Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: m6Tm7oP5TAWeasKvH/pGHDDjBEPezeqhmA6+PkdWqTc=
Subject key identifier: 4F:92:60:CB:A8:9B:99:39:F5:2B:18:CB:95:ED:37:0A:89:53:F9:C5
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 0199FCFD7ED3E708DD6598EFE0BB265138E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:35 +0000
Manifest this update: Sun 19 Oct 2025 15:01:35 +0000
Manifest next update: Mon 20 Oct 2025 15:01:35 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: S+6NxgdAhMsdo/ra6vRIoS6SoWjtlGxCqlhEA/BGHj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7e:d3:e7:08:dd:65:98:ef:e0:bb:26:51:38:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Oct 19 15:01:35 2025 GMT
Not After : Oct 20 15:01:35 2025 GMT
Subject: CN=4f9260cba89b9939f52b18cb95ed370a8953f9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ee:cd:df:a6:af:9a:39:40:49:21:63:dc:4f:
89:68:20:65:cd:66:84:07:14:ae:20:da:09:1a:d8:
fd:75:01:3d:8c:f0:f2:d2:9f:40:87:fb:de:6c:1a:
a4:36:a5:c4:c3:f1:5f:7d:6a:b5:59:74:09:ec:f2:
63:bb:a7:d7:b6:53:7d:65:f9:51:ab:dd:95:54:1b:
ed:45:2e:4c:23:2c:51:23:e7:ea:64:96:a2:55:eb:
1a:da:2e:a4:27:3f:7c:3d:60:af:59:bb:fe:83:f2:
cc:b1:2b:a1:b8:71:c8:17:d2:2a:d0:31:16:ff:82:
99:ae:0e:1d:7e:b9:e1:fb:6e:97:06:36:77:fb:10:
f2:c0:77:b6:45:91:db:11:89:bb:db:67:f1:10:e2:
07:fc:1d:31:00:e7:4d:0d:7a:f5:b5:8f:10:91:9e:
4f:cb:ab:62:4a:8b:ef:ed:e6:5f:0c:bb:a7:45:62:
e3:d8:fc:4e:89:f5:90:ec:d7:0b:2f:01:25:7b:a0:
6d:e1:36:29:bb:7a:75:25:57:66:7a:9d:56:84:af:
df:cc:da:9b:23:d6:17:72:cc:30:9f:52:fc:d5:56:
0d:0c:70:7d:bf:8a:96:d8:35:eb:f7:4f:ec:a7:c6:
07:6c:de:2f:2f:2b:ac:b0:2d:9b:74:2c:0b:be:ca:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:92:60:CB:A8:9B:99:39:F5:2B:18:CB:95:ED:37:0A:89:53:F9:C5
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2f:5e:a4:f8:29:e5:85:4f:9e:cd:39:15:cf:e9:c4:97:05:
a6:ab:19:1a:3d:42:4e:85:a4:86:b4:f0:35:eb:52:88:21:ab:
98:e2:5a:2d:78:71:60:b7:c7:0f:5e:2d:d3:b8:c8:46:7b:1b:
3c:21:e1:b6:32:75:bc:1a:df:7d:9e:bf:41:b6:4c:c5:7c:3f:
2e:34:ff:f5:03:e0:b9:f4:54:d7:59:77:b8:68:de:87:b9:10:
af:b0:61:0a:ac:04:40:bd:d9:be:c0:7d:3c:4c:1c:44:c4:b0:
d4:76:91:92:5f:eb:49:38:b3:3e:25:38:8d:35:f2:84:7c:f8:
b7:bc:7c:98:a1:ac:08:24:5e:94:dd:4e:f7:37:2d:df:c8:f6:
11:80:f9:4f:5b:8c:e5:c7:d9:c2:86:fc:c0:37:19:1e:df:79:
22:18:9a:b2:59:de:49:c2:a7:b7:51:31:e2:e5:bd:9d:04:e2:
3c:dd:0e:1d:a3:ae:86:92:4b:50:5d:15:61:ae:ae:6f:46:ed:
a9:c3:6f:eb:ed:25:82:3b:e9:57:af:b6:c6:54:4d:4a:7e:68:
38:66:6b:67:72:62:43:94:2f:15:ad:f1:4c:97:7b:84:bb:81:
b4:2c:30:9e:34:f5:dc:99:95:4c:95:a8:c6:04:92:bc:a0:8f:
29:57:cc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:54 2025 by rpki-client