Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier: VUjYfZCq2BF92s3sHsXQtAc5Ltc7syjWCkadhD7vahQ=
Subject key identifier: FF:13:B2:0C:36:24:D3:42:BC:5C:7C:93:86:AE:9E:92:B1:FC:80:BC
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial: 019A221B4AFAEF983E9D9B40AD2EB80FFA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number: 0DD6
Signing time: Sun 26 Oct 2025 20:00:05 +0000
Manifest this update: Sun 26 Oct 2025 20:00:05 +0000
Manifest next update: Mon 27 Oct 2025 20:00:05 +0000
Files and hashes: 1: ilnYefv9qH3PNjv85ldcxCld-ls.roa (hash: SaAltYqG0WS/0wCUjq7LbhKFvPJZWUqyuxA3IK3kA+I=)
2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: 9UyeutfapjrntQsqZ7lp9zC4HLWfekOWmZgd4Ja5WIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:4a:fa:ef:98:3e:9d:9b:40:ad:2e:b8:0f:fa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Validity
Not Before: Oct 26 20:00:05 2025 GMT
Not After : Oct 27 20:00:05 2025 GMT
Subject: CN=ff13b20c3624d342bc5c7c9386ae9e92b1fc80bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:60:77:96:7f:b1:b1:58:47:97:88:15:3f:
61:55:19:cb:cf:e4:e1:db:c1:f1:f7:27:4b:a9:e1:
ea:1f:7e:25:41:b7:82:5a:a4:b8:6d:0f:b6:64:62:
c9:f8:4d:65:aa:b8:41:2f:81:61:83:9d:11:24:da:
f3:33:80:f1:5c:61:38:ee:d6:15:bf:71:f7:85:f5:
d5:7e:25:39:ac:61:db:19:4c:8d:3c:b4:19:3e:2b:
10:45:f1:b5:14:fb:d7:99:55:05:1d:38:86:74:8e:
5a:d0:ac:c8:b6:53:b7:f1:ee:be:84:e5:f7:f0:a1:
b1:4f:9d:dc:9e:78:75:43:68:fc:5b:93:b0:fe:ce:
91:34:13:04:c4:b2:ec:a7:de:6f:ec:1d:c7:15:09:
f0:f3:c8:a6:c6:ba:f2:d0:af:83:59:bf:24:55:b3:
c6:2c:a6:dd:d3:3e:63:6b:d5:6a:e3:58:f5:4a:7a:
fb:c7:b4:11:78:7a:c9:4f:19:70:25:61:de:9b:90:
36:c1:49:c7:06:9c:6b:c0:68:ac:19:b8:36:04:08:
65:0c:84:bd:38:7e:eb:72:92:ca:65:28:dc:4b:49:
be:dd:92:ed:d1:41:08:07:3a:42:6f:1f:1c:ba:d2:
e1:1f:79:3d:2e:a6:d3:45:77:9b:d3:71:71:c3:eb:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:13:B2:0C:36:24:D3:42:BC:5C:7C:93:86:AE:9E:92:B1:FC:80:BC
X509v3 Authority Key Identifier:
keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:02:0c:fb:24:3a:ee:ce:7d:6f:89:91:5b:6d:84:17:bd:54:
ab:4a:f9:25:e1:c0:65:e9:20:ed:c7:aa:90:7b:c5:ae:0f:a1:
f6:f9:94:9b:3f:92:4a:c5:a8:51:e9:c3:81:97:55:a9:9d:68:
ac:ae:8b:2b:02:30:34:3e:52:c2:d1:cb:0c:6d:23:46:bd:f7:
b1:5b:2d:56:0d:46:a5:66:e6:f2:81:78:35:66:7f:ae:21:3f:
44:8c:27:9a:8d:34:d4:49:be:67:29:2e:6a:d9:c6:fc:a9:4f:
d7:52:b2:8b:62:84:8c:2d:2a:15:f9:18:c5:ac:8f:c1:53:63:
c1:19:47:06:3c:98:a7:98:67:ab:e9:a3:49:a1:75:6b:04:31:
d0:03:b2:3c:87:ef:ea:94:33:4d:f3:3a:86:c1:f7:39:d7:5e:
a7:d7:5c:70:bc:b5:e0:14:00:4c:50:f3:0f:e9:49:44:61:9b:
1c:7f:e5:90:fb:38:ae:6f:16:59:16:63:e8:f5:2d:c6:91:7c:
e8:f8:9a:b5:b7:d1:31:5b:d0:f0:ce:fc:a4:cc:77:6c:bb:c8:
9b:17:d8:ab:99:a7:dd:35:f8:c4:80:b4:99:51:ea:74:4c:10:
38:f9:9b:87:00:6e:9c:dd:ff:c5:4e:eb:f5:62:67:df:8b:a7:
ca:f1:40:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:41 2025 by rpki-client