
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File: kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier: R3EvXMqsrgEjHylfV9w5AI/T3/U52gJWG3n37HJUXSA=
Subject key identifier: 35:AF:09:DC:3E:8B:83:E6:70:C4:0C:5A:9F:59:58:39:6A:6D:4F:8C
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 0199FC5849385DE1EE91F252CDACF6A1477A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number: 16F0
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa (hash: 7USsx/75CcWYYXOpIrJthPZ+SLbNDigaF6/K5IzHy04=)
2: L3xdjIH2zy7v5Cj6gtkLDE8Ij7M.roa (hash: Q+o3qtQDOHZiPtx1qsjKwH4+/xbmKCsf4LWPeNV0Toc=)
3: Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa (hash: iefxuR6cCSeQuUVD7gHNM5oNj3aGdVfsEjg121b/nwY=)
4: YbdTZXXJ_bhou-ns1MRKdw7L4Hs.roa (hash: Yu99aBSHIFLARWNtpLmDu4XobT/yupAF1F7TMAyI2tE=)
5: Z82XkiOXgkgyHP_qUTQtV9ipAQI.roa (hash: Pcm+DnawQak47wg3O3tVgdWOq8t4gYDBeT6sBFXXJVE=)
6: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: 5aelKKmcWDoj235Lsownpx0TeyUBlo3t60RQ33jJnvI=)
7: xzAOimHDia6u9KEZ2lcYuzbmUh8.roa (hash: twU3Zu+3OA4eLfmXFSTTDjCKPfrJ6o8S1Q+yF0JIdC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:49:38:5d:e1:ee:91:f2:52:cd:ac:f6:a1:47:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=35af09dc3e8b83e670c40c5a9f5958396a6d4f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:2d:b4:4b:6b:3d:4a:3d:68:01:08:4d:ab:
d2:fb:b3:83:22:1c:c5:6e:78:75:59:31:cc:80:34:
de:e1:af:8f:ae:58:61:f2:8e:4d:d6:f0:2a:63:75:
ac:c6:66:60:07:ca:6c:77:49:68:e6:b5:fb:b7:04:
02:6d:ec:f7:74:3e:4a:fc:a2:b1:66:20:c4:9d:9f:
75:a7:c2:0c:44:d1:f3:5e:32:3a:20:69:fe:e3:7f:
33:70:f1:a9:c9:73:a3:c5:20:17:49:c2:a1:b1:62:
86:20:16:52:46:74:34:66:0c:9b:42:86:7d:e2:74:
7f:04:e6:72:94:79:fb:28:9a:12:7a:d9:01:ff:a7:
8e:8e:95:ce:9d:47:a6:d8:3c:28:a7:b1:db:3b:11:
b2:03:4c:07:37:2c:03:38:5f:b0:df:2f:63:b9:3a:
92:57:9a:ad:6f:15:4c:bd:95:f9:25:9e:bd:96:1c:
e8:4e:eb:6c:a3:7b:e4:b8:01:97:ee:7d:ea:f4:a1:
ab:d6:a2:20:f6:78:12:08:f1:1b:e1:4e:bc:23:c0:
82:a4:bb:2c:f1:20:87:3e:6d:a8:3a:c3:8b:67:a5:
37:32:d5:25:17:e7:d4:06:84:09:80:02:31:38:73:
64:8d:82:e8:45:5b:04:14:88:6a:8a:85:6c:1e:9a:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AF:09:DC:3E:8B:83:E6:70:C4:0C:5A:9F:59:58:39:6A:6D:4F:8C
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f3:50:24:3e:31:f3:1e:7b:1f:e1:4b:04:ba:ab:74:ad:0c:
51:c8:6c:a6:db:c4:87:e1:72:59:0d:e8:ca:d5:b3:11:79:0a:
0d:21:1c:eb:3d:ef:14:4d:6d:14:d5:1c:24:a8:af:97:83:aa:
d1:0a:df:b0:88:75:2b:14:32:35:33:64:bd:ab:b6:80:1a:e4:
58:a4:7c:0a:04:b3:17:15:6a:62:7f:a1:6b:fe:46:97:0e:2d:
58:08:b3:5d:ff:dd:2a:0b:10:d0:fa:e4:52:ee:e7:6e:81:cd:
a7:ab:31:fa:c8:d3:0f:50:bb:e9:33:00:fd:48:88:e8:94:d7:
97:a7:e6:21:6c:35:62:af:66:80:89:b2:cd:75:a7:6b:c9:71:
a5:67:44:0a:0f:d8:62:f5:8c:28:b8:82:6e:fa:b6:ea:f0:86:
20:93:4b:bf:a9:43:a7:fa:97:e8:9a:02:87:cd:a9:ce:9d:34:
52:04:41:e2:9f:eb:c0:32:25:01:6d:47:a2:16:87:77:91:26:
61:e1:a4:0b:06:54:ee:35:36:7f:8c:64:21:f9:a6:f7:3b:6c:
92:8d:96:e2:c9:46:f4:8a:5b:17:c4:7c:87:c2:dd:32:4a:83:
69:83:3c:63:74:3f:be:29:b0:62:3b:58:65:f6:2f:61:c4:fc:
13:02:51:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:07 2025 by rpki-client