Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: A7302wzzDpH5qgaOMig+G3KI4CB34qPwd/eJrUvjjjk=
Subject key identifier: 01:B9:DA:8B:57:82:26:C4:9C:22:BA:EA:A5:B8:AB:77:92:A3:41:11
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 019A22C045FBDE4F745578BA8D9B66339AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 0376
Signing time: Sun 26 Oct 2025 23:00:17 +0000
Manifest this update: Sun 26 Oct 2025 23:00:17 +0000
Manifest next update: Mon 27 Oct 2025 23:00:17 +0000
Files and hashes: 1: CON1qItWtbrKIYXRdV_TEeDuWKQ.roa (hash: krT8XWx87IlYD5e3RTY90vBER8rVmDuOSR/mGg/Tnd4=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: po263z6AM6yucZec2WYtBnqfzFNJrhfyu59JskKpUEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:45:fb:de:4f:74:55:78:ba:8d:9b:66:33:9a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: Oct 26 23:00:17 2025 GMT
Not After : Oct 27 23:00:17 2025 GMT
Subject: CN=01b9da8b578226c49c22baeaa5b8ab7792a34111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:da:49:d6:29:ff:87:04:e1:81:07:ef:83:
cc:6e:58:9f:5f:3d:df:cd:4d:78:e4:97:46:5b:cd:
3d:09:fa:9e:4d:c1:5f:89:59:26:c4:99:87:0a:0c:
d8:e9:ee:51:a4:d0:e8:bb:ef:73:7d:11:89:c6:c0:
4d:5f:47:31:fb:fd:a2:6c:bf:78:c4:bc:2e:09:57:
46:82:81:e8:34:eb:de:97:86:ad:85:da:b5:a9:bb:
2b:49:10:69:56:83:ee:72:82:9d:24:2d:12:3d:13:
e3:e5:30:4e:15:0d:62:e3:59:19:c4:87:0d:31:86:
57:5b:e7:20:8c:1f:32:05:ad:78:9b:ea:f9:bf:c9:
3c:27:c4:1f:47:44:e9:52:63:3d:06:78:6f:9c:8c:
95:90:bc:ed:ad:8f:10:f9:4a:6c:3c:2f:4d:59:82:
ef:6c:30:0f:79:cc:59:00:9b:1b:c2:6c:23:a6:1b:
54:37:6f:a7:a0:03:f1:52:c8:1a:09:c2:23:26:31:
2e:db:9a:7c:eb:c0:11:4d:f9:e3:ec:8e:84:ed:d3:
a3:8c:2c:cd:87:19:af:c0:c5:7e:48:3e:44:61:6e:
bf:7a:75:f2:10:7f:10:72:09:76:f0:25:58:cb:dc:
21:60:8f:ac:98:f6:24:fe:01:92:b2:d0:a5:c9:eb:
d0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B9:DA:8B:57:82:26:C4:9C:22:BA:EA:A5:B8:AB:77:92:A3:41:11
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0f:27:fd:d2:18:a9:5e:1e:cc:51:67:eb:4a:81:82:3f:43:
54:55:1f:6b:00:2b:d4:df:ca:f2:0b:27:c6:12:4a:1c:15:b1:
27:8a:77:5d:01:a2:7d:c9:05:60:f2:0e:b6:63:78:bc:1a:2f:
92:c9:d8:19:06:7a:c9:13:95:5b:d0:f9:ad:4b:ea:a7:6d:0f:
b6:f5:9c:b7:bc:8f:75:38:2c:ba:ea:6b:52:45:26:60:22:b5:
70:d4:37:35:e9:52:6c:17:48:42:f6:e7:98:be:68:ac:45:36:
ed:50:ce:98:13:e4:a3:89:ae:bd:74:21:ab:79:46:a1:03:be:
f5:e3:bc:a8:52:ce:20:43:9b:5d:19:9d:82:d1:db:61:09:3f:
95:7f:5b:7a:34:c9:66:b1:b5:56:a7:f9:13:e3:5c:52:ca:1a:
88:cf:ca:8d:65:bf:d3:71:b2:db:a5:4a:56:0a:2b:92:7d:85:
a5:2f:08:ee:ee:ef:e5:fe:51:ef:95:b3:9d:8d:f6:7e:1a:f3:
70:e6:1c:c9:bc:3f:31:3f:f3:6c:b2:75:9f:6a:0e:99:60:4d:
d2:68:1e:d7:20:b1:f6:b2:69:65:dd:fc:86:2d:e4:19:4a:e5:
8f:02:e9:32:34:39:64:cf:43:5f:44:1c:bb:5c:06:13:d2:cb:
9d:58:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:29:46 2025 by rpki-client