Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier: wVLxKqKPNGRqhGfTq11hsVjFoMH+XGeVTb4XsHRMlZo=
Subject key identifier: 32:2B:97:FA:79:AC:E6:73:C2:FB:D6:04:75:6C:4D:C3:F5:2F:8F:94
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 0199FD6AF340AF1C4EE109F9F96EA48A3429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number: 04AF
Signing time: Sun 19 Oct 2025 17:01:08 +0000
Manifest this update: Sun 19 Oct 2025 17:01:08 +0000
Manifest next update: Mon 20 Oct 2025 17:01:08 +0000
Files and hashes: 1: 4s48aLOiVD4PAJlQi3evZjtsYHM.roa (hash: +jROjw0Y1Zl0VbxjrP2tZzucpLOm1pI3G+f+iJEafys=)
2: NfNAqOER9wuwQxKBNjji8NI0Rzg.roa (hash: 2u3dViZZEapET44foaIhQWMMbpM15mq1lfjKgtwOpEg=)
3: ZBxfDXEpCG0ayZxuToVasoI1ik8.roa (hash: B1VklKE9rrrVpqvXpbmoyfKWWVu36iKetX1MZELROAo=)
4: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: kdyMFc0Q/2OaHBNfTp8Tpc47sc05ElL6jGm2vW+GsBM=)
5: qxvHfNjR31d0glTSIY-mgfrIS_A.roa (hash: xq+U0zDak1nk6R/C5yECXTx597LdOEIOL8DRV04FkGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f3:40:af:1c:4e:e1:09:f9:f9:6e:a4:8a:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Oct 19 17:01:08 2025 GMT
Not After : Oct 20 17:01:08 2025 GMT
Subject: CN=322b97fa79ace673c2fbd604756c4dc3f52f8f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:85:24:69:f8:18:08:ab:2b:fa:da:2d:a1:
80:3d:f9:e6:75:0b:c5:42:fc:42:71:b1:71:7d:49:
1b:43:4a:db:0f:bc:a6:55:81:7b:a8:35:d3:43:4f:
05:97:cd:98:06:d6:c9:88:f7:1b:72:9e:f2:12:ed:
cd:88:c8:22:66:ef:b2:0b:be:b1:2f:ff:87:99:16:
49:f7:0e:ce:5a:74:66:fe:97:d9:88:67:13:45:51:
ca:61:87:9b:39:79:00:6b:56:68:08:b4:41:ed:0a:
84:d3:02:42:78:95:fe:ea:08:f4:9e:7c:69:9d:eb:
a8:ac:4d:93:80:b7:45:49:9c:84:73:24:83:2d:f1:
2b:3d:d8:b3:48:e8:93:d1:3d:35:bc:0a:5d:64:8b:
b1:c1:cd:fa:0d:a5:1e:4d:bf:d1:d5:f4:56:f3:9a:
9e:ff:bf:87:ce:dc:67:25:f6:69:20:a2:1f:ad:05:
94:77:0d:a1:d8:1c:a2:de:97:07:e6:2a:56:41:29:
36:69:45:90:1a:04:7c:09:6e:0b:1c:42:d7:20:f0:
40:0c:19:22:f6:0f:18:96:3b:83:d0:25:03:d7:d1:
47:17:63:46:5b:90:b9:8e:df:fb:8c:42:c3:4b:19:
2c:63:ee:0b:58:f1:96:83:83:a4:b1:04:a9:51:cd:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2B:97:FA:79:AC:E6:73:C2:FB:D6:04:75:6C:4D:C3:F5:2F:8F:94
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:aa:80:63:5f:af:dd:4a:45:dc:7f:06:b6:4b:c5:d9:69:90:
c8:38:64:c5:e0:75:0d:6e:78:b2:bf:14:7d:80:54:0c:5a:1b:
66:53:c8:cb:a2:0f:a3:a4:b7:5c:86:3a:04:a7:48:f1:a9:55:
30:b4:2e:f5:1e:a3:aa:1c:c1:13:d4:28:d9:53:8e:04:e0:75:
76:dd:c1:98:6a:fb:ee:57:66:15:1f:32:e4:9e:36:d5:90:a9:
cf:9d:ea:db:2f:2c:50:39:76:60:5a:91:08:94:a0:b8:d2:7a:
76:e6:4b:e8:64:73:52:6b:b0:7d:11:09:87:11:d7:bb:a6:47:
8e:e4:84:ca:dc:14:5d:44:aa:71:11:61:73:70:fc:21:8d:6e:
39:1a:f4:35:37:2b:93:30:9a:cb:66:ac:f4:ff:84:1f:b6:7d:
3a:8d:b4:4b:3a:d9:90:28:3b:3d:3f:aa:26:0a:a9:4d:69:de:
18:a8:4c:c9:1e:cb:e9:e9:8b:b1:86:b7:e7:d3:4a:77:c2:2d:
b4:3e:e5:63:57:e7:26:36:3e:7d:ca:0b:0d:1d:ba:bf:b9:17:
98:b2:f1:3c:93:dd:cb:5d:cd:3b:b8:ee:0f:e0:7a:08:ba:fe:
28:5d:ab:b2:44:24:88:89:d4:b2:c2:c2:9c:6f:27:1b:8f:48:
96:7a:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:33 2025 by rpki-client