Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: 8O31b0LmIVACp6JzUzFZCHpMq063svchGjXvxd9x44Q=
Subject key identifier: 4E:97:E7:47:CE:C6:89:FF:8E:92:45:E5:5C:37:1D:C2:6B:C8:D2:35
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 019A18061BF07C797ABE5C0E9E0C4EA1D2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 16F1
Signing time: Fri 24 Oct 2025 21:00:44 +0000
Manifest this update: Fri 24 Oct 2025 21:00:44 +0000
Manifest next update: Sat 25 Oct 2025 21:00:44 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: AeinWW075FrET2nSu9AfZeVC7ZM91OURlaGAGo1R9Eo=)
2: nHFDaIILOdTjKywJ536u2NbijQ4.roa (hash: GZUS5OKqPLBVaLkWEyB2Ce3k2q8gf8Rj7vaTEKCevNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:06:1b:f0:7c:79:7a:be:5c:0e:9e:0c:4e:a1:d2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Oct 24 21:00:44 2025 GMT
Not After : Oct 25 21:00:44 2025 GMT
Subject: CN=4e97e747cec689ff8e9245e55c371dc26bc8d235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:f9:c0:7a:87:5f:7e:6b:c5:5a:8a:c9:61:
e1:75:a1:a7:99:97:73:30:cb:b1:4f:5f:e3:2e:05:
86:24:bd:35:4b:cd:8f:f6:23:0d:3a:a1:0c:30:17:
09:e3:13:f6:9d:4e:c8:45:ea:7a:76:0a:2a:1a:86:
f2:d3:63:31:14:de:ba:92:34:39:60:25:12:50:65:
e0:35:f4:87:0c:c4:6e:03:a3:9a:81:00:20:03:1f:
a3:39:83:36:1a:f9:96:b8:ee:c5:58:03:de:af:d8:
7b:fe:58:fa:d8:f9:f4:06:45:5f:c3:5c:c6:13:e0:
6f:e2:bb:69:1e:fe:c9:48:72:a3:af:9a:fa:52:64:
0f:20:b8:dc:ad:d4:0d:89:66:fd:62:ef:f2:0f:ae:
c4:04:7b:ba:f3:6b:90:35:b5:b6:b6:c2:9a:78:80:
36:4c:9c:4d:56:c9:22:9a:8f:9a:62:50:0d:22:d0:
9c:87:c4:c0:c8:32:a1:14:4e:c9:c9:3c:37:08:15:
8d:c6:10:d0:3a:5f:64:a1:fa:c9:71:17:1b:bd:c2:
ed:9f:c0:39:5b:ea:65:84:4e:8a:34:2f:e4:78:e2:
fb:b4:4c:a9:0c:2c:b4:7b:15:a5:a6:95:5a:0c:a2:
42:dd:9b:b1:db:99:4f:42:cf:ed:48:e0:79:9a:08:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:97:E7:47:CE:C6:89:FF:8E:92:45:E5:5C:37:1D:C2:6B:C8:D2:35
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ba:cf:6c:3c:83:e1:c0:c0:c5:36:b0:46:12:57:ab:00:f3:
e3:76:ff:b9:1a:1b:a1:29:eb:db:be:d8:60:53:d5:72:70:f9:
5e:a4:a8:ed:70:bd:c5:61:0b:03:65:21:b6:f1:46:c3:12:ce:
5b:da:38:56:b2:09:5f:bb:bd:0f:1a:b7:c0:fb:92:ed:d5:e6:
eb:3f:3d:db:85:33:5c:63:1c:6e:a8:3b:be:10:60:61:b9:28:
85:b1:7e:07:a7:0a:86:0c:e6:fd:4a:cf:45:97:f0:84:a2:53:
15:1d:19:92:0f:6e:c1:8d:65:67:07:73:fe:64:66:cd:ee:59:
ca:f0:ce:38:e2:7e:03:8d:90:38:7e:9e:ba:83:e1:c9:05:4a:
f8:12:78:32:8e:da:6b:32:d9:5e:fb:d8:82:1f:79:16:2c:3f:
d4:47:d5:5a:ea:0e:ad:33:1b:52:a8:84:72:45:11:85:c7:fe:
84:43:38:27:4a:84:0b:ff:81:a1:a2:79:df:20:43:dc:ae:c7:
bf:47:81:15:87:36:67:4a:3c:63:65:f5:4c:65:4d:b2:ec:9b:
cc:93:74:46:17:9a:c3:b2:d2:fd:29:59:f2:0a:e4:c5:c9:69:
64:70:c9:68:2a:b1:5b:e7:51:f7:68:ca:eb:0c:8b:01:bf:97:
a9:ab:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 05:16:38 2025 by rpki-client