Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: ez2Mg/r4mY5qLSNWh5ogcsE2tv1GNW3djy7COk+nn5M=
Subject key identifier: B1:37:DE:52:DB:83:5E:8E:08:8D:0F:E5:CC:F8:D6:3F:A6:15:7D:BC
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019A1AD15A20E994C274A819F990254E9707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 10:01:58 +0000
Manifest this update: Sat 25 Oct 2025 10:01:58 +0000
Manifest next update: Sun 26 Oct 2025 10:01:58 +0000
Files and hashes: 1: DWjeKEhsrCMQSkqXSu5F6-_lK2c.roa (hash: E/1JJ03/M4DXDyCYKLov4LZTD3sgsbYcGtynvXI+0ao=)
2: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: +rGF02LlGPig2p32PsJXu+3K72C/DaQgJYV4c4yiK6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:5a:20:e9:94:c2:74:a8:19:f9:90:25:4e:97:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Oct 25 10:01:58 2025 GMT
Not After : Oct 26 10:01:58 2025 GMT
Subject: CN=b137de52db835e8e088d0fe5ccf8d63fa6157dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:5f:81:4b:59:20:35:d0:ad:d7:24:34:86:
2b:72:45:ff:90:6a:45:a9:1b:3b:5c:0e:f6:4f:6f:
83:43:93:7b:03:66:dd:45:1c:15:01:72:81:32:b1:
54:b5:7c:d9:31:bc:4b:81:15:a2:08:b6:b3:6d:f4:
91:e2:8b:1d:ad:8f:6e:aa:f3:48:0b:c2:e7:63:24:
8e:ed:18:0c:a6:f2:e8:12:24:3d:a6:e3:b1:37:60:
8b:00:63:3e:8f:d3:cc:ed:8d:75:6e:69:b6:5b:dc:
d0:c3:af:7d:1b:86:c7:fa:ae:cf:ea:20:5e:a8:71:
c5:68:8a:72:34:3f:6f:82:21:fa:06:9f:d6:be:88:
2a:a4:71:a9:f2:77:d8:94:bd:bf:ab:72:56:9a:b8:
b1:aa:a9:55:bf:b0:4b:01:4a:12:8d:64:23:42:b7:
6b:b5:f0:40:27:cc:b7:ac:05:36:6f:19:79:37:ca:
54:a2:c0:91:7f:5a:64:89:8c:d0:cf:0a:61:cf:74:
d1:55:bf:c0:e8:d1:f5:8d:a6:84:d6:87:18:04:22:
e8:1e:f0:7a:9c:f6:ad:2a:00:f1:7d:44:6c:ad:4d:
aa:6e:ef:ed:09:bb:08:0b:51:b3:63:d7:6c:ae:99:
73:4d:6e:be:94:1c:2f:0e:de:d0:86:e8:34:da:2e:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:37:DE:52:DB:83:5E:8E:08:8D:0F:E5:CC:F8:D6:3F:A6:15:7D:BC
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0b:d5:dd:6e:35:a1:d3:9e:b4:b9:a9:eb:41:47:6f:dc:41:
09:ff:9c:2a:0a:ef:e4:12:8a:31:e0:e7:d8:2e:c1:f4:49:49:
19:2a:b4:15:b0:50:30:32:e5:00:b0:bb:36:47:be:e8:1d:6c:
7c:17:55:4d:8e:7a:24:c7:c4:d8:b5:d5:68:bb:de:a6:dd:2b:
ae:39:7d:c5:f1:a5:b4:c4:08:46:d9:9a:8d:db:69:5f:75:28:
e4:04:d4:0d:6d:4a:c7:5c:cc:06:68:00:b2:45:3a:c7:f7:e8:
e3:9e:c0:88:1d:c3:4f:67:a1:4d:bd:5d:a9:a9:88:88:91:93:
57:24:73:07:81:8b:39:0c:41:53:9e:1f:0c:77:bc:4d:d3:12:
63:58:d1:9e:e7:9f:a3:a3:97:9e:8d:1a:d2:48:00:64:6b:e9:
d8:28:f8:d7:f3:3c:fd:88:30:d3:b4:1f:f4:f2:8a:d8:04:19:
ec:3d:f5:20:8c:22:11:ca:39:aa:e9:6a:48:4e:ec:72:8c:2c:
22:ac:51:f8:03:e8:25:6f:53:b7:73:b8:cc:c1:b9:89:f5:d5:
a0:74:ee:fd:d8:22:25:97:40:6d:77:d1:f3:93:60:1c:61:08:
73:42:82:b0:b4:04:89:70:ae:7f:cb:2c:47:03:14:b9:fd:13:
dc:b7:b6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 14:37:21 2025 by rpki-client