Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: 4EztZL5OBRlHVHieEGbFbop/0y8ye9Q6ATRcab7WTgQ=
Subject key identifier: D0:A8:05:AF:04:0D:5C:7D:14:4D:B5:FA:AB:20:3D:60:05:B2:B1:3E
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 019A2EFBA46BC75CE731F9DACC9312117662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 08:00:34 +0000
Manifest this update: Wed 29 Oct 2025 08:00:34 +0000
Manifest next update: Thu 30 Oct 2025 08:00:34 +0000
Files and hashes: 1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: 0mYc61fQT+3Klju9F+7VCMTeQKnmA4AIWBtGil3v+ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:fb:a4:6b:c7:5c:e7:31:f9:da:cc:93:12:11:76:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Oct 29 08:00:34 2025 GMT
Not After : Oct 30 08:00:34 2025 GMT
Subject: CN=d0a805af040d5c7d144db5faab203d6005b2b13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:b0:f1:18:a2:d3:4c:f6:85:86:63:64:6f:
27:5a:9a:16:bd:ff:63:8a:2e:92:42:1f:6f:d0:36:
47:42:93:fb:05:19:e0:bd:0e:5c:50:86:af:45:40:
6e:02:24:29:89:3e:8d:0c:6b:d3:65:5a:15:43:4b:
49:69:b7:8f:29:d5:c4:3e:e8:01:31:2f:8e:fe:e1:
d5:ce:34:a7:3e:b8:96:29:88:da:d4:a7:6c:48:d6:
9c:87:ae:fa:c9:b3:07:83:17:68:44:5e:87:7c:57:
d4:92:b3:a2:a5:0d:bd:38:47:1e:42:73:08:96:93:
eb:b5:93:2f:07:a9:68:ab:8f:f5:07:28:2d:a1:fe:
c6:42:e3:6e:e9:21:e2:cf:f1:6b:21:99:3a:58:a5:
61:0b:29:05:ae:d8:73:e2:f1:cc:fb:8a:bd:3a:e1:
8a:6e:8d:9f:4d:e8:99:60:e7:1b:a3:21:59:5a:10:
b9:a4:34:f1:96:3f:b3:6e:85:28:c9:67:9b:5d:b0:
50:5a:81:3c:e2:fd:7f:04:67:d8:dd:85:3f:c9:0f:
87:56:d9:9e:b1:ac:21:09:5e:e9:3f:35:36:b5:b4:
24:75:d7:a7:b5:16:a8:e9:0d:63:82:12:5d:33:66:
10:9d:e7:a0:e4:58:04:8d:89:58:98:16:66:50:8a:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A8:05:AF:04:0D:5C:7D:14:4D:B5:FA:AB:20:3D:60:05:B2:B1:3E
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bf:b7:e6:4f:16:05:8a:b2:09:d0:99:b0:44:b7:0d:54:5d:
03:07:b0:a5:cb:8c:c8:ab:81:40:2e:b8:07:b4:5b:e8:52:f8:
e5:5d:5d:2b:ee:c0:70:fd:62:48:63:4e:de:f1:41:7e:db:a8:
4a:55:49:06:33:a0:1f:07:c6:2c:ed:e2:22:6b:ce:c2:75:d7:
ea:80:34:0d:93:ed:7e:b3:55:5a:a7:9d:25:16:10:b5:87:64:
3a:0b:57:c7:d0:2c:2b:e6:72:fb:c1:22:df:6b:4f:c4:15:79:
73:4b:73:05:49:72:5c:30:ef:1a:2f:01:69:0d:00:a8:3e:0e:
65:fd:a2:21:18:e2:4a:05:8e:5a:36:2c:62:d1:56:12:ab:ef:
37:c0:3c:40:ba:a0:cf:51:a0:c1:ab:99:69:20:86:67:cb:1d:
b5:a8:ce:cc:eb:69:ca:4a:39:fa:77:59:45:68:31:b1:b8:14:
29:88:00:97:3b:2a:d5:95:76:de:ea:10:92:83:a5:a4:57:31:
69:fd:bb:17:43:17:15:3c:75:7a:b8:6a:8e:66:27:40:25:da:
ab:ac:22:8d:c5:ea:b2:f6:81:6b:e2:53:98:18:d0:4a:cc:5f:
df:67:45:14:84:16:b6:24:74:70:64:f3:dd:ad:a8:c1:54:bc:
ab:e3:17:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 10:17:01 2025 by rpki-client