Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: 21oi/fHJugCeBYxBtS/F0OMeu+1MVWr5rdtBQSBkOao=
Subject key identifier: BC:25:1D:9D:8F:81:9C:B8:63:2B:3F:FC:19:B3:13:F9:0C:43:12:EE
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 019A2967162C737AD1EBB342885E4AC9857D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 06:00:12 +0000
Manifest this update: Tue 28 Oct 2025 06:00:12 +0000
Manifest next update: Wed 29 Oct 2025 06:00:12 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: 7pGSrvWd7rZUwLLOwU8rAFuD4vz8vQGdXpF3P2o7yRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:16:2c:73:7a:d1:eb:b3:42:88:5e:4a:c9:85:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Oct 28 06:00:12 2025 GMT
Not After : Oct 29 06:00:12 2025 GMT
Subject: CN=bc251d9d8f819cb8632b3ffc19b313f90c4312ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:af:33:8a:a2:06:26:56:ef:50:5e:a1:9c:
d1:99:f7:d8:2f:ee:e4:5c:fd:c4:68:3c:f0:87:0a:
70:ed:e0:86:98:71:fa:84:e6:ed:8e:a2:a1:f7:a4:
61:2c:dc:da:6b:87:99:8f:e5:a9:84:ad:64:8c:db:
39:8c:d8:b1:99:d8:6f:33:f5:7c:c6:56:c8:28:fc:
5d:0e:09:53:f9:a4:1b:03:7b:5b:52:be:84:23:31:
ed:6a:b0:c1:78:f2:28:9a:61:2e:27:e8:f6:7f:34:
40:2b:09:4e:f8:9f:20:b3:bd:32:bf:ba:38:ab:c2:
3d:86:f3:67:2c:04:7e:4d:2c:73:c0:5d:26:d7:1b:
2f:08:72:14:d1:19:56:f0:e0:dd:41:ce:f8:94:09:
29:c3:c7:6f:49:15:51:8f:e3:af:e6:6d:5b:48:69:
e2:86:50:49:d1:e0:28:0a:48:75:39:5a:1c:8a:d3:
58:0f:b3:9a:69:12:26:f5:1a:4e:80:14:f0:d7:1a:
1f:d1:84:7b:75:e8:e9:da:4a:b8:7a:80:10:36:bf:
aa:c1:a5:22:c6:5b:48:44:a8:87:c6:f2:b7:25:df:
73:6d:ec:2f:c3:40:1d:1a:c0:e4:d1:b3:b1:3d:3b:
f6:20:5c:ae:7e:d8:58:e5:7b:c0:c7:6f:f4:e7:de:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:25:1D:9D:8F:81:9C:B8:63:2B:3F:FC:19:B3:13:F9:0C:43:12:EE
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d6:9b:88:a0:30:8f:3d:83:1b:b0:80:47:23:64:7f:d3:71:
65:7b:24:2e:ba:7e:df:04:bc:cb:2e:ae:07:b8:2d:32:19:3b:
f2:36:d5:e3:d8:24:13:4f:5c:52:87:37:d4:3d:51:ac:25:ef:
2d:a6:2f:30:8a:35:3b:b6:37:fa:1c:e5:02:d4:b8:2a:99:3d:
34:50:ad:2e:af:78:2f:59:63:bc:20:61:14:9b:7a:36:8a:f5:
6f:f8:9b:b7:0b:05:29:07:a7:96:46:5b:7c:3a:db:f5:27:39:
5b:61:53:7d:1e:b5:2f:54:fc:78:f4:bf:14:9c:31:c0:a7:85:
41:fa:1c:bd:9f:72:27:b7:56:00:33:fd:1d:66:27:31:31:37:
aa:18:97:54:a1:64:88:24:b7:67:7e:c0:63:53:ff:24:e0:89:
7e:7e:25:00:b8:57:ba:52:35:a2:42:54:25:14:b8:c5:02:1f:
19:63:2d:7b:79:f1:3e:1a:e6:ee:c6:b5:af:79:49:f1:5f:7d:
ca:96:e4:7f:c3:de:9c:9e:54:16:2f:36:ab:66:c3:03:48:c3:
b6:3e:7a:37:8d:4d:62:8e:69:96:aa:ef:0b:a9:4f:92:d5:d9:
c8:94:96:32:7a:46:76:b1:7c:64:22:ed:27:ce:4a:19:a9:74:
85:94:08:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:50:56 2025 by rpki-client