Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: lC4iZimIaD7qIfVcMgPnhXJuerGjL+sE6EYc6x/+8OY=
Subject key identifier: C4:47:FA:D1:57:91:24:FD:D6:17:42:BB:79:31:89:0A:D9:DB:4C:D8
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 019A1D6300E2B218AF0FD5D180B4581B0F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 16F8
Signing time: Sat 25 Oct 2025 22:00:18 +0000
Manifest this update: Sat 25 Oct 2025 22:00:18 +0000
Manifest next update: Sun 26 Oct 2025 22:00:18 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: aNJO6607ER2r1XOGeDqlsbK9RFsz36x84f1YJXJCMTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:00:e2:b2:18:af:0f:d5:d1:80:b4:58:1b:0f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Oct 25 22:00:18 2025 GMT
Not After : Oct 26 22:00:18 2025 GMT
Subject: CN=c447fad1579124fdd61742bb7931890ad9db4cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:f9:28:c2:a0:e7:fc:d4:e6:b6:bd:fa:ec:
86:53:37:67:ab:90:67:e8:81:55:07:89:84:cf:33:
81:81:b1:0c:ff:c3:93:c6:2a:bf:30:c8:0d:9c:ee:
3c:f5:92:43:53:ca:09:7a:64:b9:4f:18:cb:c4:32:
ad:0b:57:85:02:16:36:83:4a:e8:74:a1:28:80:50:
a2:c8:0f:84:8e:c1:33:7f:67:a7:d5:37:e5:bc:b6:
26:99:95:3c:ac:78:9e:bd:07:ee:de:c7:7e:28:b6:
94:d8:8a:b5:48:90:84:de:5b:fc:82:75:6f:0b:1b:
93:97:5e:b6:62:26:48:8e:7b:66:e2:82:71:82:63:
49:21:b1:0e:f7:8c:ab:e4:ff:f5:87:3b:46:d2:76:
2b:72:cf:f9:a4:a6:93:56:5f:c7:61:b9:49:35:98:
ba:99:3b:c1:25:1b:83:e2:0e:b1:c3:df:55:ea:30:
a3:16:25:18:32:27:05:04:29:f5:40:65:b4:f7:e7:
7d:de:8a:51:0a:46:fc:6f:82:cc:71:01:e2:56:89:
c7:ef:c3:ea:c2:8a:cc:b0:bb:9e:b7:28:f5:cd:79:
5c:66:0a:c2:7f:a8:3e:c5:99:4a:5f:aa:ae:5b:b4:
52:15:a9:0b:d5:d9:8a:66:45:ae:08:cf:d0:57:25:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:47:FA:D1:57:91:24:FD:D6:17:42:BB:79:31:89:0A:D9:DB:4C:D8
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:99:a2:28:22:44:fa:4b:eb:11:a0:c8:f0:d6:94:fd:28:43:
0b:8a:cf:16:93:94:2d:8f:89:87:aa:8d:98:d0:45:6f:1c:23:
b3:36:6a:6d:97:cc:92:73:dc:51:3f:5e:1b:9f:d3:2a:d3:06:
49:9a:bf:32:be:cd:f5:a2:f5:60:b8:ff:ec:27:2c:69:b9:98:
08:9e:bd:a3:82:00:97:2f:ce:2c:02:5f:3e:6d:be:0d:1a:b4:
72:7c:a2:9c:6a:26:cf:32:6b:ce:43:d3:8b:28:9d:83:40:a0:
cb:b6:7d:f0:d6:a7:c1:2a:50:60:20:0f:00:c1:15:c4:ca:f3:
2d:5b:cb:bc:19:47:6b:e2:10:dd:22:99:e4:d7:2a:58:83:b0:
f2:73:60:f5:6e:4e:ee:8c:09:95:e7:26:e2:22:61:04:9a:a6:
06:77:1d:e5:dd:79:ca:ff:eb:cd:da:15:6d:ef:f6:99:50:65:
79:77:13:e5:85:c0:ae:00:9b:1b:be:a5:80:d6:46:c2:37:d7:
ad:d9:37:26:7c:c9:d3:66:fb:06:72:15:da:8b:6c:db:01:c2:
6d:ab:f0:44:09:56:90:08:eb:fa:eb:5e:76:87:2c:bd:43:5c:
62:de:7a:ba:ad:b3:91:b7:b7:12:b5:f7:61:df:c9:1d:33:25:
51:f4:30:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:35:57 2025 by rpki-client