Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
File: k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json)
Hash identifier: ggTPSwFONyJfuxd8hof/DTKM66a/qXaPcPUSZ6qsnRo=
Subject key identifier: 7B:4F:AA:15:FA:94:DC:04:A8:80:4A:37:8A:D2:75:EA:49:F2:4D:8D
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Certificate issuer: /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial: 0199FBEA9CBA108BA4C08A8006202354CBDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
Manifest number: 1531
Signing time: Sun 19 Oct 2025 10:01:20 +0000
Manifest this update: Sun 19 Oct 2025 10:01:20 +0000
Manifest next update: Mon 20 Oct 2025 10:01:20 +0000
Files and hashes: 1: BQgIr9QK549Gh-t8XQa2kJXJbXM.roa (hash: FyMx4NmgioW+v5IwQi287SWwxmKQZhpDHBnVgYBPbds=)
2: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: RZwLMlOELnLsFLlv/Q04rtmR0NP/H5misGdlZFvtW44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9c:ba:10:8b:a4:c0:8a:80:06:20:23:54:cb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Validity
Not Before: Oct 19 10:01:20 2025 GMT
Not After : Oct 20 10:01:20 2025 GMT
Subject: CN=7b4faa15fa94dc04a8804a378ad275ea49f24d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:04:2b:fb:c1:94:70:a9:fc:b6:1b:8d:7d:
ca:36:d5:2d:a1:5b:af:b4:25:35:7a:47:95:7e:17:
c2:d6:9f:45:da:19:60:f0:2b:7c:46:74:c1:b0:91:
1d:98:77:4c:6d:fd:77:70:1d:21:b3:c1:97:67:2a:
b9:42:4c:45:7d:aa:af:48:f6:cb:f8:89:f6:05:38:
e4:6c:dc:ae:79:d3:03:5e:bd:46:c3:b7:72:3c:82:
47:ee:f0:a6:ed:9d:5b:f2:f8:3b:89:4f:34:8b:f3:
f0:5c:5b:db:6c:0c:88:fd:58:cf:66:82:2f:5c:a4:
32:70:b1:0c:ba:1c:ba:95:7d:bf:52:1f:e9:08:0e:
2b:8f:18:bf:f4:d5:1c:38:99:9f:7e:fe:f4:0e:7a:
58:67:52:d5:6f:67:6a:ad:ff:55:1f:06:ab:7d:07:
dc:34:22:65:a7:2c:06:cf:da:9c:62:29:15:e6:0f:
a0:ea:2a:00:12:70:70:27:eb:fb:ca:bc:1c:a7:70:
82:05:cd:5b:e9:2e:b6:64:6b:1f:c2:17:40:9e:6f:
85:7a:d8:c7:92:0c:80:c6:e1:09:ad:ed:15:ad:0e:
90:c4:2e:d8:bf:82:52:9b:b3:16:bb:9a:a2:93:cc:
6d:fa:04:b1:59:99:a8:3a:30:6e:1e:b3:01:9a:ea:
d5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4F:AA:15:FA:94:DC:04:A8:80:4A:37:8A:D2:75:EA:49:F2:4D:8D
X509v3 Authority Key Identifier:
keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:aa:df:e6:13:9c:a2:aa:8d:cd:14:e5:a5:48:19:3a:e1:c8:
a2:6f:9c:52:74:81:aa:3d:23:f4:c1:4e:8d:e2:d6:57:11:ac:
6f:93:fe:9d:cd:00:73:d5:01:78:11:8a:4e:18:6d:5b:95:2e:
b1:0e:4e:41:e2:d5:99:64:f6:3d:d0:5f:98:44:09:e4:0e:07:
e0:4b:0a:53:bb:b7:22:ec:61:ec:7f:2b:35:44:54:48:cf:90:
f9:16:b0:45:97:ae:fb:ce:29:71:9d:96:31:2a:17:0e:93:0a:
e4:1b:fc:af:26:2a:55:93:b8:03:7f:fb:b5:b4:25:70:80:2c:
a8:d8:2f:54:28:96:f4:a5:15:91:95:e9:26:a9:a7:77:81:81:
84:44:bc:df:6c:39:4c:67:e2:63:62:d3:26:01:91:39:2d:f5:
d3:cc:d4:02:d7:b8:64:d6:b3:4a:30:91:bf:f7:a7:8b:2d:25:
fd:fd:21:c3:05:6f:e0:8d:f8:1c:cf:5f:25:25:3a:4d:3b:ee:
f3:70:ec:f9:5a:c0:22:23:6d:02:c6:49:30:8f:3f:ad:3f:62:
56:75:7b:e5:7b:d3:8d:35:2c:82:6a:d2:e6:19:b3:e3:4c:0f:
90:56:72:2c:d5:87:4f:3d:4f:c5:61:fc:47:27:31:16:6d:10:
1f:b3:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:04 2025 by rpki-client