Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
File: k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json)
Hash identifier: j/9IOH4lUGeaCOzIfg5YAGkdEiMcOxsyg6CcApl/hFI=
Subject key identifier: 79:B9:91:46:A7:CE:60:51:35:00:47:90:6A:E7:3D:0D:6E:8E:7E:47
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Certificate issuer: /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial: 019A26660FFE9207CB1706FC4991CC07392C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
Manifest number: 168A
Signing time: Mon 27 Oct 2025 16:00:14 +0000
Manifest this update: Mon 27 Oct 2025 16:00:14 +0000
Manifest next update: Tue 28 Oct 2025 16:00:14 +0000
Files and hashes: 1: F5bs6DNVTHOaUsVHiFb7UzCDu7c.roa (hash: w/qr34whaxn4VYChdCHJu1JeKElghciF+2vacPtM24Q=)
2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: zbjcU1XccdMTayddOEGBiJPJaz8C9pOXAwbt8uYPT4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:0f:fe:92:07:cb:17:06:fc:49:91:cc:07:39:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
Validity
Not Before: Oct 27 16:00:14 2025 GMT
Not After : Oct 28 16:00:14 2025 GMT
Subject: CN=79b99146a7ce6051350047906ae73d0d6e8e7e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:7e:5a:15:68:ec:c4:86:50:d8:21:bb:15:
c1:3e:44:d9:48:34:21:fa:0f:17:d9:b4:24:2e:10:
e7:8b:41:fd:43:d8:d3:bc:9f:b4:c2:1b:de:24:b1:
cf:db:a2:c6:23:f5:c8:87:35:7a:54:ca:c2:b4:7f:
d0:48:fe:20:f3:95:67:dc:a2:56:10:7a:0e:6a:3b:
41:2b:20:c8:42:a9:51:9f:43:9d:99:06:f7:77:c7:
d1:27:41:65:82:d9:bf:8d:19:ca:54:08:71:21:4c:
b8:e7:92:4a:7b:3e:4c:34:14:6a:46:bb:1d:b9:00:
0b:8a:1b:7b:f5:b3:52:af:c5:13:89:7c:19:3b:ba:
fd:57:98:b2:79:f7:38:aa:f2:f7:a3:a3:6a:3f:ab:
88:97:74:df:8f:5d:9a:88:40:97:68:d1:79:3d:77:
0e:57:bf:de:99:d5:b6:e4:16:5e:ec:3f:62:3f:c5:
1c:34:b3:a4:5e:b1:2b:7e:25:b1:39:9a:9e:c6:fb:
cc:bf:dc:96:e9:d2:bd:41:61:73:61:d6:01:f9:d3:
bd:18:bb:22:0a:ea:6c:bd:2a:55:f3:9b:17:c2:6e:
06:d8:be:ce:11:fe:20:9b:22:54:71:f2:87:be:97:
3e:f0:00:9e:41:43:5e:56:7f:93:a8:94:6d:65:f9:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B9:91:46:A7:CE:60:51:35:00:47:90:6A:E7:3D:0D:6E:8E:7E:47
X509v3 Authority Key Identifier:
keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:da:e3:3a:17:d4:dc:22:7b:38:e6:6d:53:3b:8e:02:08:96:
b6:b2:8d:4a:2d:9e:ba:43:4f:bb:1d:bc:4b:7a:f3:b4:24:e7:
b0:41:0b:15:c6:ee:68:1e:3d:b9:9c:ad:b7:c5:ee:65:c0:65:
da:fa:63:4c:8b:ee:8c:9f:1b:07:f3:25:e7:60:44:15:ff:f2:
c6:e9:e8:bc:ee:73:30:49:d2:f9:25:ae:e0:5e:8e:3e:fd:b0:
54:a7:a0:f5:cc:60:9e:fd:4f:a0:02:48:38:e5:85:cc:2d:fa:
c7:d7:3b:0a:af:55:3c:71:19:09:df:14:f8:fd:43:bc:18:2e:
8d:b4:56:46:d8:a5:59:67:44:bd:f3:af:8f:1a:2a:a4:c7:55:
f4:40:9f:b6:db:4a:e6:48:cd:e8:b0:77:c6:58:ca:7f:41:0f:
79:29:52:ff:07:57:74:0d:c1:b4:4f:e0:35:52:93:22:a0:a2:
f6:99:55:73:91:53:d7:34:4e:33:7c:23:b2:66:c0:cc:2c:fe:
f7:3a:84:ff:86:ba:0c:df:af:0f:64:44:18:31:3a:e8:69:fd:
b9:8a:ca:52:91:82:40:0a:b7:11:5e:34:6d:e8:bc:e9:da:f0:
ed:a3:30:8a:cf:1f:d0:ce:f9:6c:93:b3:28:fc:77:1b:8b:42:
43:c4:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:31:57 2025 by rpki-client