Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: w67RxINM4XtaOHOnZz0TsnytCqWYrFkRY4X+vFwRDf0=
Subject key identifier: BB:C2:01:CB:FC:12:3A:9B:D8:5C:D3:C7:9D:32:32:50:16:AF:84:FC
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 0199FC217EDB53BCF1B0B1F6E8CFA1B0D809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=)
2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: Le4IAOEu1KjmUuVDcQccBtoIl8+PyLVJznQXSyNIG4U=)
3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=)
4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=)
5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=)
6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=)
7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=)
8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=)
9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7e:db:53:bc:f1:b0:b1:f6:e8:cf:a1:b0:d8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=bbc201cbfc123a9bd85cd3c79d32325016af84fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:ae:fb:2b:ed:be:14:09:b6:d2:42:d2:ef:
13:09:68:c5:7d:5e:eb:02:45:52:6c:fb:9a:5c:3c:
bc:fc:f1:e9:c2:77:d0:53:2f:a6:7f:44:75:50:d4:
e0:5f:b8:6a:94:53:3e:7e:0c:59:58:3f:aa:a7:86:
94:2d:c4:0d:fb:f9:02:c2:96:57:8d:49:8a:90:3a:
78:15:2f:16:02:1b:e6:09:61:d9:0d:0f:a5:85:6c:
34:90:ef:90:2a:29:6a:92:cc:54:ff:d8:bb:82:65:
19:14:1d:a0:b8:0d:ee:7d:01:b9:ae:1d:84:b1:40:
0f:01:73:33:9a:0d:2c:01:d0:2b:51:65:08:84:2b:
bf:6e:1c:41:f8:43:d7:36:54:f9:32:2a:3a:13:54:
97:7d:14:63:f0:f2:e1:6b:d2:c9:70:c5:7f:96:a9:
ad:a7:93:39:59:bc:1d:fb:16:a8:3b:8b:13:ac:27:
13:4c:f7:ba:21:d6:bd:6e:96:7b:fe:f8:94:11:2a:
d3:8a:cd:52:66:0d:37:4e:0a:de:d6:aa:23:d8:35:
4c:96:51:eb:71:bb:1d:bf:e2:cf:32:15:6c:98:6d:
e0:02:e6:5b:d7:96:f1:0f:57:06:5b:df:0a:cf:74:
17:b7:c2:dc:3a:1b:67:15:cc:33:e1:4d:ba:b7:27:
eb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C2:01:CB:FC:12:3A:9B:D8:5C:D3:C7:9D:32:32:50:16:AF:84:FC
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:99:bf:af:87:c1:a5:40:50:30:bb:36:4d:41:3c:bc:06:bd:
c1:39:ef:7b:50:9d:ab:62:11:3f:8e:7f:7c:d9:ab:aa:5a:1b:
6b:8f:86:c3:19:78:3b:83:31:83:c8:8e:69:e9:90:f5:f7:1b:
22:6e:71:f6:22:a7:68:99:b7:97:e2:3e:f6:cf:ea:4e:85:4b:
44:d9:84:0b:5a:0e:9c:a3:d4:98:8f:e9:d0:1d:cc:5f:ad:5e:
10:8e:35:bd:4e:46:36:86:24:9d:c2:2f:6e:17:38:71:5c:62:
1f:2c:a3:1e:d7:e8:50:3f:90:3b:33:8e:8c:9c:46:82:a5:4b:
d2:77:d3:76:17:fd:02:de:59:9a:8c:8b:be:2e:ce:52:99:2f:
10:8a:71:70:4a:99:44:b8:8a:d6:5a:ff:7e:1c:59:d2:c7:73:
8c:92:80:81:a0:e9:ca:c1:b1:f5:ed:71:37:cf:8a:fb:e3:3f:
b3:b8:37:8a:de:9e:c4:11:6c:29:bc:88:6b:34:1b:e5:19:46:
2b:48:02:ea:d1:fa:14:4b:22:e5:ba:7a:43:d7:ed:64:51:03:
2e:5f:24:24:97:07:08:9c:b3:eb:50:a2:98:ce:1f:37:fa:63:
55:2f:a3:fe:24:82:ed:3b:19:a7:c4:a1:5e:f8:f5:84:b2:95:
f3:14:e1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:22 2025 by rpki-client