Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: uA2iIhKKuWCjf2UNsoBm9GqJoTxkDeCw2lWYTJQtVvI=
Subject key identifier: 4A:4F:16:FD:6D:9E:69:94:67:A7:65:C7:4C:1D:51:23:D5:68:0D:EA
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 019A0B5DA72A8005C86229E6D0238CC2871B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 16E9
Signing time: Wed 22 Oct 2025 10:01:18 +0000
Manifest this update: Wed 22 Oct 2025 10:01:18 +0000
Manifest next update: Thu 23 Oct 2025 10:01:18 +0000
Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: +F6p7b5g4u+zm43F/IIcQaMHWgl1v9m/2Coe/3kOUcg=)
3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:a7:2a:80:05:c8:62:29:e6:d0:23:8c:c2:87:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Oct 22 10:01:18 2025 GMT
Not After : Oct 23 10:01:18 2025 GMT
Subject: CN=4a4f16fd6d9e699467a765c74c1d5123d5680dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:ea:8c:ec:fe:74:37:79:a0:23:48:6c:ab:
c6:ce:c8:ca:8d:51:21:e3:69:f9:1a:f2:fe:88:32:
32:76:c3:fa:7a:dd:54:dd:4e:30:e1:a1:33:c8:ae:
57:e0:43:7f:61:cb:c5:dc:b4:fb:df:42:db:c3:d4:
a9:5c:f1:61:d2:af:74:3f:7e:4c:24:3c:73:67:79:
cf:77:30:e3:21:dc:3c:c3:8e:fb:29:26:dd:a2:cd:
c5:c2:9a:0e:85:e7:f8:71:a6:2f:bf:37:fc:c8:bf:
e3:84:13:6e:9c:5c:b5:24:a5:a9:59:66:98:9f:01:
d0:04:92:6e:c0:39:c3:be:85:53:31:31:a6:ad:66:
5e:3f:86:de:0d:b6:4d:8d:5b:fd:51:70:49:40:d1:
e9:3a:9e:ca:44:e9:5b:37:0d:5f:5b:92:50:11:45:
57:f0:b3:0c:6d:37:eb:3b:76:1a:44:85:5a:35:57:
90:1d:a2:9b:9e:27:92:5a:c6:c2:10:35:34:ae:56:
8e:42:39:8d:5b:0b:8e:01:3f:39:70:b6:9b:93:a8:
34:fe:09:f0:68:ac:29:fb:c2:7f:00:84:e7:20:be:
ca:ba:09:a3:a9:b5:d9:ed:08:b1:fc:56:97:e4:d1:
ea:97:da:76:68:6d:15:1c:8c:2f:f1:49:ee:5b:16:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4F:16:FD:6D:9E:69:94:67:A7:65:C7:4C:1D:51:23:D5:68:0D:EA
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:88:7c:c4:d6:e0:10:bf:e6:92:6f:61:93:f2:6c:fb:6a:d3:
87:80:1b:46:99:aa:2f:5e:3f:9b:60:3c:53:5a:13:1a:ab:8c:
0c:9f:35:d6:52:9b:df:41:6d:4f:9a:86:ae:97:be:d5:94:77:
dd:cc:1b:af:90:2b:8f:45:6a:5e:7c:75:75:bf:39:04:15:9f:
34:91:df:fe:e5:75:f1:ae:2f:39:4c:31:28:05:ba:14:25:f1:
c3:b6:90:e1:d0:78:a4:af:10:53:ca:b3:47:f7:cb:c5:67:56:
ac:46:6c:25:bf:bb:ca:a1:f6:d6:6c:55:3f:9e:a8:64:8f:c6:
56:9f:b6:75:4a:0e:34:6f:08:d8:3c:cc:25:3b:1d:33:aa:eb:
2f:c5:52:64:cb:6f:f8:98:5b:31:34:0d:25:40:7b:a9:f3:15:
74:27:24:97:fc:0d:5c:46:0e:64:71:34:47:20:cb:96:87:f8:
4f:94:56:7a:d5:ea:ee:23:4d:f0:6c:a2:88:0c:85:7b:c7:ba:
c9:99:93:c4:05:ce:da:a4:da:ed:53:ec:db:22:06:26:a6:2d:
60:97:e7:30:13:d0:9b:12:fa:23:b4:f1:f8:2a:71:1b:87:36:
b8:d6:88:95:65:42:20:4c:53:57:f9:ce:bc:ef:53:e3:49:ac:
15:7b:c5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:02:26 2025 by rpki-client