Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: qXwr7PMvoZIVv9CQc1RDdmYP3vWbvVPCr2nBOidNlWM=
Subject key identifier: AE:AC:F9:F8:CD:CC:5E:97:9E:05:DA:63:03:47:B0:3E:19:45:B0:4D
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 0199FB7CB35B9007E5242C8184BDDB83101C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: KrEyLtzd_FGxXKe36EuPBXxaKHA.roa (hash: ADivn+VbvpgE3fUtfn8Xzz0qtLuBXCOdiCI9IztCcUQ=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: 5O04sSswJL1sa0u1mikwB/Sac3+/0N/l7PQftTvxQJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b3:5b:90:07:e5:24:2c:81:84:bd:db:83:10:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=aeacf9f8cdcc5e979e05da630347b03e1945b04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:7d:03:b6:08:4e:bd:d5:63:3a:da:6a:9c:
97:74:fe:e9:8e:89:2a:04:89:79:22:60:7c:0a:15:
d5:71:94:84:33:23:77:ae:79:c0:f5:7d:6f:03:e5:
de:79:1d:aa:54:d4:a2:89:da:72:22:a3:b8:0a:b9:
40:b2:bd:8c:e0:50:da:ce:93:ae:a4:81:64:fe:7a:
b6:b3:14:fa:03:69:5a:97:08:6f:a4:af:65:ba:18:
f1:55:c7:e9:9f:9a:2f:50:e4:2e:91:04:f8:31:b3:
eb:1e:a6:e2:f3:f0:0c:1b:23:28:db:b2:3a:44:36:
df:fe:4b:cc:68:a1:37:cf:15:6a:0d:8c:55:c7:44:
f6:b8:1e:0f:65:2f:c6:27:9b:94:ff:14:db:55:de:
6c:2a:21:bb:ff:1c:f5:cb:b8:69:4f:8f:6d:ad:8f:
19:6b:78:dd:a1:b1:bd:81:01:1e:98:1b:24:32:36:
c2:70:33:80:8c:c3:46:00:a3:7e:9e:03:99:03:b7:
b2:9f:d6:d2:6a:89:87:3e:f3:77:af:12:8b:8c:f3:
d4:0c:b9:b2:22:62:d1:07:50:5f:ae:a1:4e:94:84:
10:88:88:62:2c:a6:0c:a9:d0:99:7d:dd:59:bd:85:
07:58:e0:a7:6d:27:b7:6f:d6:aa:c8:bb:f5:9f:87:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AC:F9:F8:CD:CC:5E:97:9E:05:DA:63:03:47:B0:3E:19:45:B0:4D
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dc:e2:f5:99:04:8a:49:13:46:f2:c5:9e:80:0d:fc:60:5e:
26:08:f2:0b:09:ea:91:27:93:82:9b:88:67:55:e3:d6:8d:de:
c7:8a:bb:15:d2:5d:cc:94:39:aa:b1:85:62:75:d3:c0:5e:ee:
93:21:da:08:5b:9e:e4:3a:d4:5a:3a:9e:96:e8:4a:c4:94:d7:
eb:75:96:34:43:06:1c:16:6d:96:4a:7d:bf:6c:28:55:f1:6c:
96:f3:77:e5:21:6a:e0:81:3e:52:70:21:7c:f0:32:fd:08:b2:
72:57:e2:c3:f9:34:2a:d5:d4:34:44:35:c3:5e:2e:c9:22:7b:
2b:bb:05:f8:d6:60:eb:89:d4:84:37:17:7f:9a:f9:f7:45:bf:
9a:07:42:44:2c:85:6b:75:6d:c7:c0:1c:65:ef:6a:95:96:35:
2b:df:17:77:2d:67:16:c2:9b:e3:9d:90:ed:e3:60:7c:b5:dd:
2a:01:a4:5b:20:7c:bb:67:8b:d3:45:83:6b:2c:f1:4a:30:10:
6b:d5:49:cf:df:f1:72:af:33:d9:67:26:e1:d8:d8:aa:48:a0:
a5:3e:18:d1:1f:9a:42:0e:40:bb:f8:b1:86:8b:60:6d:52:cb:
09:f6:bc:9c:f5:b3:2f:3d:87:4e:c6:fd:e1:e1:71:b3:76:f7:
d0:fe:96:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:22 2025 by rpki-client