Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: EZkZ4EeTd2Ea6UtL1Q8DMEKD9YxKuDa0BBRchxOeYc4=
Subject key identifier: B5:E7:87:B3:8C:C8:E6:E1:F5:8A:83:1F:DA:28:3B:35:84:E0:DC:C2
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 0199C75805611B3C537477F297B381E9051E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 168C
Signing time: Thu 09 Oct 2025 05:00:58 +0000
Manifest this update: Thu 09 Oct 2025 05:00:58 +0000
Manifest next update: Fri 10 Oct 2025 05:00:58 +0000
Files and hashes: 1: MIfmeAoWN0nwDc_PxEMHlVixhH0.roa (hash: BGlglgWDBdgW/hvSdFfJEQ+q//PCVjKwrtXl1XRe9nc=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: 8W5A5hsqQ21yzIAM0Ip/DpZUVdab+vBBD4SYYm65ZZU=)
3: ok0D6AFy1nokMBW7AtTQbtvoy-Q.roa (hash: OI8j87WnUAa44hUR7Jr4hBgPSlGVFL5uAjQD5u8Uzmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:58:05:61:1b:3c:53:74:77:f2:97:b3:81:e9:05:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Oct 9 05:00:58 2025 GMT
Not After : Oct 10 05:00:58 2025 GMT
Subject: CN=b5e787b38cc8e6e1f58a831fda283b3584e0dcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:c1:a9:bf:44:d6:4e:a8:ae:a1:d3:f5:04:
3b:21:b7:fc:4c:1a:9b:44:f7:08:0f:10:5c:d6:61:
9b:d2:8a:d0:04:c0:60:04:d9:04:1b:ec:b8:23:fe:
9a:07:f4:b8:fc:7a:15:80:92:3b:28:95:83:11:8e:
1d:55:12:16:e6:9d:86:b6:45:f2:9a:e8:50:de:bb:
9b:c0:f6:d4:2e:0a:04:29:89:80:6f:30:9e:80:03:
aa:a4:e7:25:6a:0f:0c:d1:0c:8f:5b:a5:36:6d:78:
a9:c5:bf:fd:9c:67:5a:62:75:a3:ff:ce:47:46:a4:
7c:b2:4d:09:fe:9c:a6:e1:17:de:11:aa:f2:8a:02:
e7:a8:76:42:4c:97:bb:7f:cb:48:46:5a:c4:f6:08:
08:8d:e9:22:15:72:9f:f8:ec:52:1f:de:7f:13:cf:
9e:59:96:71:13:ba:54:7c:17:d2:e1:8a:9e:19:3f:
98:af:ce:1f:22:7f:dc:73:11:bd:4b:5c:f2:25:a0:
22:45:ed:40:48:0f:f2:ca:ec:cd:41:66:b4:3a:1f:
ec:9d:8d:72:0e:84:4d:c5:43:e1:75:ff:3f:a0:04:
f5:43:60:70:e4:33:24:19:93:ae:3f:2c:d4:67:19:
4a:91:ef:1d:33:ff:4b:e7:3f:7b:c2:e3:ba:53:35:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E7:87:B3:8C:C8:E6:E1:F5:8A:83:1F:DA:28:3B:35:84:E0:DC:C2
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3b:32:ea:96:79:67:27:09:01:66:35:c3:fc:49:2d:c5:6f:
f8:45:ba:41:87:c1:2c:c8:ed:49:80:89:3c:bd:27:2a:f7:36:
92:6d:b5:8c:70:fd:7e:ca:8f:eb:cb:b0:ca:ff:ce:19:90:b0:
2c:4c:fc:34:4f:c3:09:53:3b:79:69:e7:85:79:07:b4:e0:64:
ff:a9:4b:a9:ab:da:a6:68:bf:6f:aa:59:24:d3:f1:5c:0a:30:
13:22:83:44:8b:ea:2a:32:ad:7d:72:b5:8a:01:3e:b5:98:d1:
00:d8:00:c9:f2:43:e6:ad:21:c9:eb:13:81:e6:27:fd:83:b0:
e3:81:0b:b2:15:3b:55:e7:d4:ef:c2:f9:f2:a0:46:52:18:b8:
66:39:12:ba:9d:6e:63:07:35:9a:93:b6:95:9d:16:49:2f:a6:
aa:80:bc:20:b3:0b:1d:28:ea:1c:50:b1:86:c9:4c:32:ad:47:
6e:28:3a:56:0b:1d:f9:16:14:1b:c6:c6:03:b2:3f:6e:3a:5f:
5f:7f:28:57:31:22:c5:0a:9a:7f:4f:41:77:32:a7:04:61:ec:
e4:6f:66:e3:69:3f:40:9f:34:96:e9:b2:b6:5c:b9:a6:b9:2a:
fc:d7:59:ca:a7:9c:e4:56:32:16:ed:3f:e5:80:4e:70:50:87:
a8:dc:b4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 08:25:40 2025 by rpki-client