Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: foEr+Yw0xloYsn4Hdu+H/qWPLSu1tCY6VAd3wcu5uh8=
Subject key identifier: 2E:EF:A2:DF:26:09:B2:78:15:50:07:F7:FC:2C:07:49:DA:FC:04:1A
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019A1EAD206A84734804CA0A286C5B18FD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 04:00:53 +0000
Manifest this update: Sun 26 Oct 2025 04:00:53 +0000
Manifest next update: Mon 27 Oct 2025 04:00:53 +0000
Files and hashes: 1: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=)
2: EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa (hash: sPo+QlStQLftRhFxrU43bCn4hciRtjvqBLkRQ+qUaq4=)
3: FCOMXnULUVL5uVnX_zvOHcdHJYc.roa (hash: 4uixJ9jDs2SwFvLmk4CIP+prYWqzHVN0aIW9iOFGL0s=)
4: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: nb73VSaL3DrN7cWbkk1G84uj+CzpyCgJzkhhqNF2taE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:20:6a:84:73:48:04:ca:0a:28:6c:5b:18:fd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Oct 26 04:00:53 2025 GMT
Not After : Oct 27 04:00:53 2025 GMT
Subject: CN=2eefa2df2609b278155007f7fc2c0749dafc041a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:09:d4:62:20:c4:29:51:ff:03:f7:6a:c7:
ce:0e:f8:2e:26:ca:2b:83:a0:95:da:25:83:8b:05:
2c:01:32:04:ef:df:5c:5b:85:19:f1:ce:68:0f:b8:
f0:4f:31:17:5f:7c:e6:7e:ad:11:2f:9c:bb:c7:ce:
77:34:9f:86:cd:83:70:76:2c:2b:b9:f5:38:1f:9e:
90:84:a0:38:28:ac:69:08:8c:7e:d8:4e:d4:ca:ec:
d2:55:ea:a1:4d:1a:36:34:9d:94:de:e2:30:92:e0:
8a:85:8d:0a:2a:dc:ab:e4:f9:8d:55:12:c8:cb:fa:
c4:d3:ea:ed:0b:61:12:af:17:02:f6:05:fd:56:f3:
53:22:67:f9:63:e3:5e:0d:f5:8c:b1:3f:bc:dc:8d:
8e:61:5f:0c:0b:6d:c5:ac:22:9e:2c:0d:e2:05:9d:
d9:63:8e:d2:fa:a2:82:b9:88:43:ea:d9:81:75:d1:
78:40:1a:75:a3:e6:3d:e1:4d:5b:05:40:a0:4d:ab:
89:5c:0c:53:76:1c:c1:39:4a:2f:74:18:ea:fb:26:
30:d3:f0:d8:b1:5e:2d:74:10:c5:fc:4d:0f:8d:85:
e5:2f:15:07:06:af:d4:2a:b3:3c:b0:68:8f:98:de:
b4:2c:5b:04:fb:cc:d8:71:1f:6a:2f:f3:d9:a1:da:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EF:A2:DF:26:09:B2:78:15:50:07:F7:FC:2C:07:49:DA:FC:04:1A
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:66:07:e8:12:ea:a4:87:90:12:a1:0f:9b:df:92:d3:4f:2d:
c0:a6:d1:d5:8b:56:b2:6b:8d:45:da:29:3f:37:31:fa:82:1d:
e9:fe:be:bd:f0:b0:59:40:12:40:a1:e3:8e:12:9b:90:9a:c7:
40:08:2b:db:1e:04:d9:68:0f:ea:72:7e:92:e1:23:7e:a3:ab:
6d:b8:4f:88:5d:c7:eb:e0:4e:73:d3:05:13:76:41:d1:93:40:
59:e0:b5:09:3c:80:d5:5b:3e:79:09:29:73:37:cb:f9:25:54:
e8:1a:56:52:15:36:f3:3c:5c:29:52:2e:8e:eb:00:95:c9:48:
9f:3a:ba:c7:67:86:79:04:59:22:c5:ae:bd:0e:7b:1c:3e:8f:
93:ec:c2:49:1b:11:27:e6:00:62:4a:14:74:2f:32:3c:08:ed:
53:62:f8:20:d0:5b:69:39:3d:a1:36:7c:15:5f:76:dc:8a:42:
06:16:dd:20:41:67:9d:70:e2:29:fe:81:3b:fd:42:dd:bb:a2:
c3:1e:f7:2a:37:50:f2:8d:f1:64:be:26:b3:35:f5:cb:1c:03:
26:f9:ed:ae:bb:87:bc:79:da:bf:a1:37:1e:aa:74:dd:0d:c0:
98:93:a5:11:20:5d:45:a3:46:26:0a:6f:75:b5:5a:b7:0f:80:
13:1c:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:22:38 2025 by rpki-client