Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: RBfWv14Q1CmgMHIAnM4XzvJqXQaLTj8X+kOMozfFkps=
Subject key identifier: CC:9B:29:99:F1:AB:FE:10:67:AA:4A:0E:CB:9D:EE:1C:3D:57:C1:77
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 0199FB7C70C69E681D28E490B1AFE74A0436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:00 +0000
Manifest this update: Sun 19 Oct 2025 08:01:00 +0000
Manifest next update: Mon 20 Oct 2025 08:01:00 +0000
Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=)
2: PHmIlcJAMKaUCf176lVhWz-T4Wc.roa (hash: bNQSW/1JZ77X2TCkKdD1g52s5lNQ368QaQCo0ZhUqTw=)
3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: XZfD8xUneZaXyzt1bDS8RrTrKTAvWPfmdYUxdoCPht4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:70:c6:9e:68:1d:28:e4:90:b1:af:e7:4a:04:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Oct 19 08:01:00 2025 GMT
Not After : Oct 20 08:01:00 2025 GMT
Subject: CN=cc9b2999f1abfe1067aa4a0ecb9dee1c3d57c177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:fa:6f:ab:bc:cf:cd:02:2a:44:6f:4d:32:
49:45:34:67:f4:1d:31:ba:db:e3:ba:39:0e:e4:f9:
83:56:57:cf:95:6e:e6:55:85:a0:7a:a3:49:53:c9:
d0:44:6c:6d:2a:de:b7:8c:d3:f8:58:97:03:41:10:
8e:26:d2:3b:06:5c:d6:06:1c:6e:d3:c2:64:b9:9c:
f3:4c:96:c4:1e:ce:b3:dd:10:f8:c5:3c:07:bd:bb:
d2:ad:7e:48:c7:76:a0:a5:57:84:ed:22:34:05:5a:
48:ff:ae:0d:89:4a:27:1b:e4:bc:a9:42:bc:24:63:
f6:0a:df:bf:56:ef:63:bd:82:47:57:4a:71:3a:a7:
5d:08:ef:06:4d:35:55:cd:be:1b:d6:41:cd:d9:19:
0b:cd:47:b5:78:85:61:b4:2e:ae:d3:fe:70:a1:6e:
9b:d8:4a:de:f6:05:5b:29:cc:82:1a:03:4c:55:5f:
1c:2a:ce:1e:26:fd:b0:8c:4e:81:9c:0f:40:a8:dd:
0f:26:e5:39:de:8a:87:14:1e:42:6c:df:0d:c2:2f:
8e:d0:6d:7e:34:b6:16:e6:d5:a0:79:2b:72:44:10:
8d:16:77:86:21:6c:d8:01:db:3d:97:f7:b6:7d:45:
0d:37:01:1f:7f:c3:bc:22:86:11:d7:4c:1c:d9:11:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9B:29:99:F1:AB:FE:10:67:AA:4A:0E:CB:9D:EE:1C:3D:57:C1:77
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:db:ab:9a:65:35:df:41:19:c6:77:2e:e9:8f:0a:0c:a0:63:
db:c8:1e:96:ed:ff:de:b5:6a:da:94:fd:ba:0a:f5:61:e8:ed:
27:ca:3e:79:ff:f3:0f:e1:ab:5f:f6:c8:26:77:75:65:03:34:
31:5a:fc:b6:b0:ef:33:8b:e9:3e:5a:c9:ae:a5:74:b7:c0:8d:
ae:2e:fd:0f:29:f6:16:1a:fd:09:fe:4e:12:51:9c:d3:f0:e6:
c5:09:20:4d:60:3d:81:36:36:8c:dd:d4:22:d9:4e:3a:f9:01:
d4:87:b2:84:8e:89:cc:e2:8c:a8:14:59:8f:0f:55:34:ac:de:
07:76:18:d2:a4:d2:43:09:d6:58:0d:21:bd:50:67:aa:f9:df:
6d:29:4b:6f:1e:e4:82:3f:84:c5:f5:9a:6a:07:44:b4:2b:ff:
2c:63:61:88:11:c6:ad:7c:46:aa:2a:8b:5a:9d:9d:2f:b2:1e:
86:09:05:e1:c0:a2:03:f1:9c:02:c5:a0:04:4c:7b:17:e7:24:
18:00:dd:3f:ee:b7:f2:7e:0e:91:35:94:45:28:26:70:ca:65:
41:68:76:bf:77:4c:85:46:da:14:60:e8:a2:f2:16:1e:47:0b:
20:73:59:bc:42:a9:dc:a8:97:76:22:db:d4:cc:d8:77:df:58:
7a:0a:0e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:00 2025 by rpki-client