Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: GRVA32JK7zjvCyRG3sS9iN2GD9IjGB4l6t6/vkXnPzE=
Subject key identifier: BF:FE:8F:B4:15:0D:EE:C7:8D:54:BA:2E:35:8B:D1:B8:0C:D7:E2:2B
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 019A52D2AD746CDD777FB40232AC4E3D098E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 16A1
Signing time: Wed 05 Nov 2025 07:02:09 +0000
Manifest this update: Wed 05 Nov 2025 07:02:09 +0000
Manifest next update: Thu 06 Nov 2025 07:02:09 +0000
Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: EANoWlef+rGYIrux2VkY04EuPpaBKH6lGiXd++Y+f6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:ad:74:6c:dd:77:7f:b4:02:32:ac:4e:3d:09:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Nov 5 07:02:09 2025 GMT
Not After : Nov 6 07:02:09 2025 GMT
Subject: CN=bffe8fb4150deec78d54ba2e358bd1b80cd7e22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:27:64:c9:8c:7b:04:5b:8b:93:94:69:2e:
12:51:fc:4b:a3:2e:a5:28:73:f5:53:e5:bd:74:ad:
64:4d:05:4b:d7:65:4f:4a:76:9c:bd:bc:b4:89:24:
c8:63:cc:ea:9f:42:cf:96:2c:30:16:90:3b:83:59:
af:1f:14:13:04:5b:6d:db:27:c0:9e:6e:92:d3:18:
af:3d:53:ee:7e:99:03:3e:fb:e0:e7:a9:5d:c6:56:
ec:8d:f2:fe:86:34:b4:2d:71:bf:3a:bb:83:aa:22:
36:86:32:b9:85:68:5f:f3:b1:c5:68:d9:4f:03:99:
ac:d5:d8:31:38:8d:50:7d:3e:22:a1:6f:26:a6:b0:
1c:d1:8c:ea:d7:0a:dc:f7:aa:1c:f1:fb:8c:f6:62:
0d:5b:58:75:38:9a:ce:05:9c:80:c7:8c:75:46:0e:
e7:9a:75:b0:08:df:6b:a3:7e:fe:64:50:86:d3:b0:
64:a6:de:6c:8e:7e:70:c0:ac:fa:d2:d4:15:54:0f:
02:51:e8:35:cc:c5:38:df:65:b0:2e:1b:65:7a:04:
47:2d:93:0f:1e:35:e8:31:ef:d2:72:d9:be:85:e4:
eb:f7:2a:1a:90:c1:79:bb:82:9b:4f:99:54:2c:1a:
e2:0c:81:15:5c:b9:c7:de:0d:80:87:69:21:7e:6c:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FE:8F:B4:15:0D:EE:C7:8D:54:BA:2E:35:8B:D1:B8:0C:D7:E2:2B
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:64:27:44:b8:17:2f:b6:fe:8e:52:1e:de:cb:52:51:6e:f0:
01:c6:70:c7:63:e4:7a:3a:87:1a:49:dd:27:1e:6d:34:90:87:
23:43:2c:ee:31:c7:d4:6e:8c:9e:1b:7e:c3:8a:e5:a1:4a:1b:
a4:67:32:c9:cc:62:c5:b3:11:6e:0a:93:37:3d:d9:9e:76:bc:
40:82:22:80:1e:3f:c8:d3:15:45:a0:b7:f9:b0:84:c5:ba:06:
c1:c9:2e:9c:07:60:54:38:22:e2:50:b9:aa:80:f6:7c:1c:a9:
8f:4d:e4:dc:6e:6a:0f:13:68:8e:0b:cd:b0:c7:67:7d:0a:85:
84:3b:cd:a7:3a:c0:46:90:ef:d4:5b:d3:88:11:5e:bf:6d:20:
f9:b8:e8:21:74:f7:08:47:ed:e4:0a:e9:21:67:11:c6:37:9c:
05:d4:e8:47:73:74:d4:7c:5b:22:d3:6d:75:b8:ba:05:ad:d0:
9a:b3:e7:0a:49:18:a0:5a:d4:67:01:47:cc:41:e8:f2:48:9d:
b9:e6:da:df:9c:d5:02:8f:94:80:52:1c:39:60:f4:88:f4:58:
28:e2:d3:82:47:ad:d6:bb:6c:66:72:e1:9a:50:93:56:e4:aa:
ca:43:5d:0a:81:31:f3:d3:26:04:38:94:8c:07:3b:93:6f:94:
90:95:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:51:18 2025 by rpki-client