Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: npnqf5YtXMBrztorVF6uIjnEu4QQWl5DjJKv3iX6aoA=
Subject key identifier: 25:E9:99:A6:21:86:90:75:0E:F0:7B:9A:5A:E4:98:3A:65:A2:D1:A0
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 0198D54E9798D64B00246136414C32D3A55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 13CE
Signing time: Sat 23 Aug 2025 05:02:34 +0000
Manifest this update: Sat 23 Aug 2025 05:02:34 +0000
Manifest next update: Sun 24 Aug 2025 05:02:34 +0000
Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=)
2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: K04C33ibRbsvX6voHw4ykpTdf+XJ+t0+Ya6unYkGwhE=)
3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:97:98:d6:4b:00:24:61:36:41:4c:32:d3:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Aug 23 05:02:34 2025 GMT
Not After : Aug 24 05:02:34 2025 GMT
Subject: CN=25e999a6218690750ef07b9a5ae4983a65a2d1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:0c:72:32:e5:02:9d:47:ac:22:8a:68:e6:
79:8d:9b:de:76:29:71:11:3c:19:ec:d7:24:be:24:
d3:9f:fb:c6:69:8d:0b:eb:0c:b6:45:ec:fc:6d:1b:
aa:7a:9d:ac:af:56:82:f2:ef:6d:cc:1b:4b:52:59:
b7:1a:cf:38:3d:8b:e3:30:bd:00:5e:82:62:65:9e:
8b:37:63:1c:89:48:0b:8a:ca:71:0d:e2:c2:3a:45:
92:5b:f6:ca:c5:a6:16:39:0b:ea:ba:0b:0a:dc:4f:
dc:0d:c0:c7:9f:06:2a:1d:bd:a2:cf:ed:b0:7b:3c:
66:95:c8:7c:21:ad:f4:1c:c0:a6:c2:86:06:5a:a4:
6c:82:85:cb:66:4d:1a:cc:28:b4:28:66:d2:b6:fe:
e2:e1:bc:9e:07:cf:09:7b:fb:77:15:72:da:08:62:
ac:4d:e5:2a:43:60:98:c2:9b:40:6e:a2:c3:ed:de:
88:92:59:fd:58:49:66:fc:c2:20:6f:07:38:35:d8:
3d:6b:ae:c2:8b:47:72:ef:63:fa:96:25:b1:2f:7a:
4d:5b:69:9d:5f:8f:71:de:9e:3a:7e:ed:7d:9e:7d:
71:ba:51:45:cc:19:60:c1:e2:56:18:81:49:06:91:
a7:84:1b:f8:da:bc:8d:b2:75:2a:73:fc:6f:5e:17:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E9:99:A6:21:86:90:75:0E:F0:7B:9A:5A:E4:98:3A:65:A2:D1:A0
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:09:73:06:f2:ff:b1:7a:08:54:76:22:71:df:bd:5b:0f:f8:
12:57:11:f7:a9:45:03:8c:32:cf:f0:78:03:54:4c:22:c0:97:
38:01:15:07:4a:62:13:17:65:8c:83:45:94:43:da:4f:8a:92:
4a:f9:19:5a:01:e9:31:dd:ac:1c:db:fa:bc:b3:94:5b:b2:45:
89:ab:93:c2:44:60:bd:d5:8f:2b:84:8c:b2:54:d8:0d:6c:2c:
61:53:3f:3b:4e:49:c6:7f:22:54:9b:bd:4c:06:47:dd:7d:e6:
74:78:97:ae:a3:f1:ce:54:b4:48:47:fe:9f:03:80:4c:cc:0d:
ca:4c:65:f5:a9:26:3a:43:73:bc:2a:18:58:7c:7c:e5:57:fe:
ee:b6:97:98:94:6e:88:11:25:10:dd:88:61:8d:69:ca:ae:07:
ae:40:86:71:38:34:15:4f:9b:05:5a:94:7b:ea:39:44:6d:d4:
f5:54:a3:2c:71:75:e1:7a:36:33:3b:ae:ae:c7:31:84:55:5d:
29:50:43:e2:a4:e4:0e:00:88:fb:c7:25:eb:3c:4a:87:3d:c1:
ac:40:1d:49:c3:f4:79:50:d2:89:bb:6c:7b:ae:31:d4:3a:d0:
fe:aa:b9:cc:4e:20:e0:43:6d:01:17:35:48:05:4e:db:7f:a2:
21:66:e9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:13 2025 by rpki-client