Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
File: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json)
Hash identifier: B95ibWMYKRqcBMXyGbh+kzaB6QLz7WUa3dgane+P7M4=
Subject key identifier: 7F:6E:44:8B:F6:24:23:BB:3D:4A:CC:02:16:7B:53:49:82:A2:9B:52
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial: 019A14CD80EB8D406EBA79CAD1FB3912E6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
Manifest number: 045B
Signing time: Fri 24 Oct 2025 06:00:03 +0000
Manifest this update: Fri 24 Oct 2025 06:00:03 +0000
Manifest next update: Sat 25 Oct 2025 06:00:03 +0000
Files and hashes: 1: 6w2zju3MQesL2h0kBvZh3fnqTpk.roa (hash: qFtRm28NJGQNJhvYD72+GzqZcewOHcDC5+790w2uIjw=)
2: Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa (hash: V2GzO75KrR6j8wTx9v/Qqyh9ekhgpMjeYEsEM94WE4M=)
3: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: AE+4BQL74qmXVoIAKI+/ABHmmc+QcXRqF3DAjd6pi5Q=)
4: f5zZHfnsAaopf1GoZf4uBje2t0Q.roa (hash: stYfXchqDnkN91Nt8UqXVM+bMk/Z/wzqFhIgpOKs0pk=)
5: j3K4X35kfjEUhm8UmbEuSZuRvvY.roa (hash: uk+5aj7HJZZkakM6PdHtx3JuETeBBl+0lL4mUEVaQ90=)
6: oFLSLxTROTSIlscGjGR0gR901FM.roa (hash: WRbdNPDyjk05klC3/AGlx6tP1ckSGAuLYeSpiKLvrT0=)
7: un7aOLvVH0DQuSmGP1vDBl9I7QA.roa (hash: iVhFcj6hdZp2lh837gdlgVnJ4rMcKoq6PbO5cfW5HHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:cd:80:eb:8d:40:6e:ba:79:ca:d1:fb:39:12:e6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Validity
Not Before: Oct 24 06:00:03 2025 GMT
Not After : Oct 25 06:00:03 2025 GMT
Subject: CN=7f6e448bf62423bb3d4acc02167b534982a29b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:2a:52:e4:92:ff:c8:54:ae:de:eb:cf:89:
31:87:d8:f9:61:8d:58:61:6d:e9:ee:21:bd:ce:e2:
51:8a:60:25:7f:b8:67:c9:9e:b0:9c:b4:6a:9a:46:
c0:b1:84:55:42:cb:0f:47:db:0e:27:46:f4:53:d0:
35:3d:50:2f:fb:89:6c:9a:ae:c1:68:93:9f:1a:ab:
00:f1:56:8a:55:fc:54:46:b1:26:34:0c:af:db:89:
d7:7e:48:5c:7b:67:d2:96:92:9f:1c:e5:fd:c7:4a:
61:79:b7:76:29:0e:4a:96:ae:44:05:4e:13:1c:f9:
45:b1:a0:86:bd:4a:e2:2d:a7:61:c2:bd:13:40:92:
8f:f2:80:cd:5b:61:b0:3c:e2:51:81:c6:3a:81:d1:
bd:80:c2:25:e4:bf:7c:58:fe:38:4f:d7:1b:c4:8c:
dd:61:e8:d0:52:6e:c6:b7:61:1d:4b:b7:0f:b5:99:
0c:18:e3:99:2e:39:75:f5:6e:e4:b7:82:49:81:cf:
fb:c1:0b:af:27:7c:63:32:f2:9d:ac:8f:e2:cf:9d:
4e:77:30:3d:d4:7d:ae:5a:d1:a1:2b:a3:45:4d:3e:
9d:6f:80:09:32:b2:11:f5:b6:57:5f:9c:27:be:67:
40:5f:2b:88:e0:08:7f:ee:49:2b:f0:f6:a3:96:76:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6E:44:8B:F6:24:23:BB:3D:4A:CC:02:16:7B:53:49:82:A2:9B:52
X509v3 Authority Key Identifier:
keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:46:75:8c:4e:21:63:26:f4:b6:e9:fa:e1:65:67:e9:5f:92:
42:da:75:5a:bb:85:42:d8:f6:38:0f:47:d1:e0:b7:fd:6a:c2:
d3:10:3e:cc:4a:d9:36:f0:b4:38:9a:8b:dc:43:5f:69:84:ab:
5a:cf:29:4a:14:05:10:0d:9d:9e:76:43:7e:32:6c:5e:d3:0c:
14:a3:8d:f5:f2:8a:59:2d:7f:30:78:0e:f8:00:c2:85:9b:19:
df:ad:c5:f0:5e:96:35:08:f3:c4:84:1c:56:98:07:a5:b7:4b:
a2:5f:f2:35:7d:18:e9:3c:42:bd:b8:8a:bd:66:1e:c1:e1:1c:
da:06:bd:00:a1:09:6a:58:6e:28:ce:0e:a9:82:cd:b4:7c:04:
89:97:49:24:51:5b:cd:4c:50:14:5d:d1:bf:f9:79:74:05:6a:
a2:5d:ed:ea:25:f9:4d:36:2c:7e:42:4f:76:70:ef:d7:98:d2:
fd:20:2e:8d:f3:b3:da:f7:21:1c:00:3b:59:0e:3d:d6:4f:99:
62:e9:b1:78:95:93:9c:d9:42:50:fb:4f:7d:0c:ad:af:79:cd:
b7:02:69:04:ec:1d:ea:23:e0:7e:e6:c5:cc:c5:7c:13:86:e8:
11:ed:cb:fc:33:fb:d5:71:fb:3f:db:76:b2:b9:3e:84:4a:6c:
82:da:28:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 10:06:27 2025 by rpki-client