Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: cyWH2ODPnf3Aiz36fS0+0hlvLw7ZpKGWAaNAdYqn3rY=
Subject key identifier: 86:3F:4A:85:12:79:F9:88:A0:82:26:92:DD:7C:BF:F8:5D:90:D1:11
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01995009ED2581B0A198D7A377F9714CC22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 16B7
Signing time: Tue 16 Sep 2025 01:00:51 +0000
Manifest this update: Tue 16 Sep 2025 01:00:51 +0000
Manifest next update: Wed 17 Sep 2025 01:00:51 +0000
Files and hashes: 1: JJUxbgHMv-0yifQ0vzK3Bzv3J3I.roa (hash: wgxoooyUYka6wBwAnzmOiM4hWYGMvH3bmsmWj5Esfj8=)
2: XeK0CZ13T3wtXBojjxpNhDhBvcs.roa (hash: x0vlqqPlTF70kEmtRSbNvFJ/mdBjM21Eu+Z28Tbo5Qk=)
3: efGS5QB4x8YLUF0ZUU134TmCOdY.roa (hash: jtY4k+g6s6jJQV2IfC9BUdMEikQ9W0KdhVmy0z1p+48=)
4: f-Ywb5xowe8tDfjioe_nZXfczLU.roa (hash: Eh27uhobGEnU6Wkcq0s4lL/JH8lOhFcxzQPFqeNpsAM=)
5: lhIVXKyvHvL1M1KrWSOUSp4Xfy0.roa (hash: 1wnwX4Q7QX+gVuRNkxMS+avsozb32JFwrZsJyBwtFIM=)
6: rG8sgKlcR_co060cLGFIgui5OUs.roa (hash: htQfl8MEseiQmntk60qe7em849zL881OoDWkNKzAoNQ=)
7: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: E3GBR2vEzCaj46gahA8SyzLAOZMQsltj9TGiS679Byg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:09:ed:25:81:b0:a1:98:d7:a3:77:f9:71:4c:c2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Sep 16 01:00:51 2025 GMT
Not After : Sep 17 01:00:51 2025 GMT
Subject: CN=863f4a851279f988a0822692dd7cbff85d90d111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:71:2d:1c:b5:b7:7e:e6:8f:08:de:97:c4:
52:ef:15:28:af:2a:91:51:f8:eb:31:a5:e4:f0:5d:
ce:96:46:47:6b:83:c9:89:36:6a:9d:54:ad:73:be:
11:b6:26:f5:6b:93:53:3a:5a:7f:31:f7:fb:a0:19:
73:95:d3:9a:f2:83:b2:69:31:c1:92:d8:62:fc:02:
1b:14:73:f2:ca:c5:91:f4:3f:8d:79:1a:50:e4:3b:
15:21:7d:98:65:a4:ff:10:5c:4b:62:e1:2d:9f:c4:
b7:ab:e6:9b:e9:74:d4:2b:9e:55:3d:12:c9:2e:64:
31:af:90:78:ea:b5:a8:46:7f:53:6a:b6:f9:ba:1f:
ea:44:f7:0c:0c:c5:e1:f1:b2:16:61:2f:ee:c8:3e:
e3:38:62:4b:68:f4:22:51:17:5c:76:c4:97:29:c1:
ee:15:34:b7:65:20:db:9c:fd:43:9a:40:a0:bd:ab:
30:c3:d9:29:29:cd:e9:da:18:bd:ad:7f:c2:48:aa:
53:d8:5a:81:bb:17:40:f5:26:15:50:d0:56:17:f4:
40:f0:9a:1c:25:2a:ab:11:c4:08:a3:26:65:3e:16:
e8:d7:ae:90:0f:99:b5:fa:22:9b:0d:44:6c:79:ae:
4e:b9:b8:4e:c2:2c:5d:19:dc:66:d8:c3:4a:0a:e5:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3F:4A:85:12:79:F9:88:A0:82:26:92:DD:7C:BF:F8:5D:90:D1:11
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:31:60:e5:3b:4b:4c:e5:7c:78:d8:3f:c5:dd:68:c0:12:c1:
8d:2a:1b:bb:54:2d:21:b4:87:05:bf:03:3b:ad:8f:a9:f4:a4:
1e:b9:c2:11:39:40:70:f9:8a:2d:1c:d3:2e:31:c6:e7:f9:72:
94:9e:cf:30:28:60:49:03:af:e3:fe:f7:3c:c5:57:03:19:7a:
ad:11:8e:b0:4e:2c:06:4b:58:54:8f:94:23:4a:6a:c5:49:1c:
cb:0f:af:c4:dc:8e:fc:3c:3e:06:80:52:c3:e1:17:c4:e3:cb:
30:db:72:31:15:cb:14:fc:f9:46:ea:89:0c:c9:9b:2c:f8:07:
17:a0:fd:49:50:ac:ee:ff:70:79:d3:95:9d:13:4d:b8:f9:b2:
d2:88:46:23:b4:f8:fd:41:3f:fc:e6:61:e1:1e:eb:6b:be:ea:
21:96:41:ee:63:c6:62:a3:ba:b0:13:60:89:6a:62:8f:75:21:
f2:2e:e3:00:f7:39:c1:66:6b:d8:67:6d:4e:c1:88:54:b9:9d:
25:64:4b:d3:e5:4c:2c:42:4b:0c:7c:d4:81:2b:8b:56:8e:a9:
0e:62:7c:c7:cc:4e:87:b9:b6:24:0c:b7:94:07:0f:86:71:cc:
74:d4:d8:02:ad:51:e5:3d:8d:e1:32:68:c5:7d:46:5e:2c:22:
a3:42:1f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 08:31:21 2025 by rpki-client