Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
File: k9xL8fiRK-t83uQJMCmIxhE4jpE.mft (raw, json)
Hash identifier: F/Jm4O+x/wHJMyBxkdoq9KmaXbvOk8VYXhSVv6e9uWc=
Subject key identifier: 5D:7C:87:FC:E7:8D:24:E8:77:B3:ED:A6:77:25:37:02:E4:C1:D2:C9
Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
Certificate issuer: /CN=93dc4bf1f8912beb7cdee409302988c611388e91
Certificate serial: 0199FB45A8D6D384EDDA42927D41856EDDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 07:01:10 +0000
Manifest this update: Sun 19 Oct 2025 07:01:10 +0000
Manifest next update: Mon 20 Oct 2025 07:01:10 +0000
Files and hashes: 1: aEy_zqNzomjBOnysb7pwIws5H9M.roa (hash: 5K5cuFuAW+cdRm7n0/ZKC9QHmYwbcOfw6xnQYUg53PE=)
2: k9xL8fiRK-t83uQJMCmIxhE4jpE.crl (hash: PnJ3TRyaatLFhKrE8mnnwXbKNOPQvfQGVW1h4ZcrqKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a8:d6:d3:84:ed:da:42:92:7d:41:85:6e:dd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91
Validity
Not Before: Oct 19 07:01:10 2025 GMT
Not After : Oct 20 07:01:10 2025 GMT
Subject: CN=5d7c87fce78d24e877b3eda677253702e4c1d2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:10:17:cb:e6:c6:5b:4f:c5:7d:c2:83:dd:98:
62:2d:5c:29:89:57:ea:8f:94:42:d8:ec:73:a8:77:
00:f5:94:dd:78:48:b6:11:3b:89:6b:98:a5:3a:47:
03:eb:92:21:cb:d5:dc:c7:ce:4d:b9:b9:e4:f3:4a:
dc:4c:c0:fd:70:93:ab:4b:b0:5a:6c:1b:63:fd:84:
c3:c6:ad:d4:cb:80:b6:16:2f:4f:cb:47:b8:59:66:
50:60:a7:8c:32:7a:f5:7e:e1:46:ad:7f:f3:26:08:
5d:6b:80:1f:9a:98:a3:9e:e0:9d:fd:f2:52:32:31:
90:64:7f:c8:13:71:d6:2f:96:e5:67:8d:92:de:fb:
8c:7c:05:dc:8d:3a:28:15:7f:79:27:13:d2:46:da:
6f:95:61:fd:e9:dd:5d:67:6a:66:d0:35:fc:d2:5b:
b8:35:83:ae:00:80:2f:d8:1b:a2:f1:54:7c:ef:9c:
7f:2b:b9:c5:0b:12:92:6c:54:16:15:50:f7:27:65:
bd:58:59:31:74:2b:96:e6:42:cb:71:71:b9:85:89:
2d:37:09:f6:ce:17:08:9c:69:cf:63:a3:58:1b:a4:
d5:da:d1:c1:21:68:13:da:fa:9f:f1:84:7f:17:67:
04:48:15:f8:78:2d:80:8f:42:73:87:54:1d:37:f2:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7C:87:FC:E7:8D:24:E8:77:B3:ED:A6:77:25:37:02:E4:C1:D2:C9
X509v3 Authority Key Identifier:
keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f4:48:a4:59:71:bf:bf:ce:71:b2:a6:ce:40:d3:99:35:7d:
f8:aa:47:50:12:e6:30:fc:ba:5f:cf:f5:81:d7:be:28:e5:c3:
d6:74:cd:38:3c:ec:53:f0:6d:c3:5c:7a:3e:6d:b5:d2:ac:a2:
0f:b9:2a:4b:e9:6d:ef:ad:29:61:47:45:67:83:2a:05:a3:eb:
1d:22:79:a7:4c:e1:60:b8:0a:ad:cf:c8:45:69:63:2a:a0:77:
1c:2c:bc:8f:a4:74:f3:d1:fe:bb:5d:37:08:e0:7f:2a:bf:08:
75:4e:82:91:d1:dd:cc:b6:21:c2:8a:cc:d5:dc:03:c5:74:98:
ae:5a:e8:68:b3:0e:89:47:2e:91:c7:5c:78:2e:15:a3:c4:b9:
f4:ef:40:82:df:1c:c7:b2:8d:8f:98:42:0e:a5:b8:5f:2e:dc:
1f:ab:19:5e:95:ac:67:d6:89:c7:66:8c:a0:c3:4d:df:0f:30:
00:43:37:08:ff:d4:73:48:d3:90:12:bf:93:e9:3d:0a:8f:45:
68:ec:d6:4c:e1:2f:70:1a:fb:1f:ca:60:9e:00:b0:26:9f:ad:
37:48:23:6d:c6:dc:01:c4:df:cb:ff:bd:a1:cb:1b:cd:13:cc:
7e:8a:1d:a3:03:e7:66:6d:ae:be:37:77:64:67:9f:40:27:b2:
c6:27:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:49 2025 by rpki-client