Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier: RhdakU5CEowa186aX1uiymvHCsljUfixaMebcE7k8YE=
Subject key identifier: 34:9C:05:C6:13:2E:E2:4B:5F:36:86:61:9D:82:62:2B:AD:08:29:4A
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 0199FE1011ED62EF39D9002BAFD08D4424AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number: 0B12
Signing time: Sun 19 Oct 2025 20:01:29 +0000
Manifest this update: Sun 19 Oct 2025 20:01:29 +0000
Manifest next update: Mon 20 Oct 2025 20:01:29 +0000
Files and hashes: 1: HJG2LfZbcdQILd5mjrG6JouJjB8.roa (hash: AJsKTbmetLnV+AkJjtEMj7IQPl7myVO7TWx6kpWmD6s=)
2: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: +8JJtSnc5y464+uxl57Bb4AhIJemeX6+FrNxlYDLIaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:11:ed:62:ef:39:d9:00:2b:af:d0:8d:44:24:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: Oct 19 20:01:29 2025 GMT
Not After : Oct 20 20:01:29 2025 GMT
Subject: CN=349c05c6132ee24b5f3686619d82622bad08294a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:10:17:a7:26:b5:78:f7:e8:b9:94:12:07:
d7:6c:f5:df:21:40:75:83:6b:a2:4d:6f:b0:f1:d7:
76:79:98:6f:c3:ce:cb:8f:c4:c2:4c:75:6a:97:b1:
c6:88:6e:37:e0:72:14:9d:b1:aa:c0:16:63:99:c6:
f2:ab:cd:08:64:2c:67:cc:88:c3:18:82:37:e4:49:
ef:0f:88:b7:fb:0d:42:23:bb:23:c5:d6:83:f0:34:
a3:b8:96:c4:4a:3e:73:6e:d4:ba:0e:d0:ce:8f:1c:
c0:66:9a:73:e0:cc:89:ec:3f:de:0c:e9:74:15:d0:
0b:60:16:2e:47:0e:8e:f3:df:d7:b0:00:89:11:3b:
f3:e4:8e:db:59:a9:85:cd:a4:33:1e:71:91:4a:2d:
9b:48:d0:c7:32:1c:da:dc:aa:cc:7c:c4:b9:60:da:
74:6c:db:37:a3:bb:79:1e:b1:f8:4a:9c:c9:fe:44:
1b:5c:53:88:44:fe:8f:e7:2e:fb:21:a9:29:1f:a5:
b7:43:df:ec:da:dc:cf:17:f0:3b:c1:f7:03:86:61:
07:c6:38:c6:d3:94:26:39:34:38:27:4b:47:33:f5:
d8:de:66:40:b6:4d:1d:3c:91:e1:20:1b:58:c5:89:
a8:79:d9:9c:22:31:8b:d1:74:48:b9:84:31:d1:02:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:05:C6:13:2E:E2:4B:5F:36:86:61:9D:82:62:2B:AD:08:29:4A
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:85:0f:e0:18:0e:7e:0d:0a:e2:0f:24:59:ee:be:22:49:a0:
73:9e:4b:dd:ec:45:51:69:65:74:ca:1c:87:8a:3b:1c:ce:67:
b5:d7:c9:42:19:74:06:f3:d2:9a:6e:03:06:31:4f:67:94:fe:
9f:d7:06:7b:fe:4e:7c:72:e1:1d:43:d6:5b:fe:af:8b:f2:c7:
59:c7:02:d8:83:11:a2:7d:aa:09:3a:6e:e9:b9:a9:b0:b9:6d:
ee:0c:89:48:8c:d6:d4:2a:07:7b:b3:f4:5d:b2:c8:a7:3f:f3:
41:57:a2:d1:0d:09:63:38:92:54:7a:a7:d3:f4:10:8a:74:c8:
cc:ec:7e:3b:af:7c:f1:c3:69:e4:13:8b:1b:62:d6:e4:7c:d7:
ee:c2:cc:d1:5e:5c:4e:64:86:81:5c:21:fb:4e:7a:7d:ad:0a:
9c:de:75:1b:e6:fb:e0:72:74:c8:6d:1c:97:34:15:7b:15:0e:
c4:11:4a:21:30:80:30:6d:81:e1:28:cc:76:31:20:f2:0f:9c:
a6:d5:94:57:60:91:43:67:cb:e4:a2:ae:ae:5b:f6:39:37:a4:
08:a5:02:ac:63:4d:8b:42:a4:ca:97:04:1c:30:89:f9:b9:69:
99:3c:19:80:59:c2:0c:98:7c:6e:e6:27:7e:a2:23:55:a4:55:
a8:de:c5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:41 2025 by rpki-client