Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: YeLk2BF0ZUrkzKF+yRsjNoOlDJpoYz8iMGpRTuZy/Zs=
Subject key identifier: C5:0D:6F:96:F0:C5:02:E7:43:C5:F5:46:1B:83:D1:0C:3B:94:3B:33
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 019A5262F154EB049C175CBAD5D10DC30D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 16D4
Signing time: Wed 05 Nov 2025 05:00:07 +0000
Manifest this update: Wed 05 Nov 2025 05:00:07 +0000
Manifest next update: Thu 06 Nov 2025 05:00:07 +0000
Files and hashes: 1: MIfmeAoWN0nwDc_PxEMHlVixhH0.roa (hash: BGlglgWDBdgW/hvSdFfJEQ+q//PCVjKwrtXl1XRe9nc=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: qsyCs8sZnddLEpPmdFzVsUJbbtVo/0Vi/WZiBRE887U=)
3: ok0D6AFy1nokMBW7AtTQbtvoy-Q.roa (hash: OI8j87WnUAa44hUR7Jr4hBgPSlGVFL5uAjQD5u8Uzmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:f1:54:eb:04:9c:17:5c:ba:d5:d1:0d:c3:0d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Nov 5 05:00:07 2025 GMT
Not After : Nov 6 05:00:07 2025 GMT
Subject: CN=c50d6f96f0c502e743c5f5461b83d10c3b943b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:ad:e2:c6:bf:52:68:de:95:c7:93:14:d3:
39:e6:e2:24:16:02:ce:6f:54:1d:74:1d:76:b2:f4:
21:70:e1:97:49:8e:3a:02:c2:8c:87:33:a2:a3:9d:
73:87:dd:41:b2:d8:55:0f:4c:24:6e:48:8f:7e:d4:
91:03:d4:d0:bd:3f:05:4b:7a:6c:16:a1:18:8a:f2:
a9:7d:9d:d2:50:26:32:39:89:0c:1d:d2:5d:a5:a2:
e2:78:52:51:53:e9:33:f4:ce:31:6d:8e:66:bc:8d:
82:8a:63:97:b7:fb:27:23:1c:1d:ff:d5:fb:38:d9:
ce:f4:bb:f5:a3:7f:9f:22:59:1a:ed:f5:f6:37:52:
3b:e6:24:53:8b:3a:53:36:40:32:56:f5:8d:a4:e8:
44:e7:f2:11:05:d4:b4:71:80:8c:7a:3f:b6:be:ce:
81:69:00:b8:08:ad:3e:dd:79:f8:26:3d:34:b7:9b:
89:b0:6d:bf:81:8e:8f:90:47:d1:68:73:11:3f:19:
fb:73:58:43:9e:bb:51:01:bc:d8:6f:b2:99:0e:a5:
7e:2f:bd:8d:e0:32:89:2a:79:1a:dd:cd:91:b9:8c:
0c:fa:e3:2d:3d:f4:5c:a5:cc:89:74:d3:25:4b:65:
ef:44:d1:ab:56:01:23:d1:6a:69:fe:83:2a:69:f4:
a5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0D:6F:96:F0:C5:02:E7:43:C5:F5:46:1B:83:D1:0C:3B:94:3B:33
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f5:cc:a6:42:d7:7d:7e:a5:42:ce:d7:f0:e0:c0:eb:11:67:
cd:85:f9:f9:98:00:d2:00:a4:0c:6c:f6:aa:66:ee:68:dd:6c:
f0:79:1d:c4:fc:e0:6f:6b:f8:48:62:d3:9c:82:43:dd:35:55:
69:a1:be:d8:ef:d4:94:21:db:25:e8:36:28:91:95:e2:e6:7d:
e7:20:15:b8:a3:db:e9:90:aa:75:e1:16:2b:ff:30:2c:2b:9b:
81:a9:dd:38:ed:7d:87:fc:b9:c5:44:ee:2a:7e:e9:8f:b6:c8:
1a:78:9a:81:ad:2c:91:a2:75:1c:a3:af:ff:e6:b6:c7:89:34:
55:2c:7e:55:81:2e:ac:64:73:4f:a0:a4:87:44:3e:e4:9a:1f:
fd:e6:a9:a0:98:26:12:95:9d:20:d1:ee:4c:19:42:1d:40:35:
39:2e:97:50:99:4a:39:a6:ab:39:73:1e:10:fe:61:75:66:de:
2f:f3:a2:95:bb:f2:4c:d4:e3:87:ba:c7:df:a4:14:8e:4c:2f:
c9:6d:d6:3d:f1:99:ab:4a:67:5a:da:be:cb:a4:aa:74:60:f3:
70:da:99:e8:5f:bf:cf:d5:c4:9c:84:d6:83:e2:3a:f9:8c:16:
07:82:4d:10:aa:09:f8:ce:ec:f1:6e:cf:aa:90:82:d9:57:63:
25:79:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:26 2025 by rpki-client