Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: krcQdpdt+0R5N1vKJW5qcCeatGa6zr3UQspzzGeCuwE=
Subject key identifier: 72:8F:0F:E7:12:72:61:7B:BF:37:1D:14:18:9F:5F:87:FE:D9:E3:F2
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 019A1EAD83F138DFE1D0BD61D7306B7E45F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 06BB
Signing time: Sun 26 Oct 2025 04:01:19 +0000
Manifest this update: Sun 26 Oct 2025 04:01:19 +0000
Manifest next update: Mon 27 Oct 2025 04:01:19 +0000
Files and hashes: 1: DgYaKXLAfCciJB45PdY6jb3nvSM.roa (hash: 3wQZIj5q2hejLISAuXVPv02HNSLvrU3fDX6SOnePruk=)
2: iLJZ457a-7z02PhFWjv4cGHT93U.roa (hash: NESsCi8hLaoKvM16NOOEv6MVC+cF28ZWv23JeL3C9tw=)
3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: WVFHDIiL58kM5d7LJPfTAogdeQOaCDez4Qp0quRSPac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:83:f1:38:df:e1:d0:bd:61:d7:30:6b:7e:45:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Oct 26 04:01:19 2025 GMT
Not After : Oct 27 04:01:19 2025 GMT
Subject: CN=728f0fe71272617bbf371d14189f5f87fed9e3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:0c:80:b6:2d:e1:4e:c6:d8:72:fa:cd:6b:
06:5b:a0:2a:6e:d7:36:df:f0:2e:79:df:c8:de:c0:
3c:59:b4:b8:4d:76:61:df:ad:58:c6:c0:96:a8:ca:
5d:bc:a4:30:18:37:ed:c2:36:89:af:e9:85:40:29:
e4:57:0b:0e:fe:7a:0e:25:20:67:0d:77:34:52:dc:
da:a4:19:61:38:c8:81:a6:2f:14:78:c6:8d:9f:07:
4a:af:14:c4:ce:d2:e6:b0:0e:ed:0b:e6:66:f2:b6:
e5:36:d4:ec:25:2b:e1:f8:3f:ae:ed:16:7c:92:4e:
b7:e7:3f:46:08:27:5d:fa:50:d0:ef:19:05:5b:c7:
d9:f2:ea:28:16:91:f7:d8:a1:d7:79:8f:92:9b:08:
f8:23:3d:c6:32:3c:02:01:48:a4:b1:dc:e4:5d:5b:
5e:29:f9:48:5a:e5:db:6c:f7:e2:db:9f:c8:4a:d9:
41:83:b2:df:0e:0c:6f:a8:7c:2a:aa:ce:c7:dd:ce:
a0:dc:4c:7c:d5:c8:2d:c2:b6:a3:57:0a:7d:86:a9:
35:e6:30:c6:d5:07:fe:37:bb:ea:45:24:7b:b6:57:
d9:d0:74:c7:cc:23:6c:6f:03:df:43:fc:6f:52:92:
e2:49:c2:92:d6:14:0d:dc:75:a1:52:45:4a:75:99:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8F:0F:E7:12:72:61:7B:BF:37:1D:14:18:9F:5F:87:FE:D9:E3:F2
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:05:a5:ec:e9:6a:8f:6b:59:2b:b9:bd:ed:fe:d6:54:48:33:
63:bb:cd:8f:12:3a:8c:97:06:01:5d:99:bd:33:cf:fb:ec:3d:
7e:9d:8d:20:32:01:9c:6c:75:e1:cb:76:4f:6a:da:c9:12:3e:
fe:dd:c6:94:9b:60:5c:b8:ac:68:3e:96:44:11:27:4d:bf:b1:
e2:8e:66:93:cb:42:f5:ed:5a:a3:2c:f3:d8:78:00:1d:0a:b9:
21:8d:c9:6b:35:c0:4d:2b:4c:d9:19:1f:02:f4:9e:13:3e:bf:
ac:56:b7:4d:61:58:a6:14:76:68:ee:26:36:a9:42:dc:4c:20:
64:16:6f:a2:85:78:40:fd:99:18:db:cf:73:ab:0c:5a:77:b4:
3f:f4:84:8d:b8:f7:74:b0:65:00:42:9d:db:a2:3c:cb:80:f6:
22:90:45:2f:68:b0:ed:cc:08:72:53:d2:c1:37:e1:df:d7:e9:
45:b9:c3:7d:d3:c5:32:45:55:15:ea:d3:eb:44:20:d7:27:f2:
7e:73:71:97:b4:a9:f0:7a:14:32:f5:aa:03:98:f4:62:67:66:
8c:11:a8:84:bb:2a:9e:b3:3e:b6:1b:99:01:08:bd:11:84:01:
0f:11:c3:63:68:b3:aa:5b:88:db:26:b8:eb:27:b9:3c:2b:e2:
fb:d0:77:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:12:46 2025 by rpki-client