Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: Itj/+vB1oidF2KpjVja+NWLtTSCIEauOOOxdCpDg2Vk=
Subject key identifier: 91:74:2B:14:64:41:56:76:85:B7:FE:ED:35:C9:D8:2B:9F:94:05:0C
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 019A221B81DAEDF9AE00AE5478B8E19DF508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0A2E
Signing time: Sun 26 Oct 2025 20:00:19 +0000
Manifest this update: Sun 26 Oct 2025 20:00:19 +0000
Manifest next update: Mon 27 Oct 2025 20:00:19 +0000
Files and hashes: 1: 5K2zlrIHADlFytOUhc54zx-uCAw.roa (hash: VJ3nEApsPTUcM1XeIb75bGQ+CbjZ/H8pdnWKdP3UYOg=)
2: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: VTCZ173A59RIYfRYqEIPHTJyZPeu0H+FMNwbFjAFFmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:81:da:ed:f9:ae:00:ae:54:78:b8:e1:9d:f5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Oct 26 20:00:19 2025 GMT
Not After : Oct 27 20:00:19 2025 GMT
Subject: CN=91742b146441567685b7feed35c9d82b9f94050c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:4c:4f:f9:1a:00:19:7e:75:a0:2c:dd:be:
cf:6e:3f:df:0a:5a:30:94:f1:bc:6c:d5:9e:e9:8a:
63:9d:4c:31:04:c4:a9:96:08:84:6e:d0:81:f6:82:
d7:4f:63:10:db:fc:8e:d4:c8:26:50:72:d8:2c:86:
94:98:90:12:f3:3a:ba:1c:66:6a:d6:86:c2:13:43:
ac:60:99:35:c3:4e:a1:a2:e8:c4:fe:9d:1a:c1:84:
a9:fe:be:f2:7c:69:df:4f:ae:f7:5a:42:a1:4b:0c:
be:6b:b0:9c:88:c5:cc:22:ae:7e:e1:6a:25:87:1f:
6f:af:bb:37:b0:ce:40:0b:7f:4b:ed:61:d8:dd:2f:
60:fb:14:e1:f3:f1:88:5c:96:b6:52:b1:88:d2:e0:
a8:e3:83:cf:40:0e:3d:78:81:70:c0:37:69:ad:c7:
79:96:cd:35:da:db:34:87:36:eb:2e:84:f8:02:88:
c5:b8:ff:62:7b:33:e2:99:54:3f:f0:02:ee:c8:6a:
48:b8:79:e9:31:97:28:6a:dc:4d:3d:db:83:21:bc:
4e:0c:8a:40:2b:2d:73:cb:12:46:46:c0:15:f6:b2:
38:0d:51:b6:da:86:3d:bc:67:f8:11:74:25:c9:60:
8a:63:8b:cb:fe:e8:f7:dd:95:4c:0c:91:26:ee:c2:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:74:2B:14:64:41:56:76:85:B7:FE:ED:35:C9:D8:2B:9F:94:05:0C
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3a:46:a5:e4:a3:c7:54:ba:06:5b:c0:f6:39:1c:28:a3:df:
b0:b1:08:a6:e5:6b:17:38:6b:1a:97:07:29:60:e1:f7:6e:c0:
12:ed:0e:0b:e3:bd:57:e9:a8:50:95:92:a1:29:60:aa:10:77:
a7:87:f1:88:01:cb:ff:a6:cc:83:f9:2f:f9:9b:9d:7d:e4:c1:
9d:5d:3f:35:4c:2c:6d:98:2c:64:5d:98:cc:e9:aa:74:49:b6:
85:af:2b:e0:f5:06:50:b9:99:00:2b:ad:77:d0:74:a9:be:58:
0e:a0:1a:ce:f7:3a:cd:61:d3:ff:25:b2:49:39:63:3f:44:4c:
ec:f7:bc:56:68:51:b2:1d:69:13:52:1a:44:e4:19:54:79:65:
5b:c2:b2:53:92:71:58:73:cb:4f:d5:a2:e7:b5:8a:78:5f:80:
bd:10:5c:77:c4:12:aa:52:f5:8c:72:68:a6:62:6d:a6:63:15:
42:f9:21:51:a2:67:90:4d:6e:0a:08:6b:52:6b:c3:66:56:83:
45:d3:f6:04:ea:02:49:c0:77:18:b5:89:90:9e:e0:36:b1:3f:
f2:7d:84:74:5c:9e:80:00:22:96:48:b0:0e:e5:8b:1d:f8:f2:
5f:e9:70:8c:e6:85:ec:92:e0:54:9c:fd:f2:e8:32:60:dd:e4:
89:b9:4f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:39:19 2025 by rpki-client