Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: v5+sXGY5NOXX/JWSV7FYQ5ULNDUx/fQOPN2VmTYJGJ0=
Subject key identifier: 12:EE:8D:B1:AB:72:8D:11:7F:A3:2C:73:B4:A4:EE:87:BB:5B:54:AD
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 019A228AB6199456D41D7A19D0C330CD985D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 22:01:47 +0000
Manifest this update: Sun 26 Oct 2025 22:01:47 +0000
Manifest next update: Mon 27 Oct 2025 22:01:47 +0000
Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=)
2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: hoGivLo+xbE/tQ6Ajfgm35CNR05DBu5YzAEl+MMGgXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:b6:19:94:56:d4:1d:7a:19:d0:c3:30:cd:98:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Oct 26 22:01:47 2025 GMT
Not After : Oct 27 22:01:47 2025 GMT
Subject: CN=12ee8db1ab728d117fa32c73b4a4ee87bb5b54ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:9e:cb:db:2c:ac:dd:7b:8f:7f:ac:d5:b3:
72:3f:e3:6e:3b:ff:01:a0:df:bc:23:9a:61:47:f8:
1d:75:13:0a:e9:3d:79:30:79:46:ea:88:5c:3f:67:
85:61:17:ce:23:b0:89:19:98:9c:2e:aa:5c:5e:d1:
54:4c:4b:fc:1f:8e:b8:4e:98:4d:ee:47:78:7a:81:
1d:f7:db:7f:76:8d:b8:ef:96:4c:38:95:6d:56:d8:
eb:13:99:4b:cd:1f:c3:2b:d1:9e:10:69:10:38:92:
01:7e:92:d9:20:e2:71:a1:ff:ba:bb:a7:25:22:57:
2b:4b:09:a9:c5:9e:0b:42:60:63:1f:93:cd:92:8b:
ec:30:a5:97:e9:ed:75:f1:96:90:ba:e4:08:6b:11:
a3:97:c5:ae:a2:23:aa:f2:c0:5a:f2:e7:f2:21:7a:
f0:fb:17:51:74:54:48:93:f7:37:88:49:4d:d4:08:
b1:72:9e:75:55:db:c5:6e:59:0f:1f:1d:46:a4:9d:
60:74:a5:f5:44:a8:2d:8b:ab:ec:a2:55:2b:31:7a:
df:15:67:95:79:cf:ec:8b:74:c6:37:e1:f9:42:86:
81:9f:5f:b5:12:6c:5c:5f:68:7e:65:cb:3b:46:0d:
8b:a4:24:5f:1c:d6:11:36:ce:23:39:e4:15:14:66:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EE:8D:B1:AB:72:8D:11:7F:A3:2C:73:B4:A4:EE:87:BB:5B:54:AD
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:91:8a:be:92:e8:3b:55:9e:cd:19:ce:b4:ea:10:b8:37:76:
ec:48:83:75:e0:45:0b:70:b1:70:58:d8:ee:6d:fd:96:da:7a:
91:8e:3c:e8:ad:ff:05:e8:20:6f:f8:f3:14:73:f4:84:99:21:
81:ba:b5:1c:d0:1e:55:39:35:73:8b:d5:47:dd:e2:b4:58:a6:
03:bf:94:b4:16:e3:11:da:3e:6f:f8:67:16:6e:8f:8d:ff:1c:
85:df:ed:56:51:c1:f6:74:d4:d0:3c:65:06:39:5e:6d:04:b6:
d4:3d:a9:42:6a:09:68:f2:25:cb:5f:af:5b:70:c5:37:48:52:
6a:1b:61:23:5c:9e:96:f7:55:8d:6f:e8:8f:28:53:6a:77:51:
42:c4:98:84:82:2e:44:a3:4f:96:88:bc:97:0a:a1:17:27:37:
6d:2c:de:54:76:be:d2:3d:02:1f:4d:06:00:c2:bd:7e:48:e1:
d2:34:d4:2a:8f:bf:84:a9:ff:3c:49:a2:84:e8:3a:bd:71:23:
2b:df:09:78:ab:d3:a0:23:fe:0d:81:0b:10:ea:e5:11:41:ed:
50:33:4b:d0:70:43:aa:25:1d:76:22:fa:9c:f4:d8:c3:32:fc:
60:ea:ce:ea:6b:5a:82:f9:da:bf:b7:fc:ac:5f:b8:2b:17:31:
ef:5e:ab:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:43:01 2025 by rpki-client