Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: I548byehALe7pXv+Mx2BU95mkRkXefj2DUuikRg9YnE=
Subject key identifier: AA:7C:58:B2:BB:8D:31:F4:53:27:10:E0:B8:F7:2A:2D:3F:7C:9A:B2
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 019A085BB2555441E1B0DEC295A00BA85DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0DCD
Signing time: Tue 21 Oct 2025 20:00:18 +0000
Manifest this update: Tue 21 Oct 2025 20:00:18 +0000
Manifest next update: Wed 22 Oct 2025 20:00:18 +0000
Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=)
2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: lxhvbDeO4kkC5EK79d9EdAuN04+z0IBX3dFWRykddy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:5b:b2:55:54:41:e1:b0:de:c2:95:a0:0b:a8:5d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Oct 21 20:00:18 2025 GMT
Not After : Oct 22 20:00:18 2025 GMT
Subject: CN=aa7c58b2bb8d31f4532710e0b8f72a2d3f7c9ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:59:a6:61:91:f9:83:6f:7b:90:ab:2a:4b:
56:74:86:6e:cc:49:ff:95:20:e5:e4:12:07:7b:7d:
9c:01:d9:74:6b:d5:c3:18:cc:f1:86:74:d8:0b:d2:
bc:65:1a:53:a8:5e:0b:39:18:fa:dc:c5:08:00:dc:
30:72:c4:fc:4f:de:00:e0:bb:21:03:0e:75:b2:6f:
ca:84:fc:9c:ac:35:c3:89:8a:16:2f:2b:20:50:80:
91:02:e2:26:ef:5b:c5:d8:b4:73:59:77:b1:20:93:
e9:e8:12:95:ad:a6:cf:2e:47:68:13:5f:25:74:47:
31:d3:8b:28:1e:c4:24:45:cc:0b:25:41:86:89:8a:
d1:f8:d7:fd:8c:da:65:11:1c:8a:c4:91:65:e3:b5:
d3:05:04:96:6d:0b:19:40:f5:5d:dc:91:80:68:1c:
2f:40:a1:40:46:dd:90:53:a4:97:60:c6:de:f2:c1:
a3:7e:56:86:b2:70:89:21:78:f7:df:49:67:7a:dc:
2a:47:de:05:ad:15:87:db:e0:04:df:c8:fe:01:2c:
77:4f:48:4d:01:88:87:71:b4:20:91:6e:24:6a:69:
ff:3a:fc:0d:b2:d0:9a:89:d9:37:86:1e:24:87:1b:
41:e0:9e:f1:f3:4b:b6:9e:82:49:9a:74:af:94:b2:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7C:58:B2:BB:8D:31:F4:53:27:10:E0:B8:F7:2A:2D:3F:7C:9A:B2
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:89:21:d0:f1:c1:6c:48:a6:f1:97:59:b9:2c:5a:9b:e3:e5:
9b:a3:80:53:b0:f7:f6:c8:bc:d0:ce:02:38:16:8d:62:f8:7c:
94:3a:80:71:08:ce:84:da:39:73:3d:02:e1:07:36:b8:59:76:
08:65:97:a3:4b:f0:fb:55:df:92:91:78:09:3f:9a:92:51:13:
80:c2:f2:e4:17:14:8c:d8:4e:cb:29:bc:1d:fc:b8:c3:3a:22:
2b:27:fa:87:e0:2f:a1:04:46:ff:87:7f:7a:19:31:31:2b:2c:
d1:4c:c4:bf:70:8a:4b:db:ab:20:a4:73:70:03:cb:b7:a0:cc:
a1:78:d3:53:ec:51:02:a0:4c:e7:5a:ac:cf:e8:f0:0f:54:38:
8b:f9:cf:f8:f1:fa:d3:04:0e:56:14:48:bc:31:82:a5:3a:f1:
61:32:a8:cb:32:c4:2d:28:82:62:0b:b6:e0:df:a6:9d:3d:f7:
e1:29:00:24:97:9f:37:be:3b:80:ac:e4:46:04:d3:fc:c4:71:
49:a3:33:17:0e:ce:d6:87:23:6a:48:95:31:f5:a1:09:e2:89:
d8:4c:f9:f4:51:b3:87:b5:6e:84:19:9c:72:a6:8c:15:db:4f:
ba:36:0a:d1:11:9d:eb:50:fb:71:4b:f1:d3:3e:da:e0:04:6f:
2b:bf:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:42:46 2025 by rpki-client