Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: K6jBdYflLLNZf1DYqdsr9/mmRbCUWvkqUCoZoVnI/ZM=
Subject key identifier: 60:4D:A6:5F:2B:4B:4A:9D:09:EE:17:C4:32:80:8B:6A:5D:0C:A1:F7
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019A21E4E738893A097B0D2FCF70413BFF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 19:00:40 +0000
Manifest this update: Sun 26 Oct 2025 19:00:40 +0000
Manifest next update: Mon 27 Oct 2025 19:00:40 +0000
Files and hashes: 1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: egBgiuVYInzJ/xYlaVu8cgpDujDWMkiY7dvxbfThybI=)
3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:e7:38:89:3a:09:7b:0d:2f:cf:70:41:3b:ff:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Oct 26 19:00:40 2025 GMT
Not After : Oct 27 19:00:40 2025 GMT
Subject: CN=604da65f2b4b4a9d09ee17c432808b6a5d0ca1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:98:ca:b1:c6:20:b7:4f:9b:de:e8:8a:d4:
72:d4:d7:3e:be:42:08:ec:4f:86:68:8b:4f:18:5e:
db:0b:36:3d:f5:55:a6:a4:29:20:38:ab:5b:77:cb:
df:2a:a2:47:26:43:30:3f:23:06:32:21:05:d9:c9:
19:bf:86:67:a7:6b:89:cc:05:fd:5c:67:48:8c:f7:
90:d7:8a:17:15:ba:04:08:70:c6:cf:ae:20:3e:32:
df:65:b9:ba:a9:d4:33:d5:2e:6c:d4:11:af:ed:25:
8b:de:32:f7:ba:30:dd:7a:b0:ed:0b:4b:9c:f8:27:
14:d3:d0:e2:66:7d:c7:89:9f:ee:53:fb:21:2f:ca:
01:b3:1d:cd:a4:d6:9d:af:1a:c3:91:a7:fb:b6:a7:
b8:55:2a:a5:ac:b4:ed:30:06:32:fb:24:14:ef:4b:
10:8a:5b:b5:65:16:48:ad:97:9b:d7:e5:cf:a5:bf:
bf:44:d8:a9:d1:0d:30:f0:56:72:56:32:dd:3e:eb:
87:4e:f7:f8:fa:0a:fb:4e:a8:f4:82:72:1f:aa:5c:
5a:56:e9:27:a6:06:84:dc:ac:bd:04:dd:54:c4:1e:
78:43:73:42:6b:89:7b:93:46:50:71:f5:66:4a:10:
e0:01:ad:21:9f:32:97:c7:f7:a3:13:90:eb:76:34:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4D:A6:5F:2B:4B:4A:9D:09:EE:17:C4:32:80:8B:6A:5D:0C:A1:F7
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e6:80:ab:fc:da:02:1f:38:87:69:5a:75:a5:06:2c:d7:4d:
37:30:91:95:42:c6:19:f9:d1:83:0d:52:6c:f4:d4:fe:ce:ed:
fa:76:d9:eb:ae:c7:d4:42:60:b4:b3:f2:1c:b3:4e:c8:6c:5a:
a9:b9:6a:9a:78:0b:26:72:08:e4:8d:df:bf:00:1c:5b:1e:e5:
83:d5:35:9d:25:cc:eb:a5:29:eb:90:40:1c:25:70:17:5e:40:
88:d8:82:74:fa:d2:63:8d:9e:fe:1a:21:1a:ae:f5:b2:f0:dd:
2b:ce:91:4e:51:a6:bd:9c:d8:17:d3:d8:38:f0:1c:6a:b2:f5:
b5:2b:11:57:55:cb:38:fd:c7:bc:d6:b2:fc:76:0c:e9:df:c8:
67:a0:d6:ac:74:62:53:61:d4:cf:a3:0a:cc:1e:56:84:bd:1a:
1e:9d:0b:2c:c7:96:d2:f6:81:cd:9a:b9:7c:50:ee:92:3c:57:
7d:49:e9:07:91:5d:cf:91:16:1c:73:d1:4d:d7:42:26:9a:70:
4a:44:12:bf:1b:dd:eb:fa:5e:90:7e:fb:07:d2:5d:7d:70:9a:
27:b4:64:b6:93:d5:c2:0c:f9:57:47:3e:4b:56:a1:d7:30:2e:
bc:41:d8:73:54:68:55:5b:a3:5c:77:b4:07:56:a3:b8:48:cf:
67:31:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:39:23 2025 by rpki-client