Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier: CZFDwucDrVKhXM41SLT0W1neGUmblxsKLGRRAWEZLFw=
Subject key identifier: 35:B4:9F:00:C4:5F:F8:C1:27:B1:89:74:0C:F7:BE:86:46:B0:5B:C5
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 019A22F7C66BCC25E67DC94B9F1DF5936133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 00:00:54 +0000
Manifest this update: Mon 27 Oct 2025 00:00:54 +0000
Manifest next update: Tue 28 Oct 2025 00:00:54 +0000
Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=)
2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: I0fhVntlqtCT6ImUEX+GDYzSXpyICHTOJDuQYatEvsc=)
3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=)
4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:c6:6b:cc:25:e6:7d:c9:4b:9f:1d:f5:93:61:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Oct 27 00:00:54 2025 GMT
Not After : Oct 28 00:00:54 2025 GMT
Subject: CN=35b49f00c45ff8c127b189740cf7be8646b05bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:42:ab:96:35:a2:b1:92:f8:06:a2:4e:63:
42:8a:5f:aa:26:50:99:df:17:be:53:1b:5a:1e:56:
60:60:d8:11:21:99:2a:47:5b:09:e7:41:76:50:59:
cb:96:db:fc:41:ad:45:f6:b3:1e:2b:d5:1c:07:ce:
af:54:be:fb:41:2a:8a:cd:7a:3b:ab:ab:e1:97:2b:
70:90:ff:8b:96:b9:c7:8b:7e:1b:31:78:7d:4a:59:
ed:da:de:e0:e3:3a:c6:44:d9:d5:25:c2:b0:d0:fb:
7d:cb:76:73:c9:dc:f4:e8:72:78:56:1d:24:3d:3c:
2d:1c:c0:17:62:d6:ca:bb:80:95:ea:85:f4:57:f3:
5e:18:06:2d:0f:af:e1:ca:0f:46:88:e3:a4:4a:1d:
3c:da:cd:cd:85:d0:08:aa:67:69:a7:ef:d9:76:85:
8c:63:85:1b:cc:4c:a6:f0:38:b9:df:54:ba:91:8a:
ec:38:0c:a1:38:62:e7:cd:11:ac:8b:71:95:f5:26:
4d:79:63:f4:5b:cd:f8:c3:ed:04:25:0d:10:73:2c:
4c:ca:d5:da:aa:79:20:45:cd:0d:71:87:d9:3a:c8:
e6:5e:53:cd:32:8d:d9:80:ab:09:f1:f1:30:15:fd:
50:a9:91:ac:b9:10:7a:fe:5b:3b:68:c0:4c:d3:0d:
d5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:9F:00:C4:5F:F8:C1:27:B1:89:74:0C:F7:BE:86:46:B0:5B:C5
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:19:96:4e:63:af:9a:34:8f:d0:f7:91:5b:d4:10:1f:6f:2d:
02:2e:ae:57:23:8b:a8:d4:7f:b1:c7:98:a0:9a:bf:fe:85:c1:
5d:88:fc:5b:d5:74:00:34:bc:83:1b:05:fc:52:db:4f:1f:ee:
73:37:e8:5a:fc:41:d1:91:02:e7:ad:eb:c3:ea:c0:8d:2c:d1:
09:fc:e2:53:c2:63:23:ff:44:aa:6c:4a:75:72:59:77:85:27:
83:f5:5e:e3:1d:df:41:21:e3:f2:b7:2c:de:4d:72:1c:45:22:
d3:46:67:16:a7:08:da:2f:7d:15:45:a7:35:af:cf:4c:b5:c5:
56:09:83:c9:51:1a:2f:c3:21:80:df:3a:28:d4:cc:92:95:60:
09:44:80:1a:55:33:ba:af:40:94:f5:78:b6:59:22:54:7a:38:
b3:71:d7:b8:e6:0c:1d:84:9b:80:5d:11:73:96:10:26:4c:97:
d5:25:8b:ae:37:26:f4:37:04:69:47:73:68:d0:59:81:3a:46:
fa:7a:9c:cd:c9:a3:74:6c:ba:f0:53:90:dd:3b:18:8c:76:cd:
71:0c:ce:a5:d0:25:ba:73:73:e5:26:be:c7:2b:fe:02:4e:4c:
f0:63:da:62:f2:8b:4a:56:3b:1b:f1:dd:ed:c3:9c:5c:e6:bc:
eb:6c:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:52:09 2025 by rpki-client