Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
File: kFTGmagd2WKohg8_sLfQM0Pev3Y.mft (raw, json)
Hash identifier: ZXrfjTbreIEXCW5cbjscMm3O5NbOe/MqZMzQZeKWni8=
Subject key identifier: DC:9A:E8:BA:14:C6:DE:F8:C0:AF:6D:EB:B7:BC:E1:9D:B3:0A:39:A6
Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
Certificate issuer: /CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Certificate serial: 0199FDD9D870B0636C4D5E1A2672724DAAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:16 +0000
Manifest this update: Sun 19 Oct 2025 19:02:16 +0000
Manifest next update: Mon 20 Oct 2025 19:02:16 +0000
Files and hashes: 1: AJkLm8QLqcA4cpdlMxjyYpGgKig.roa (hash: Kdq77qB2Z4PyfWGbDab2B0pk/vx4xIRx3C/YwD+0yYQ=)
2: kFTGmagd2WKohg8_sLfQM0Pev3Y.crl (hash: +edHr1uqJCowjL7SU8SSrxtz9nXqkpMk3RqfnzrhqRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d8:70:b0:63:6c:4d:5e:1a:26:72:72:4d:aa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Validity
Not Before: Oct 19 19:02:16 2025 GMT
Not After : Oct 20 19:02:16 2025 GMT
Subject: CN=dc9ae8ba14c6def8c0af6debb7bce19db30a39a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:88:21:16:18:94:c8:93:12:86:67:02:74:
8e:4a:b0:26:98:30:d1:85:34:a3:65:65:4b:28:de:
6f:e5:98:df:32:23:a3:cf:d2:2d:06:fd:60:95:7b:
c2:52:02:ba:c4:bf:c0:60:87:52:de:9b:24:b5:8e:
27:e2:c5:65:2f:cb:99:f7:0c:51:2b:7f:f5:ab:99:
cd:fb:2e:7b:ac:1e:1b:3f:6f:2c:94:90:08:49:be:
24:93:d7:1e:d1:53:cc:0d:ff:71:88:ba:6e:cd:82:
a6:fe:12:09:a1:10:ba:98:83:87:e2:e5:26:02:48:
c6:4f:b8:e4:95:9b:48:8d:73:40:d2:24:20:5b:b8:
47:22:ef:61:73:b4:85:62:c2:78:39:8e:cc:ea:54:
a0:15:09:9e:33:3e:66:22:ae:e8:0c:7e:c9:62:57:
48:41:23:d5:0b:74:df:30:11:c9:b4:c3:34:2a:8c:
0a:22:42:b3:f9:89:cd:ad:53:df:13:0e:29:b7:f2:
f4:a6:03:3a:93:75:9b:6e:53:64:2b:2d:56:eb:95:
cf:38:c6:67:99:c7:13:e2:df:d8:4b:3d:28:cc:6a:
50:5b:14:a9:8b:b2:91:43:c4:65:13:73:bc:e3:4a:
6d:89:c8:a1:61:fd:54:00:39:4a:5b:4c:e3:d1:3b:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9A:E8:BA:14:C6:DE:F8:C0:AF:6D:EB:B7:BC:E1:9D:B3:0A:39:A6
X509v3 Authority Key Identifier:
keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1c:6b:64:9a:cb:e7:a3:b3:a0:06:b4:d2:38:15:45:26:fc:
52:25:45:34:c2:c0:81:d9:67:f3:5e:de:de:33:d3:47:71:0d:
42:50:a2:ae:c2:d5:7f:69:67:60:64:94:ca:81:56:23:c9:68:
c9:18:e4:ce:6e:9e:93:b9:14:df:fc:52:ad:5f:c1:03:4a:08:
34:d8:b9:30:4b:db:b1:9f:4e:e5:17:75:db:bd:52:9e:76:70:
3d:74:fe:9f:e3:59:1e:5d:ec:c2:00:d4:92:4f:65:fc:c5:e2:
f0:c4:e0:50:50:c5:48:5d:e2:01:a0:6b:21:93:c4:13:31:aa:
f2:3b:9e:0b:55:e3:a2:6e:cb:1d:30:a9:2b:db:39:c1:0a:dd:
f7:60:80:07:3f:2a:f5:5d:46:f3:18:d7:b3:68:0c:42:08:87:
40:73:8e:68:34:4f:28:f3:f9:82:83:fd:cb:68:14:46:51:08:
11:1c:cd:f4:ac:7b:c2:21:26:7a:7b:bb:65:4a:12:29:aa:76:
0c:e0:53:7e:fd:75:34:9b:1d:4c:e3:90:c1:2b:71:b2:0d:3d:
d5:00:18:e9:96:c7:73:01:f8:09:b3:68:8b:bd:b5:a1:27:90:
0c:48:8a:72:3a:09:2b:a2:52:00:04:07:fa:c1:c6:86:8d:68:
70:f7:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:37 2025 by rpki-client