Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
File: k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json)
Hash identifier: ESQmLwdL4CFYHcqLlt2qY2JpVUQ1wR32wfSCIyqq0IM=
Subject key identifier: 4A:55:E0:AF:81:13:B4:E8:39:45:F1:A8:DA:4A:4D:8B:3B:2C:B3:58
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Certificate issuer: /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial: 0199D16E8B417AF72C01D57915C04ABA288A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
Manifest number: 151B
Signing time: Sat 11 Oct 2025 04:01:46 +0000
Manifest this update: Sat 11 Oct 2025 04:01:46 +0000
Manifest next update: Sun 12 Oct 2025 04:01:46 +0000
Files and hashes: 1: BQgIr9QK549Gh-t8XQa2kJXJbXM.roa (hash: FyMx4NmgioW+v5IwQi287SWwxmKQZhpDHBnVgYBPbds=)
2: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: uBuEKOJ8vXTOrQ4zItgONHY1MYnBv4HlbD/mef97ncA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:6e:8b:41:7a:f7:2c:01:d5:79:15:c0:4a:ba:28:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Validity
Not Before: Oct 11 04:01:46 2025 GMT
Not After : Oct 12 04:01:46 2025 GMT
Subject: CN=4a55e0af8113b4e83945f1a8da4a4d8b3b2cb358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:53:20:4b:c7:48:23:2e:30:6f:dd:2d:4d:
84:bf:bb:2d:03:93:82:59:c8:76:da:43:50:ff:06:
84:d4:f3:48:e2:7f:95:02:ba:b7:2b:6d:e7:a7:d8:
a6:df:32:9a:08:24:7b:d5:2c:3c:e8:86:20:54:b5:
eb:14:8b:26:f7:ac:d8:ec:09:fa:45:4d:de:b2:a3:
58:13:62:df:a3:ad:38:69:ac:40:50:2c:db:2b:8e:
b8:77:8d:33:c8:47:51:ca:5e:ce:87:88:b1:e5:ff:
f0:19:12:9d:aa:ff:85:7d:1f:7f:3d:e9:38:43:3c:
1b:27:8b:fa:bb:6f:10:9a:45:ea:e8:f8:f5:91:b5:
b1:19:94:11:88:06:69:fe:7e:9a:a3:c5:04:c1:df:
b7:c3:13:3d:90:46:4f:12:9e:40:9e:c3:cf:29:b4:
27:22:c7:e0:e9:43:47:d8:29:b3:b4:d6:ae:63:3a:
9d:ac:cd:d2:a6:de:44:03:46:2d:9d:a7:74:8c:39:
22:db:7b:6b:70:3f:bf:ce:0b:2b:4a:31:59:63:1b:
ca:63:42:c6:e8:a1:dd:f3:60:bb:ba:f9:ed:30:52:
95:92:a9:da:a9:86:f7:16:17:cb:3b:cc:7b:8d:31:
94:99:7f:1e:d6:b0:37:35:32:32:59:17:c8:0f:80:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:55:E0:AF:81:13:B4:E8:39:45:F1:A8:DA:4A:4D:8B:3B:2C:B3:58
X509v3 Authority Key Identifier:
keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9b:54:ac:7e:22:ad:ee:36:90:17:4d:06:51:94:0f:b6:78:
ae:ff:11:8e:80:c2:de:51:a2:66:70:01:7b:9c:65:91:c3:3e:
e4:2c:2f:1b:b7:1e:62:ad:b2:37:6a:45:3a:85:d4:e7:53:97:
59:19:7d:6b:35:a6:8e:5e:3f:bb:66:10:a4:44:62:2c:a5:1e:
aa:65:44:ed:15:d8:67:1b:86:f9:b0:f7:e5:02:1d:ea:9c:7f:
fe:b1:1a:83:01:9d:7b:2a:18:26:c8:05:8c:ab:37:45:e3:bb:
05:ae:69:2f:ce:6e:c3:51:24:66:c4:0a:b2:ba:3e:0a:07:de:
86:fe:da:f3:f0:84:66:e1:1b:10:e7:d0:15:f9:30:32:d2:b6:
f2:97:9f:99:79:20:54:81:9a:45:29:b2:6c:64:54:b6:a7:dc:
17:db:a4:da:c9:7f:ea:f8:2b:0d:ee:06:b7:94:b5:fd:69:fc:
8a:5b:a2:32:44:fd:04:d8:7f:0c:54:28:b2:5f:6d:07:ea:e8:
1f:c2:e1:ad:03:1a:f1:ce:21:73:7f:ab:7a:c7:9f:e0:6d:8f:
6c:87:ae:b5:19:6b:ad:a5:d9:d0:63:2b:72:ed:52:4c:71:05:
51:a2:a6:14:41:e7:6a:7f:63:df:29:4f:e6:89:98:4d:d9:e9:
52:5c:ed:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:07:21 2025 by rpki-client