Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: 0MzhmYzZSGGkMGOfeZmwl7FtngpHOM8WkmMfD8sdOOU=
Subject key identifier: A9:CB:2C:34:CF:7A:54:77:FA:67:49:DF:86:FB:24:3C:41:CB:22:75
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 0199FD34586C3038756666BE6081A9E01AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:30 +0000
Manifest this update: Sun 19 Oct 2025 16:01:30 +0000
Manifest next update: Mon 20 Oct 2025 16:01:30 +0000
Files and hashes: 1: Cgt_gy7EMOYMV19k2tz2rtLd7TU.roa (hash: j2CPj0aVUdndtIwS2SsvRubF8DiJi7ArwXEuxy5F6uI=)
2: LtAL3K8AdfyisGKqq9Vjp_7EH0w.roa (hash: ExkUCXkAhlWeYSrTyMjTF0LGwM8Q8/UHTNY3ZJzGHYE=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: l6S3eyAtxRBKxdaSRaH6b872fS9TDzhDjuLFYHUa1f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:58:6c:30:38:75:66:66:be:60:81:a9:e0:1a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: Oct 19 16:01:30 2025 GMT
Not After : Oct 20 16:01:30 2025 GMT
Subject: CN=a9cb2c34cf7a5477fa6749df86fb243c41cb2275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:62:dd:ed:de:93:a7:e7:04:d1:11:ac:2c:
c0:8c:07:78:72:be:d9:a9:6e:b2:72:1d:e8:3b:3c:
a0:2f:6c:a1:46:ba:e3:37:21:aa:57:a0:22:47:84:
5a:b6:81:ca:bb:a8:1f:53:32:82:27:42:37:65:4a:
59:e1:cb:35:0c:09:58:f7:a9:52:64:cb:ba:74:af:
e0:10:5c:5e:59:03:59:a5:e3:78:a8:71:44:e5:97:
cf:30:17:99:13:f7:7c:5f:c5:24:7d:a5:82:89:d0:
42:d6:8e:87:d5:c0:28:c0:3a:9e:88:fe:81:b0:c7:
6e:58:69:e3:1b:bd:a9:fe:0e:44:7a:7c:2a:02:c9:
45:90:a2:49:6d:2d:52:b6:53:75:7b:bd:b9:b1:df:
f1:f6:6d:99:bb:da:5a:f3:7b:2d:6c:17:df:d7:08:
8b:10:72:47:06:3f:a8:4b:c6:fe:99:23:8c:1f:bc:
07:4f:e1:2d:f4:a8:83:35:13:fd:b3:e0:dd:80:14:
f6:bc:a2:cf:0e:90:5c:8b:c9:1a:e7:44:19:34:9a:
8c:64:f8:f8:23:34:44:98:22:71:91:a2:99:e0:1e:
3a:31:5d:6d:b6:a6:1a:20:ee:f0:20:05:ec:2f:8b:
76:21:8e:a8:2e:b8:f7:12:0f:e0:a2:9f:83:e9:10:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:2C:34:CF:7A:54:77:FA:67:49:DF:86:FB:24:3C:41:CB:22:75
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:25:1f:f5:24:7e:15:7d:13:f4:6f:5f:38:9e:23:c0:e7:3b:
2e:dd:6c:0a:af:7b:66:7e:a3:56:d3:e3:e8:4a:48:58:47:01:
26:9c:c7:e5:ef:18:6e:5b:34:5b:cd:10:77:6b:ed:c0:5a:06:
89:8f:bc:a2:ab:99:ff:a7:64:5e:2e:db:13:4f:64:ff:71:ea:
f2:b3:06:93:bf:43:c9:a6:d6:bb:07:1c:35:66:a3:3d:9f:de:
f4:85:c7:ad:cb:26:c5:e8:bf:34:cc:56:13:c2:38:e4:79:38:
92:a6:5d:9d:b6:1f:ac:24:b0:24:11:e1:f0:2c:19:7f:99:0d:
f6:ba:51:3d:2b:0d:d0:a1:1e:74:9e:5c:26:3c:41:93:f7:83:
c3:17:84:65:32:ef:03:ea:89:d0:cb:36:6d:09:f5:2d:02:e5:
3f:de:2d:46:2b:18:f3:a3:2b:75:02:43:be:1f:bd:59:1a:c0:
6d:9c:8c:d0:aa:3a:fc:40:76:a4:5d:5b:ca:83:00:3e:e0:9b:
6d:56:2d:86:69:e7:a7:87:bb:70:60:9e:c8:07:bf:12:97:c4:
c3:6a:35:14:0b:60:f1:36:c9:4c:a5:aa:30:1e:03:28:32:27:
bb:81:51:f7:f1:f1:5b:b3:d8:36:1d:27:3a:88:b9:57:42:c6:
0b:4f:7e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:10 2025 by rpki-client