update: Mon 20 Oct 2025 21:01:15 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: r74+yj+orN/oh2qslBJZNx1dL9F95nVfxq1qZb/46R8=)
2: h4zrMqfOoefngHFo_c_Z31Wn-uw.roa (hash: rUimB7Pd+YTy8jaYyx7sVXzcYUcWrZdClxDPlBTFsaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c7:74:d7:34:33:a6:69:e7:f3:da:75:21:78:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Oct 19 21:01:15 2025 GMT
Not After : Oct 20 21:01:15 2025 GMT
Subject: CN=2834b27f99dbb3e2ed81766f0df89f7f7879f001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:3a:aa:f2:13:13:6e:68:c5:07:a6:e7:1c:
a4:5d:7f:88:67:ae:c7:90:5a:fb:44:90:61:d5:e1:
61:88:4a:41:9f:c1:9b:54:86:f4:d4:c7:38:f6:26:
10:17:93:da:b4:6b:51:41:91:bc:23:b1:a5:08:b8:
8f:47:a6:2b:58:ec:b5:56:5f:25:59:81:0d:99:86:
b5:b2:e6:e4:29:e4:02:e6:a1:10:e3:4f:63:ee:20:
48:fa:c2:05:7f:87:46:f3:53:d3:2e:81:1a:3a:c1:
38:91:98:78:6d:e7:9d:5a:96:7c:1a:bb:9d:d6:51:
1f:70:2c:65:4c:8a:eb:07:ba:18:e9:33:41:42:95:
72:37:ec:92:53:5b:6e:76:47:01:e3:e7:0c:9f:bd:
dd:97:d2:ac:4e:f4:fa:69:01:39:90:8e:e8:43:73:
2c:b0:30:cc:1e:47:9d:ba:f9:95:cf:81:cd:1e:d5:
dd:e7:ae:e4:e5:a8:36:f8:38:88:2d:df:8c:ca:40:
07:c6:78:9b:99:b9:01:01:36:eb:b3:c3:10:19:38:
23:6f:4b:86:3d:fa:2f:4c:bf:91:d3:80:35:f3:e2:
7f:20:d1:5a:20:95:09:ac:bb:46:69:1b:a3:9f:ee:
98:c8:8f:4d:c8:95:35:31:ee:53:33:ad:07:99:84:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:34:B2:7F:99:DB:B3:E2:ED:81:76:6F:0D:F8:9F:7F:78:79:F0:01
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ca:10:74:94:8b:e4:0c:df:90:64:bc:a8:32:14:0a:90:4b:
63:be:3e:f0:5a:2b:1c:dc:bc:f5:c2:6e:ac:e0:77:d7:be:db:
26:d7:1f:cf:f0:a4:92:12:94:5c:d5:8b:8b:fb:81:d7:9e:64:
b5:e0:89:27:c2:4b:aa:58:ba:95:2a:74:7c:03:bb:0d:e6:8e:
b8:83:1f:bd:28:13:ee:37:d3:2e:f6:84:36:47:7a:cd:5c:bd:
f9:e1:c2:26:1c:63:f8:8a:1e:83:1b:5f:78:df:e1:a6:3a:ab:
85:fb:75:26:21:a8:f0:c9:12:9b:c8:c4:99:3e:84:14:a2:d3:
c1:8f:9e:ef:70:7b:96:68:b3:3a:a2:7e:48:ff:ea:3f:15:5b:
8b:4c:65:5d:1b:f7:de:49:41:14:bc:2a:4c:48:8f:05:fa:37:
a7:1e:3e:d7:89:51:23:77:27:fe:ca:44:2d:f4:07:a8:93:5a:
08:6b:db:11:08:6a:36:9f:73:72:3a:7b:b3:77:ec:92:7b:9e:
c3:f5:f1:e9:5e:f8:31:a6:c3:d9:46:80:1f:5e:78:7f:3b:bc:
a4:52:73:e3:3c:4b:c0:87:26:39:43:6e:81:a2:0c:8c:f0:84:
59:64:28:c7:e6:31:8e:50:72:ff:fa:b7:3d:64:6a:bc:e5:3a:
45:35:3e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:24 2025 by rpki-client