Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File: k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier: CaycSh6O6wUI+L6jTb+AhA54vf6lOJuD9birg937p5E=
Subject key identifier: 18:CB:9E:0E:33:70:56:EE:41:A9:14:D9:A2:D0:9E:52:35:30:DA:9E
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial: 0199C5A053D75F5A1D15D0D123D424F1F7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number: 04FE
Signing time: Wed 08 Oct 2025 21:00:42 +0000
Manifest this update: Wed 08 Oct 2025 21:00:42 +0000
Manifest next update: Thu 09 Oct 2025 21:00:42 +0000
Files and hashes: 1: V4JFeDwnCAqThlIryfbjYJ96jqI.roa (hash: kiCqOYzNhXEMGFGlKAItyp8yURJWNGMcGMSiUikSSU4=)
2: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=)
3: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: tW4BsfcEQDKUvQ2pV4w1IlYvZbHf8PxNCv6C+busQ3w=)
4: lf-trLvA-qDd5zEdeoTS16VXX6g.roa (hash: UkGZWMolhkbNSX35kZCtNaOnC+PwksQdwebe8XEM76U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:a0:53:d7:5f:5a:1d:15:d0:d1:23:d4:24:f1:f7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Validity
Not Before: Oct 8 21:00:42 2025 GMT
Not After : Oct 9 21:00:42 2025 GMT
Subject: CN=18cb9e0e337056ee41a914d9a2d09e523530da9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:8b:4c:5e:aa:56:d6:18:d8:83:9b:31:c7:
66:90:e3:a9:8c:85:c2:f7:97:f2:70:bf:3e:ac:e5:
98:b6:52:f3:f6:76:ef:f5:82:55:1a:e2:bf:ef:ba:
7a:fa:96:e6:7e:e5:ba:41:fd:9d:71:71:74:69:0f:
6c:fc:a4:78:9e:7a:21:cc:23:81:1f:63:1e:f4:13:
4e:a3:0d:22:4b:b5:89:0b:63:e6:0b:cd:85:e5:ea:
31:0e:93:9b:ec:87:6f:53:5b:df:b5:90:22:75:9d:
ff:99:a4:ea:04:16:da:61:f7:e7:10:2d:7a:a0:03:
09:c0:19:d1:de:84:56:00:1e:18:bf:3b:b4:99:49:
02:c8:17:86:b2:42:31:f6:7b:78:f7:c9:68:42:70:
40:b6:ed:4a:22:72:ac:9e:29:0b:65:44:e3:7a:ba:
95:dc:e4:f8:78:ba:1e:51:93:1f:0e:04:19:dd:c0:
35:16:02:dc:e7:99:1a:99:89:7e:cb:b0:4d:80:e9:
da:e2:66:74:9f:fc:e1:c3:97:90:78:a3:45:40:99:
26:f9:0d:66:72:24:95:3b:0d:64:94:a1:0f:61:9d:
91:3a:99:47:e2:7d:8f:53:5b:03:27:77:18:68:c7:
56:ce:33:f5:d3:06:08:29:e2:ba:1f:de:c6:ad:61:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CB:9E:0E:33:70:56:EE:41:A9:14:D9:A2:D0:9E:52:35:30:DA:9E
X509v3 Authority Key Identifier:
keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9c:23:dc:a3:92:e5:3e:16:d2:b4:31:22:ec:b1:25:5b:2b:
57:f1:3e:55:b2:38:d7:56:84:3d:9a:ad:04:8f:dd:9e:ec:09:
f2:46:fd:f0:36:bf:6b:87:09:3f:6b:d6:61:d0:e6:68:5b:b8:
3b:b1:6f:d0:bb:e2:a9:df:6a:91:9e:2c:b7:dd:bb:06:62:af:
cf:4e:76:46:92:a6:5b:9b:47:3d:11:0e:28:9d:ba:1a:22:dd:
65:7b:a9:9a:35:5a:43:27:f8:f7:55:a6:0b:fe:b1:ce:93:af:
67:aa:7d:ec:2b:e3:a8:db:0d:08:61:57:ad:79:ac:7b:cb:d4:
75:4a:2b:48:ad:0b:dc:02:f2:59:9e:37:44:6a:27:5f:3e:5f:
65:e5:c6:4f:78:99:43:09:52:3d:60:4c:37:ea:c7:2e:5f:5d:
c3:00:57:fb:a6:a0:6a:d0:57:ae:46:6b:e3:ad:f9:4b:f6:ae:
3e:be:97:9a:4b:9b:c5:b7:aa:d1:26:9d:3a:9e:55:74:e3:40:
7e:b1:78:3e:bc:b3:40:a7:dc:66:1f:da:3c:4a:31:f4:bc:2e:
15:cd:ce:e5:2b:85:fe:6d:0c:72:08:0b:78:37:76:ff:0d:8d:
8b:b5:a2:fe:a9:6f:86:bd:51:ac:87:e3:37:73:5a:66:5a:6c:
55:7a:33:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:25:27 2025 by rpki-client