Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: U+j3lTR6GwH1rMK43lEzkOqHOm7tBn/f51eiQS8gKls=
Subject key identifier: 79:1C:D7:A0:1F:F3:65:0E:0E:E3:02:49:CA:17:41:80:99:EF:A6:77
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 019A221BE7A5203D3C288D277A81B21BBE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 0607
Signing time: Sun 26 Oct 2025 20:00:45 +0000
Manifest this update: Sun 26 Oct 2025 20:00:45 +0000
Manifest next update: Mon 27 Oct 2025 20:00:45 +0000
Files and hashes: 1: aWw5wJuzfBEHmyQaah8xYehdUG8.roa (hash: H2Jnmk/OanpEK56jJ8tSaxjK9R89WU3IiR7I7leXG38=)
2: cBmPaf2oGu0_AMcsbNoq5Hph_V4.roa (hash: 9oqeFK2Tn1tYym9cWphxU57OSdAjV+OS6dUAD4eSIdI=)
3: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: gBuRd+xprYi5t7FDJBND7k0TBdIBXinzGoO+IqwVEmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:e7:a5:20:3d:3c:28:8d:27:7a:81:b2:1b:be:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Oct 26 20:00:45 2025 GMT
Not After : Oct 27 20:00:45 2025 GMT
Subject: CN=791cd7a01ff3650e0ee30249ca17418099efa677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:62:37:c9:1d:a5:31:d4:99:05:e2:df:9d:
27:04:55:d9:30:41:e2:de:6c:1a:24:3a:e9:9a:37:
2c:e0:86:16:95:27:84:ef:e8:be:62:f0:bb:85:3c:
87:64:d2:4f:3a:3b:54:7f:8a:3b:f4:13:d8:99:5e:
b7:9b:8b:0e:86:84:df:23:74:f8:6c:73:9e:b2:d8:
55:ea:05:13:c1:06:68:9f:4b:11:b8:0d:a5:ab:10:
6e:d6:1a:14:73:14:e4:2b:9d:83:d6:35:72:03:72:
81:ca:d3:79:a0:b2:fd:bf:51:c6:1d:7e:cd:91:30:
37:a6:39:34:02:04:53:84:8b:13:a5:35:d0:01:ff:
c7:e1:97:90:8c:d9:b7:bb:d4:ea:7d:21:5d:d1:ac:
90:69:10:96:eb:0c:98:91:87:a7:8f:c1:3c:66:77:
3f:88:1e:33:b3:b7:d5:0a:6f:9a:e9:a1:d8:d5:ef:
d6:cd:c6:3f:3b:58:fc:d8:27:f2:8b:89:62:6f:71:
09:36:30:2d:41:19:fa:dd:ab:5f:6a:c0:87:17:a9:
0c:2b:ee:17:af:c3:89:bd:27:4e:70:e9:21:e7:15:
3c:03:f3:e0:e4:79:fb:1b:21:18:0c:65:a7:a2:4e:
32:83:c4:47:66:92:d6:9d:f1:ad:b4:57:7f:a2:67:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1C:D7:A0:1F:F3:65:0E:0E:E3:02:49:CA:17:41:80:99:EF:A6:77
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d8:22:10:ee:2e:ee:01:1f:9d:f8:15:53:66:0c:44:df:80:
7c:98:ee:49:1b:31:e9:91:80:fe:2b:a1:c7:cc:7c:2f:4f:d1:
fe:fe:4a:4c:f2:9c:31:c0:5e:79:bd:9e:0a:c1:37:52:b7:b2:
bc:37:bc:f1:f2:a3:2c:a6:bc:7b:fa:a7:14:d9:85:f0:69:b7:
00:89:fa:b7:82:44:75:4f:bc:27:1a:7b:70:ff:7e:71:81:e2:
2d:e0:30:d5:32:7b:13:7b:a3:33:01:ad:de:50:db:83:6d:38:
b1:e0:87:da:75:cb:aa:f4:a5:80:83:af:33:8b:b5:99:b9:a0:
42:f2:16:0b:e6:db:82:b4:35:09:49:de:d9:58:cb:ac:6d:b0:
7d:50:95:bc:eb:0a:10:8d:8b:30:66:7e:b9:51:c5:21:54:7a:
c2:bf:10:1c:b1:c5:e3:64:01:e1:b6:b9:64:9f:17:0a:00:4f:
8d:bb:47:8b:98:8a:d2:c1:4e:fa:fb:3d:b5:7a:16:5d:18:42:
32:06:03:3b:b6:01:67:97:df:23:a8:a5:8c:e0:a7:b3:23:63:
f6:8c:d9:da:f4:a1:dc:6a:0e:46:fb:d1:33:f8:9c:be:e1:64:
1a:62:ec:c6:2d:b6:3c:2c:65:ed:92:15:e8:e3:b4:41:33:5d:
d9:62:8c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 23:17:03 2025 by rpki-client