Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier: c01pOG4OHwPmbPUP4Tf5IIxVOH92LQQYxUmMyTpeo6Q=
Subject key identifier: 35:25:C9:54:D2:FD:60:79:B5:34:78:3D:F9:F3:1A:66:7D:F9:49:FD
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 019A19F3EC137EAEBAA450BA4E3232F8985E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number: 16F7
Signing time: Sat 25 Oct 2025 06:00:07 +0000
Manifest this update: Sat 25 Oct 2025 06:00:07 +0000
Manifest next update: Sun 26 Oct 2025 06:00:07 +0000
Files and hashes: 1: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (hash: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=)
2: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: KWtCllztr/OblewS9aw91VCn3Y5gDbDeGTmhUoQnMcE=)
3: 2Cx8NesV2FgXdhnelF2G7i5Bybw.roa (hash: 8z2f0ixyt/V0YgUez4ATct6QO89AWHzLa+ZNoGbwCzI=)
4: 8YGP0hkU08CaSTjLusnYfNoY0P4.roa (hash: jWZuJOzMx9s5Np/gPv2mn1+ybL0gZ2yjh5jQEUREZ9U=)
5: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (hash: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=)
6: g4GRCAwu2q3EL-X1WL9RVrJbAQI.roa (hash: slCTgIDY8YfOpbaBmeIbIqftrjDIQWNh6XUk0mKIj7o=)
7: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (hash: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=)
8: nFpp1sOKP4UepGIUoHswLN2IbRI.roa (hash: Ttm+Uf2laDwHJ/wFsX6jTAwI0vmckT+FtwvtYdaFusE=)
9: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (hash: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:f3:ec:13:7e:ae:ba:a4:50:ba:4e:32:32:f8:98:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Oct 25 06:00:07 2025 GMT
Not After : Oct 26 06:00:07 2025 GMT
Subject: CN=3525c954d2fd6079b534783df9f31a667df949fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:33:ea:d5:01:c3:1b:83:ec:6e:63:27:cb:
f1:54:ce:56:40:5d:ad:2b:ee:90:d6:18:5a:90:f5:
60:11:09:40:8a:68:6b:9a:95:c8:c2:d6:5b:f6:bf:
ef:f9:c7:a0:52:39:2b:15:15:b0:b3:be:53:32:89:
a5:c1:65:af:3b:82:91:6f:55:75:3d:d9:64:6a:df:
4b:2e:30:da:4b:8d:91:65:98:ac:67:fe:8c:7a:91:
2c:b1:01:1c:88:6a:81:0c:98:0f:47:a8:eb:85:4d:
05:17:71:34:ba:43:14:5e:1e:fa:9d:5a:a4:07:1c:
97:ab:a7:5b:fe:0c:93:99:4f:98:57:64:16:80:a3:
d1:13:50:44:7c:ce:21:a5:b3:fa:6e:cd:a1:23:37:
d7:64:3e:42:0a:90:ec:33:8a:9e:51:59:1e:05:7d:
ed:ed:32:f6:20:ca:e6:e7:07:d7:d2:09:91:34:ae:
7f:1c:84:98:f8:85:ee:3e:e6:f5:b7:ce:67:94:e8:
9b:ef:eb:c9:94:38:c4:ea:b2:c1:99:9f:73:5d:5f:
39:12:53:f8:28:fd:72:f7:f1:9e:64:1c:d5:17:e1:
13:a6:b0:4e:d6:d3:32:fd:5a:a4:fe:e3:d7:09:9d:
ca:3d:df:99:6f:27:b2:35:44:e0:13:c0:6e:a6:87:
14:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:25:C9:54:D2:FD:60:79:B5:34:78:3D:F9:F3:1A:66:7D:F9:49:FD
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b1:40:37:8f:df:db:62:8f:cf:9c:3f:cb:c8:42:9f:45:db:
d9:3c:19:53:d7:bd:6e:c4:f2:49:fe:71:10:e8:dc:f4:dc:22:
be:01:53:a4:ec:6a:8b:0c:3b:09:bf:a6:61:9f:b0:54:a5:b9:
1f:cf:f2:32:01:40:47:24:ad:39:ed:02:5c:82:d8:ee:66:bd:
18:76:62:73:07:60:68:a2:cd:cd:71:a7:59:64:5b:fa:d5:8d:
d8:ab:75:43:ad:97:8b:d0:2b:b4:67:66:53:a1:ac:02:fc:97:
f3:14:a6:a7:cd:eb:79:d6:5d:42:06:31:27:d7:82:e8:7d:17:
12:7d:87:4b:07:66:57:2c:e0:86:5c:c3:8d:0f:14:27:e2:ec:
4c:04:dd:9e:c1:22:d8:3e:b4:94:f3:4f:16:71:43:a4:4d:e5:
8b:53:a2:fc:b0:a1:e1:79:a5:44:0e:bf:4b:e8:c7:66:f4:88:
67:20:ed:75:6b:b6:fe:ce:73:42:19:09:29:2a:92:ab:97:e8:
68:04:d7:26:13:57:60:69:29:12:7d:6f:cc:f5:de:85:5f:87:
e4:8a:ad:cb:bb:ac:0d:77:11:87:de:07:3d:e0:51:47:57:3e:
eb:78:2a:c2:d4:52:c8:5a:00:ef:c5:6c:99:0b:ef:7b:9b:8e:
6d:bc:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:28:28 2025 by rpki-client