
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File: K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier: r32bDoQf7/31pgjnbLF9hnQoeHB6Bo/Kc7J+VQxLo0c=
Subject key identifier: 03:69:35:E7:11:E2:96:52:4D:5A:DA:C3:E8:0E:5E:81:FB:F1:B8:A4
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 019A2365088751669D97D2CA786B8C58954D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 02:00:14 +0000
Manifest this update: Mon 27 Oct 2025 02:00:14 +0000
Manifest next update: Tue 28 Oct 2025 02:00:14 +0000
Files and hashes: 1: 1R6LxgC-MSsXC8XcNc55PUWrpnA.roa (hash: eOlgUjGh2Sx9zQdK2p1WKLcAGtB58ts+W3RrmuzkDow=)
2: 2-psKgjkSNUOWnZFMoAD6l3epRU.roa (hash: gFGUN3be0G1hR2YAWLqKrs2cwQ3z+R+vgxUYB8SwE90=)
3: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: 4gXrT0PGv9gBHiEKZmM6A3PP1MXcagT3LfUKvcDkwVI=)
4: gQebbEYT275J4Jd89tHKU2ac4sM.roa (hash: iKbGbenCLGdunx9L03flN4696vAcgVbczlqjT2YbIiI=)
5: otJ7nfoJ-zl16yzl1V2lDFiM0HA.roa (hash: ci4b1eT86BcKQNNV0LV6W2PZ/InXXcZnfo32SMed2tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:08:87:51:66:9d:97:d2:ca:78:6b:8c:58:95:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Oct 27 02:00:14 2025 GMT
Not After : Oct 28 02:00:14 2025 GMT
Subject: CN=036935e711e296524d5adac3e80e5e81fbf1b8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5b:fe:9e:63:6c:50:1a:a7:1e:74:ac:a2:d0:
1b:e0:4c:8a:76:32:62:31:af:14:49:dd:69:78:eb:
cd:47:1c:05:f3:81:17:da:82:48:c4:4f:4b:7a:ca:
6f:ac:e3:88:fa:d4:28:fb:3c:a9:0d:88:18:03:f8:
7d:02:17:b6:bb:b5:ac:c3:43:11:28:48:02:cf:c8:
7a:38:09:1b:55:5c:6d:67:8a:5c:6c:12:69:21:1c:
66:ea:2d:a9:44:91:c0:9b:87:3f:2d:bb:b9:bc:ff:
6b:97:d2:87:43:27:de:f7:36:0c:b5:7a:61:ba:df:
1b:53:de:c5:cd:4f:d1:50:43:98:32:c1:e7:59:53:
bb:fd:21:4a:a6:79:65:86:25:cb:9f:98:dd:3b:98:
71:e4:1d:75:ed:39:cd:93:8b:ff:b6:ca:4e:15:83:
b4:07:23:fd:26:f9:bf:6e:98:c2:d1:9a:61:81:e3:
45:0d:a3:63:2d:a5:b5:07:da:f8:7e:8e:45:88:71:
55:42:26:18:a6:74:f4:aa:88:5b:77:4a:32:46:09:
99:14:02:7b:14:c2:3b:2a:4a:5c:2d:3d:a3:4b:2f:
4b:0a:7a:8d:ad:d6:16:81:ce:47:41:b4:48:55:53:
04:a4:6c:df:89:fa:2f:18:36:15:15:6d:69:65:71:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:69:35:E7:11:E2:96:52:4D:5A:DA:C3:E8:0E:5E:81:FB:F1:B8:A4
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bc:47:4a:f7:b4:82:1b:b3:29:2a:80:bd:c5:09:74:ae:6c:
53:1b:d3:9b:ae:8c:90:51:fd:a3:43:83:41:ff:d6:5b:f8:cf:
f1:b1:95:e7:3d:5b:16:43:78:e0:04:c6:32:c9:5b:12:96:98:
6a:7d:1e:0d:b0:01:89:4a:eb:34:4f:ce:2f:15:76:b6:12:5d:
39:c1:59:8c:c9:41:d1:8b:08:f0:57:45:fa:11:34:81:e4:b8:
21:e6:ee:ed:ec:99:8b:15:a3:74:41:15:68:90:0a:78:db:8e:
ab:6f:0c:7c:c9:b9:2c:09:7f:06:56:e5:7c:06:62:f2:eb:bb:
69:97:96:4b:a0:df:28:d1:1e:55:60:1a:d2:99:41:d5:e6:2b:
06:78:7f:87:66:4b:73:08:8f:0f:fc:2a:1c:a6:ac:f0:33:77:
3e:53:80:05:b2:8c:58:ce:b8:84:22:a3:77:97:53:73:1b:3f:
39:90:93:41:c9:eb:64:38:ec:7b:7a:c8:63:d8:19:bc:6c:db:
ed:0b:ea:62:58:cc:d5:32:58:cc:93:8f:5b:68:24:77:ed:13:
b7:41:cb:51:52:ad:dc:50:90:a0:16:df:69:96:ff:78:91:c2:
9f:55:d8:72:f7:dd:ef:8d:08:b6:e9:3b:8c:cb:b0:ec:fe:8f:
c0:bf:0b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:29 2025 by rpki-client