Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier: oUzkHQXVmbAe/V0BD2JA9ElGavViWGyLIBgpzAzyvgo=
Subject key identifier: 84:23:BA:53:6F:BA:A9:7E:E4:34:10:50:E3:4B:29:D6:B0:F9:04:5B
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 019A24E63FB47B6D9C59680E2A10B307B54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 09:01:00 +0000
Manifest this update: Mon 27 Oct 2025 09:01:00 +0000
Manifest next update: Tue 28 Oct 2025 09:01:00 +0000
Files and hashes: 1: aSkETRaAPEJs87vkPB5vARFsUpQ.roa (hash: aCCeFkfXg4eaGy/UUrllTCVipmWIQ10CNhHiLobPblo=)
2: h0KwGsV7Y4PS9-ubvbwvPxeINTw.roa (hash: QnImr5OAriGOLs8DShZajEz7o3J5PVeEaUrLJ83dAtA=)
3: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: +rCHbjanNetsiGu8yJ95xzYoQ0J8ZEmPPjzBFT0Cf9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:3f:b4:7b:6d:9c:59:68:0e:2a:10:b3:07:b5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Oct 27 09:01:00 2025 GMT
Not After : Oct 28 09:01:00 2025 GMT
Subject: CN=8423ba536fbaa97ee4341050e34b29d6b0f9045b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c0:fb:a9:cb:4e:a9:e6:c7:82:3e:ca:01:c2:
60:2d:3e:38:82:94:1f:be:ab:66:6c:52:13:7e:28:
f6:15:22:a8:ce:37:99:b7:b1:e9:38:bc:7f:09:8f:
15:f1:8e:76:2f:b6:63:0f:4f:54:67:85:b7:57:56:
36:73:cd:ce:5f:92:41:d2:59:c7:4c:51:76:c0:86:
20:c7:b1:e5:01:50:93:c7:ac:92:6c:a9:b5:6c:6e:
91:5e:19:21:44:a4:d5:61:ab:71:b9:6e:37:9a:bd:
9d:59:d7:ba:c2:0f:d1:b5:27:67:2f:7b:85:27:6b:
b9:11:f5:8c:5b:1c:54:c9:06:97:26:b1:0c:25:c2:
97:76:33:c7:8a:1e:0d:88:2e:96:0a:5c:e8:ed:9b:
fc:6c:86:27:2a:16:96:86:f3:64:37:8a:c1:b3:8f:
39:38:44:f8:b6:c9:21:55:c4:79:34:6b:14:69:3e:
a2:f2:46:be:42:5d:7b:ea:5e:18:31:97:0f:5f:cb:
1c:ec:b3:d6:73:1b:12:98:f1:81:f1:d6:69:af:b3:
fa:cc:be:bb:15:5f:26:01:5b:e7:fa:32:6c:03:33:
85:2c:a7:af:32:31:6f:41:c6:39:bc:58:3e:e7:98:
cb:56:45:e2:a0:15:e5:25:60:f7:85:7b:40:7f:53:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:23:BA:53:6F:BA:A9:7E:E4:34:10:50:E3:4B:29:D6:B0:F9:04:5B
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:54:3c:ac:6d:aa:d9:ae:80:ae:24:bd:47:6e:db:95:01:bf:
2f:f0:77:54:42:94:6f:a7:9d:c3:ec:92:b3:0e:ac:8f:85:c5:
cd:e1:f9:8f:b3:03:a6:40:88:80:7d:55:76:7e:41:03:90:05:
30:ab:b1:3c:f0:7c:07:c8:e1:a2:06:7e:f8:4c:e8:80:0b:2f:
e7:5d:30:50:fd:6a:54:8b:a1:3e:4e:1f:77:93:7d:a7:b9:d4:
f5:a4:ee:e6:d3:07:cf:80:16:44:40:e9:03:da:67:8e:5a:47:
7a:f9:b8:85:76:b6:b0:8c:fe:74:dd:27:f3:82:be:cf:f2:75:
ec:c7:70:54:42:74:47:e5:73:4d:77:25:24:93:06:38:d4:21:
c0:fc:af:b3:4f:85:e9:97:2e:a9:1f:a0:f2:e6:a5:f6:42:b1:
58:b5:8b:5c:09:c6:50:4e:19:61:e9:90:41:04:9d:75:35:a1:
69:6f:fb:91:14:7c:f9:0c:fc:38:71:56:79:2b:60:af:e4:95:
51:21:bf:c6:ae:1c:40:26:ab:60:ab:00:2d:eb:94:cf:d9:91:
da:3c:9c:20:e6:ef:58:2a:98:a4:2c:ef:49:3a:bc:53:76:b6:
c2:29:a7:13:8a:31:9e:9c:70:79:a9:5e:44:fa:c3:6f:43:0a:
ef:67:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:05:15 2025 by rpki-client