Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: sE7YqWhPzkDbjzsyyutXAT48//0MWCSYQnq7Ew9N5kE=
Subject key identifier: 2F:87:BD:95:0A:E5:D3:3B:F8:C1:47:F3:4F:A3:72:C2:02:A7:9D:BF
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 019A0B5DD497ACFBDEFF166B6919D44B6D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 16ED
Signing time: Wed 22 Oct 2025 10:01:29 +0000
Manifest this update: Wed 22 Oct 2025 10:01:29 +0000
Manifest next update: Thu 23 Oct 2025 10:01:29 +0000
Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: bB4ddFfqyG7lX0hC0wsoFjwE29nk74izUDMpKhUpFv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:d4:97:ac:fb:de:ff:16:6b:69:19:d4:4b:6d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Oct 22 10:01:29 2025 GMT
Not After : Oct 23 10:01:29 2025 GMT
Subject: CN=2f87bd950ae5d33bf8c147f34fa372c202a79dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:49:f1:27:58:b9:33:59:df:0d:b0:96:b3:
f1:4f:07:4c:81:d5:9e:68:5e:ff:7c:e4:a2:07:aa:
8a:0b:ba:03:a5:b6:17:ec:90:8f:18:eb:f7:d0:f4:
99:74:53:59:55:89:a0:96:e9:df:6b:46:2a:28:94:
7e:25:60:1e:f6:9c:0f:5a:0f:62:06:5c:0d:50:0b:
aa:2d:c3:12:45:0b:ef:4a:ae:6a:0a:f1:bc:5d:a5:
3d:6d:97:db:7d:d0:b9:a7:5c:47:01:e6:0c:e8:d7:
e0:e7:06:89:77:83:22:44:24:06:cd:43:b7:c1:67:
8e:98:7f:a7:fa:98:8b:88:e9:e4:34:24:4a:a8:b4:
6b:79:00:aa:26:dd:a6:cb:3d:26:02:63:7d:7c:af:
1a:a3:15:a6:b0:9c:b6:29:16:9c:55:78:79:52:c4:
51:be:19:38:03:c5:2b:64:5c:33:e6:e4:6e:3f:78:
ae:f2:d3:8d:1c:15:e6:e2:3e:24:c9:38:fd:c2:f2:
24:1c:72:56:2d:91:64:6e:45:f7:2b:72:e9:68:f9:
df:57:a8:b3:4e:ed:3a:31:41:16:f8:05:ef:e9:98:
3f:82:9b:19:54:dc:7d:94:0e:eb:1c:3e:51:20:c1:
e2:d1:18:16:55:fa:37:45:92:14:7f:73:81:06:34:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:87:BD:95:0A:E5:D3:3B:F8:C1:47:F3:4F:A3:72:C2:02:A7:9D:BF
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e5:21:e4:d8:2f:24:ed:9c:7c:6e:81:73:0b:83:01:c6:29:
91:bc:75:26:b0:6b:7f:08:64:2e:57:4f:b2:21:c4:11:a8:13:
88:fd:34:c8:d2:e5:31:56:33:5d:ea:02:e2:8d:21:ce:47:00:
03:79:ea:e6:5e:35:cb:a7:d3:f9:a2:2f:32:90:cb:02:01:52:
1d:b0:0b:2f:70:a3:1e:b9:48:2c:92:98:30:b3:f2:7c:9b:fa:
c9:a9:ec:07:73:e9:1a:e0:78:57:e7:ab:46:c5:d1:b9:51:17:
02:2f:5c:50:9d:28:31:a3:5d:f2:87:19:46:98:66:92:f3:0d:
81:66:8a:b6:1f:b7:76:ba:53:98:82:b1:b7:af:bb:15:d0:01:
05:3e:a6:dd:a9:db:d3:7d:e8:37:41:77:31:d5:e4:f1:1f:10:
61:38:da:77:52:38:85:f3:96:d8:07:08:9c:62:2f:87:5a:df:
4a:51:55:a6:67:a3:5a:da:68:f3:d9:71:27:2b:4a:56:20:1e:
56:9d:68:bd:f1:b6:b1:80:dd:d3:80:81:07:3b:86:36:8c:6e:
5c:37:78:51:2c:cf:5a:c5:cb:c4:6e:21:32:6f:45:bd:97:c4:
28:05:a4:50:70:a6:2f:99:cb:42:36:a8:23:f5:47:c7:11:af:
91:98:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:18:42 2025 by rpki-client