Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: hwUy7THitSJpVNpLb7Az0qizf4+TsJExu9qKwcHBZeI=
Subject key identifier: C4:19:8C:BF:17:32:A3:34:BD:E0:15:A2:36:41:64:35:C8:FD:DC:2D
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 0199FA69C66E9B084AD8F0385AB8901E3B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 03:01:00 +0000
Manifest this update: Sun 19 Oct 2025 03:01:00 +0000
Manifest next update: Mon 20 Oct 2025 03:01:00 +0000
Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=)
2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: K2e4cM4iFvNhKpIRV9Ya9bU8Va1fGVSMoEdCV5L66Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:c6:6e:9b:08:4a:d8:f0:38:5a:b8:90:1e:3b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Oct 19 03:01:00 2025 GMT
Not After : Oct 20 03:01:00 2025 GMT
Subject: CN=c4198cbf1732a334bde015a236416435c8fddc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:b6:be:cd:26:10:30:77:f3:26:15:a4:c0:
aa:a6:52:33:d2:fc:99:3b:17:2c:0f:08:d5:70:9f:
c4:4b:20:e0:18:d5:a4:55:9b:04:23:90:0f:8b:ae:
fc:d1:c2:e4:ec:a4:44:a2:ee:af:25:bd:a6:f7:77:
b6:a3:e0:22:9b:5e:fe:d0:e4:07:6d:5e:0c:b6:a4:
a9:3e:29:23:3a:4b:2e:ba:09:5c:92:56:db:3b:2f:
35:ce:18:fb:19:16:bd:58:fd:af:e8:ea:19:26:cb:
b2:4b:61:01:b9:d1:e2:66:29:7a:9b:44:28:a7:6e:
76:d5:bb:fa:ff:55:c0:d7:10:86:9e:90:9f:08:0a:
c1:d2:d7:4b:71:db:79:f3:d0:f1:9d:3b:45:57:b7:
cc:43:4f:aa:3b:77:9d:13:1e:93:7f:ff:97:0b:3f:
6a:06:59:8a:de:9b:48:2b:5a:86:9b:c5:06:eb:20:
48:7f:0a:c5:74:1a:5d:21:3a:03:2b:94:33:90:97:
73:7e:50:59:bd:80:24:8d:a3:00:d5:e7:c0:5a:9a:
e5:50:dd:e2:a8:2e:56:2b:4c:b8:3e:d3:58:56:bc:
98:6d:b4:18:90:c9:cb:97:61:f6:2e:8d:39:c2:a6:
50:9f:0d:f5:58:12:39:f1:dd:52:7e:cf:1b:60:3c:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:19:8C:BF:17:32:A3:34:BD:E0:15:A2:36:41:64:35:C8:FD:DC:2D
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:01:d9:f4:04:82:77:24:9d:b0:a2:d4:38:1e:14:73:1d:3d:
ac:a9:8b:46:84:ef:eb:77:be:e4:41:0d:ed:e6:2b:29:48:49:
d7:f5:cd:8a:f6:89:5b:5b:9a:4c:23:d3:a8:fb:d1:37:c7:7c:
85:f7:84:89:87:5a:3c:25:82:f2:a7:c1:58:4e:64:40:dc:2e:
eb:bb:56:e0:3d:b0:06:42:ac:03:11:dd:3e:f2:c0:1f:75:66:
77:b1:ab:bb:f0:5f:a9:12:fe:e5:97:81:4d:76:3d:69:b7:b2:
d8:be:68:69:a2:8f:ad:af:89:2e:44:e9:f8:e4:cb:f5:82:37:
70:41:5d:05:4d:da:8a:1e:dd:cf:1a:7e:21:be:19:47:3b:e9:
4c:95:21:9c:00:d3:db:85:f3:03:40:b3:49:de:e9:84:bb:f1:
12:75:d2:90:78:8c:35:92:22:b3:23:d4:c0:8b:2d:55:94:38:
f0:4d:05:7e:30:37:a7:fa:70:5b:e0:63:d7:33:fe:64:ba:d7:
d0:2c:1e:5e:9d:99:b7:d0:29:5f:cc:4c:cf:ba:db:95:81:d0:
68:61:38:e7:f9:7b:cc:17:05:a8:5f:6a:d0:dc:97:ff:d3:06:
48:c4:59:19:b1:f5:46:4a:0d:41:a6:3e:a5:5a:47:0a:8e:7a:
1e:f2:38:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:47 2025 by rpki-client