Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
File: KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft (raw, json)
Hash identifier: nwSfn2wJ0ibmAB+CUgg5L7GEKq/9xWM77KCpjMeqf7s=
Subject key identifier: A4:11:82:7C:8F:FC:E7:AC:3D:1A:56:C6:4B:68:A5:A2:FB:90:E8:B3
Authority key identifier: 28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
Certificate issuer: /CN=28c2202a443537fb8fb280567a17485f1230c411
Certificate serial: 0199FC21CE21E068069A658878CE1914DFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:37 +0000
Manifest this update: Sun 19 Oct 2025 11:01:37 +0000
Manifest next update: Mon 20 Oct 2025 11:01:37 +0000
Files and hashes: 1: KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl (hash: OzvFxHqs+jY2bRUVMX14XlG1HX1wkgtDAzZEoPsSJ/0=)
2: rzOkydR3EHFZXD3XEkRebB02-_4.roa (hash: df7jTqxQL8Sw059sbRTkyG9ltt5KtHFaW+BfP29wPTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ce:21:e0:68:06:9a:65:88:78:ce:19:14:df:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c2202a443537fb8fb280567a17485f1230c411
Validity
Not Before: Oct 19 11:01:37 2025 GMT
Not After : Oct 20 11:01:37 2025 GMT
Subject: CN=a411827c8ffce7ac3d1a56c64b68a5a2fb90e8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:b0:49:8a:7b:bf:61:73:ea:9b:58:0c:c7:
82:1f:e4:cb:94:78:ed:0c:83:8d:d5:f2:9c:54:80:
1b:54:ac:84:3e:4c:af:2c:3a:80:29:b7:28:a0:a2:
c2:af:3f:80:22:1c:a8:de:99:93:4c:f4:ff:d8:e3:
d0:7b:c9:99:c5:34:63:42:57:8e:d5:e5:d9:f0:41:
c7:72:f8:9f:1c:d0:0f:2a:bc:5b:14:02:a5:a2:74:
3b:95:1a:8d:ed:91:16:5e:2f:f2:77:95:38:bc:65:
47:1c:02:6b:b1:d0:58:2b:0e:dc:f0:37:c4:0c:56:
e5:54:7e:30:50:d0:0d:79:36:5b:3b:3f:09:08:e3:
1b:38:7b:bf:5a:dc:5f:88:f1:2a:e6:3a:f1:71:f5:
b2:8a:46:1a:0c:de:86:14:ac:8e:03:93:5d:6f:a6:
7a:e0:9c:9a:be:13:0f:66:2b:c9:37:94:1c:59:96:
62:a8:59:0f:71:02:fd:dc:96:64:92:a4:93:40:73:
64:23:48:86:7f:3d:0b:bb:53:15:03:06:e9:83:c9:
0b:aa:47:a6:87:a2:ca:4c:41:d4:ef:da:83:b4:63:
72:c0:26:45:26:3c:1a:d6:cf:7b:bd:6d:86:20:2a:
05:ef:08:ee:f1:15:b7:b5:12:20:21:17:93:fe:56:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:11:82:7C:8F:FC:E7:AC:3D:1A:56:C6:4B:68:A5:A2:FB:90:E8:B3
X509v3 Authority Key Identifier:
keyid:28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:71:94:51:fb:37:df:55:bb:49:83:39:06:8f:a5:fa:87:91:
22:32:ac:85:61:e3:f6:b1:39:d8:f9:5e:b1:d9:05:fd:17:9b:
6b:58:24:3c:13:fc:3d:5a:7b:aa:ce:6d:83:f2:cd:d7:58:ac:
20:0a:4e:b6:69:6e:63:4c:0a:a6:5b:97:7b:68:4b:8c:1f:d0:
52:92:db:85:2d:51:df:e0:bd:52:21:23:10:aa:43:57:85:64:
9a:7b:d8:f8:9f:13:75:d2:c3:44:d8:69:e0:6f:3c:b5:b5:d1:
da:5f:6b:81:ec:45:64:23:44:00:94:ff:ea:f0:e8:d5:fb:b7:
84:4c:67:7a:91:59:41:69:b8:34:bf:b5:71:db:01:ef:ee:66:
48:82:83:3f:b7:53:fa:b6:ca:5c:06:bf:7a:6e:d0:bc:32:b0:
3d:c1:47:18:08:b1:59:fd:12:4e:37:40:ac:a6:6f:ac:da:db:
ca:c5:48:bb:b7:17:de:89:d9:e4:31:72:2a:55:26:00:2b:42:
c0:61:e6:3a:ff:b3:e5:f7:8a:f9:f6:c6:68:14:73:ea:34:43:
7e:64:0c:5f:9c:f5:60:17:d3:ba:c0:a0:92:0a:1e:77:c7:10:
95:a3:1b:1f:8a:65:c2:83:b8:c1:be:5e:0c:e1:88:90:6f:21:
35:75:f6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:02 2025 by rpki-client