Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: 2327/9bkHL0MrNrnbwwuUWr0qLRqd3LoLjUvryaJnpg=
Subject key identifier: F3:79:FB:AA:41:0A:14:01:A5:2B:8E:27:FA:A4:09:08:9F:A1:00:9E
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 019A1EE3B6E1764DCEADA935BAA36B420513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 05:00:31 +0000
Manifest this update: Sun 26 Oct 2025 05:00:31 +0000
Manifest next update: Mon 27 Oct 2025 05:00:31 +0000
Files and hashes: 1: 9kHCDEYZPWH5aik7KavJ0sDUmNA.roa (hash: ijJR9ND92QYljIrNDlxEINq6c8DaInEaO2V/WhuFgzU=)
2: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (hash: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=)
3: ZgG20-53jQJwsyA9Uj-HDlUNiyA.roa (hash: r4Yw7FV6MragLYSnWbxNhJIL4Bz5tpt7zooYhdKRX2U=)
4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: WvhGVX5UG7ZHYS3uQhZMPjlK4ClEQ5kgrnIEThVlC0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:b6:e1:76:4d:ce:ad:a9:35:ba:a3:6b:42:05:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Oct 26 05:00:31 2025 GMT
Not After : Oct 27 05:00:31 2025 GMT
Subject: CN=f379fbaa410a1401a52b8e27faa409089fa1009e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:12:0f:df:fe:f0:5b:6f:02:94:3b:05:a2:
17:7b:12:ad:16:e6:75:96:ff:8b:31:15:66:ec:85:
0c:90:3b:f4:f0:ff:5d:7d:7f:c5:12:0c:95:ac:d0:
e0:b5:60:24:02:7d:e5:be:37:0c:0c:ee:3b:9d:46:
2c:fb:2b:74:ee:87:df:11:93:43:66:30:77:26:62:
93:bb:59:42:4a:86:9f:5a:5c:47:0b:54:c4:33:35:
99:9f:18:80:99:9c:26:b7:d5:16:7e:bb:af:70:f1:
79:11:9b:45:f1:67:b8:6a:92:67:d7:e2:0b:8c:15:
3e:29:56:39:0f:3e:ee:20:db:4e:2e:a7:3e:01:91:
76:89:3b:ec:75:b4:bb:76:83:4c:d1:50:86:d6:9d:
10:41:2c:cd:e4:26:60:22:14:68:88:3b:d6:b2:4e:
07:76:15:10:dc:66:46:4c:71:0b:6a:98:85:87:a9:
9e:19:2f:f1:c5:88:07:c7:08:79:84:65:44:4a:05:
44:8e:2c:7c:0a:e3:0a:64:49:5c:3a:0a:60:86:eb:
54:ab:33:92:29:d1:3a:85:9e:65:c0:83:b7:a8:40:
09:f1:2e:79:6d:39:c5:d6:8a:8b:0e:9d:67:1c:65:
4b:a9:bd:f2:06:f3:cd:e6:33:22:13:11:d4:ec:ea:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:79:FB:AA:41:0A:14:01:A5:2B:8E:27:FA:A4:09:08:9F:A1:00:9E
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f6:bb:cb:0f:03:60:44:5b:71:f0:72:76:c7:46:63:11:11:
97:8c:c2:79:f8:a0:da:85:3c:d0:92:65:0c:d5:d3:7c:af:35:
82:e3:34:53:fd:f6:4e:c3:4d:d0:b8:13:6b:8e:d2:ed:0d:5b:
d6:70:50:b3:32:fd:53:3b:8f:e4:e4:b6:20:4e:33:19:67:03:
80:8e:d1:bd:ed:0b:da:ed:04:c4:fa:b2:3d:dd:a9:e6:33:d8:
8a:19:54:3d:6d:c6:b4:e2:fc:f9:00:64:dd:8d:32:c2:4b:7c:
de:08:34:36:ba:d3:8e:c4:08:fb:aa:41:1c:f1:c9:4a:97:97:
de:f2:58:6f:c3:2d:0d:32:0c:3d:12:af:5e:9a:e6:b1:89:5a:
d3:43:6a:db:fe:20:0f:02:f4:77:4c:c0:bc:4e:3b:1a:f9:bd:
f7:45:12:ad:66:d5:29:a4:01:8a:6e:b6:6f:9d:04:cc:81:b4:
be:10:2b:27:81:58:88:4c:8e:3a:c1:24:52:5a:71:88:d5:a2:
32:8f:29:22:75:9b:af:b4:97:bf:91:5b:eb:25:93:bf:d3:b9:
f5:52:4a:50:21:f8:4e:d2:23:7a:f6:10:3c:b8:6a:18:cb:66:
e3:58:cb:f3:3d:6e:56:d3:b8:11:e2:aa:83:8c:dd:76:f5:e9:
7d:b9:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:03:25 2025 by rpki-client