Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: KEE+zDPGT6lORl+uaMOAoLfpZ0PHkILFS+XkHSfi4H0=
Subject key identifier: 72:7C:22:ED:04:01:1D:A8:54:90:5B:6D:2E:94:87:62:04:89:3E:D7
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 0199FBEBD009661A904EA4BDCE11AF75AA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 06A9
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: DgYaKXLAfCciJB45PdY6jb3nvSM.roa (hash: 3wQZIj5q2hejLISAuXVPv02HNSLvrU3fDX6SOnePruk=)
2: iLJZ457a-7z02PhFWjv4cGHT93U.roa (hash: NESsCi8hLaoKvM16NOOEv6MVC+cF28ZWv23JeL3C9tw=)
3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: 1H+yw6Iqk5plq3VPReZUj17GhcSH8FK0CDa3Jveg6MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d0:09:66:1a:90:4e:a4:bd:ce:11:af:75:aa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=727c22ed04011da854905b6d2e94876204893ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:53:22:22:2e:04:52:9f:72:ff:53:03:a8:dc:
7a:c1:5f:be:d4:80:96:05:55:19:d6:8e:1e:4d:10:
cf:f9:a7:2a:93:28:84:87:4c:9a:ee:e7:d4:3a:68:
5a:fa:19:f0:62:69:9c:07:f0:76:e5:72:de:4f:20:
67:61:6f:5c:eb:81:52:9e:3d:6a:59:99:9e:ca:ee:
ea:23:de:40:68:71:91:99:6c:3c:98:24:52:b0:90:
6d:f4:1b:9b:09:59:a1:dc:17:39:42:86:6f:ef:27:
9d:96:3e:7a:b7:59:ed:1f:51:b3:ff:7e:b6:b1:4f:
a3:e4:af:84:8d:c6:dc:18:c2:0c:85:ee:16:bd:73:
29:e4:ff:96:da:36:7d:07:af:cf:19:2a:da:be:f2:
09:b2:3c:2a:97:8e:bb:01:33:b3:33:47:30:25:01:
80:ef:b2:a4:7a:44:a4:c8:5c:fb:ea:32:a2:58:1a:
b6:dc:bc:18:dc:e9:df:26:93:39:c3:79:43:22:2a:
fe:37:a7:3d:67:12:b6:96:ac:8a:a7:a6:5f:4c:48:
11:a2:ce:02:f8:34:09:e3:13:5d:b6:1f:1e:9e:e7:
92:5b:24:74:a2:6a:e4:1b:b1:2e:89:20:fd:de:4b:
a8:a9:68:fe:0e:93:cd:a6:77:bd:c3:66:5c:76:04:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7C:22:ED:04:01:1D:A8:54:90:5B:6D:2E:94:87:62:04:89:3E:D7
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c5:aa:fb:ed:70:57:db:53:e7:42:3b:f4:8d:85:35:83:34:
37:1d:32:f3:dc:39:17:fb:7c:92:8d:fa:e8:06:d7:31:0c:8e:
58:7f:1f:40:23:dc:90:9a:fe:f0:d0:9a:e0:83:7b:84:e1:31:
23:af:c5:19:16:c3:61:28:6e:b3:a6:7a:1c:25:65:2e:5d:cc:
31:33:d6:32:b4:0a:d3:cf:19:0b:f7:8e:90:2c:11:74:71:40:
6a:33:a2:fb:11:ec:cb:1c:e0:d9:eb:aa:fd:75:f0:de:20:55:
5f:78:38:0b:08:06:28:20:dc:ab:91:20:15:9a:d9:77:96:29:
3a:c9:cf:d4:ab:88:0e:1f:51:77:e9:1f:5a:d3:59:3c:35:9a:
e9:8b:1b:cc:b8:e3:dd:83:63:42:a9:f3:0c:49:40:02:96:ea:
9e:96:42:5b:99:3d:96:b4:79:25:da:db:76:93:67:f3:7a:6e:
15:fa:d3:0b:a0:60:b6:f0:a2:9c:0e:9a:18:a2:db:53:87:fa:
66:52:c6:e5:2c:7e:5f:b5:9f:b6:8d:a7:2c:ff:58:f5:93:dc:
69:9e:8c:dd:fd:ce:ea:91:9b:ed:bb:99:78:fe:8e:33:c1:0a:
8e:35:8b:06:c6:e4:b4:a3:66:49:97:a2:67:2b:b4:31:96:8e:
8b:21:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:38:01 2025 by rpki-client