Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier: Gly1RcgxFBLRR+jYXiOi8P/9+VxWS48Yqv4YXO0xWCM=
Subject key identifier: 8B:03:D1:F8:9F:0D:7E:2A:3B:06:C1:3C:18:9E:C4:A0:D7:33:90:82
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 019A1CBE78435AE9FF86093D8720114A3447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 19:00:35 +0000
Manifest this update: Sat 25 Oct 2025 19:00:35 +0000
Manifest next update: Sun 26 Oct 2025 19:00:35 +0000
Files and hashes: 1: d_f-2basXF4ecUjEUuL7_QGvdV8.roa (hash: 3qi4PJf12FWilDaOg+5R4nsdnVGnK/XQkSLQfanFNGo=)
2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: m8A+Wpa8GjwXoobJOBdQBIYxR0WS5a8pIP5W5pDWrtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:78:43:5a:e9:ff:86:09:3d:87:20:11:4a:34:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Oct 25 19:00:35 2025 GMT
Not After : Oct 26 19:00:35 2025 GMT
Subject: CN=8b03d1f89f0d7e2a3b06c13c189ec4a0d7339082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b4:2e:e3:77:2f:d1:f4:21:9d:88:bd:a9:8c:
42:87:d3:65:92:c1:d1:44:59:cc:8f:c3:0e:dd:ba:
63:72:ef:2a:a9:c3:f9:af:26:fe:0a:e8:53:3e:ed:
55:57:40:be:f0:93:88:00:23:62:b7:82:b4:f2:d4:
12:3d:30:34:c0:79:d6:cc:f5:27:46:e9:3e:27:38:
0b:34:d6:b2:fd:c5:ba:43:c0:9a:92:69:dc:bd:20:
98:25:39:95:b8:ff:26:33:d1:6e:71:77:8e:af:0a:
c0:9f:4e:72:de:7b:7b:8e:c0:e0:95:3a:75:11:91:
5f:d9:9b:80:9b:c7:a9:c9:50:ae:b7:69:3a:3d:35:
5c:77:c3:20:e7:60:f8:d1:26:36:29:cc:88:f5:48:
8e:91:bc:a9:9f:5e:88:87:50:e5:a9:50:c3:48:f2:
47:54:a9:c4:23:2f:a7:d6:71:8d:8a:3c:3e:35:34:
f7:07:d2:8f:0f:e4:17:13:70:f5:bf:4a:f0:33:f8:
41:ed:02:1b:c9:5a:74:fe:b8:db:88:11:0b:0f:24:
72:c4:72:01:c4:dc:50:df:ed:d6:73:82:3a:db:3b:
02:1a:49:63:e3:3e:56:9e:df:5a:f8:52:9b:17:2a:
67:f6:f6:19:ac:76:7b:95:a3:41:86:25:1c:bc:1d:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:03:D1:F8:9F:0D:7E:2A:3B:06:C1:3C:18:9E:C4:A0:D7:33:90:82
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b2:29:d3:92:6b:34:91:b4:9c:f7:e8:83:e4:6a:1c:db:b0:
28:f2:0f:e0:48:40:2c:ac:c0:ef:91:76:42:6d:b1:6d:d2:ba:
b0:c3:5d:a3:59:e5:84:3f:d9:a8:79:11:fb:2e:de:1d:51:9c:
e1:e7:30:d4:a3:85:a0:f7:4d:dd:cb:a1:fa:59:7a:5d:d6:a7:
03:4a:bc:7a:2e:d1:e9:b4:39:a6:df:7e:4b:6d:ae:a8:44:c9:
17:50:e1:6e:7c:4e:0e:22:2d:ab:b9:12:7b:63:71:8f:9c:93:
43:f7:22:13:02:d0:7f:6a:34:81:13:ae:a0:18:c3:55:48:8a:
f3:d3:bc:f3:60:8b:ce:ae:ae:ad:5c:a9:48:36:d5:f7:1a:03:
d9:f9:a7:65:79:31:69:e4:2f:2b:68:1e:a3:a5:5b:b5:22:99:
6b:c2:17:d6:e9:a4:63:0b:cf:bc:89:87:10:5b:5e:c0:6d:28:
63:e9:6f:95:8d:ae:28:66:d6:ce:c1:a8:8f:f2:23:de:7b:e1:
a7:22:e6:84:29:33:8c:be:18:6f:37:47:6d:5b:d9:d0:a5:6d:
bb:42:2b:15:68:ee:14:ad:05:68:77:13:5a:4e:c2:f4:b8:76:
c3:5f:9e:41:2a:37:a0:0f:7b:aa:15:3f:c3:7d:81:5b:68:6b:
e6:a1:27:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:56:09 2025 by rpki-client