Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
File: KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json)
Hash identifier: hQw9uv62D4RxdjQ0Tdi7zsoIr4YNdJXyZnEKNS1iXqY=
Subject key identifier: AA:8D:19:FC:E3:A8:0E:E0:8F:3B:C5:58:5F:74:ED:57:95:D6:88:90
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Certificate issuer: /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial: 0199FAD7C316F9D4524D73467B4DB68D4194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 05:01:07 +0000
Manifest this update: Sun 19 Oct 2025 05:01:07 +0000
Manifest next update: Mon 20 Oct 2025 05:01:07 +0000
Files and hashes: 1: 25LU7394eXHg-PBe4_GLTG3VIkw.roa (hash: HyP22/g9CSOKH8mPcT6JDAYedjiAUR/5O/lp9cDajCk=)
2: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: Hheh0JqldDZ4PMCxT3Q+wUk1bkUcakpd9ab3iTWon8Y=)
3: VUqvat4WtfuUczhMBY4TDvxEK_s.roa (hash: Zqzw2dEApvnq4zRqyWAKudIEokzGJ+rSfWzcaKX+at0=)
4: jfIFCuUZlCfoxkAB48zp-OMBSv0.roa (hash: tfMbXizXQYE7ANVbZs7KN2qDtk5wxuAhU53t/l8imds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c3:16:f9:d4:52:4d:73:46:7b:4d:b6:8d:41:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Validity
Not Before: Oct 19 05:01:07 2025 GMT
Not After : Oct 20 05:01:07 2025 GMT
Subject: CN=aa8d19fce3a80ee08f3bc5585f74ed5795d68890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:a0:87:59:be:26:14:1c:cf:09:97:6e:82:
07:83:9a:74:b4:f6:7b:1e:37:40:c9:77:b4:77:fc:
76:7e:0e:01:ec:86:61:9c:89:08:c0:55:cd:c3:f6:
1d:62:cc:9c:7d:bf:58:41:85:55:48:0a:ce:9d:f7:
d2:d8:02:7c:55:68:69:52:6e:1c:43:1d:0c:2f:06:
79:ac:4d:ba:08:40:c2:f5:40:05:cc:c4:5f:be:f6:
b1:5d:7d:1f:7a:d4:14:4a:a4:c4:67:01:fb:e9:a5:
9d:41:76:00:2d:c9:96:22:4a:cd:77:de:cc:e7:56:
4d:00:98:10:8b:62:e1:86:cc:87:a1:2f:ad:79:fc:
4c:00:84:e5:b8:75:f6:9d:e2:76:ac:26:ac:36:5f:
78:9b:61:ba:2a:52:a4:8d:5f:c0:d3:68:a1:e9:9f:
b9:ae:1e:15:3e:4d:f0:4f:28:6a:79:87:0e:30:a1:
15:6a:12:6d:89:a2:93:86:dc:19:7e:33:89:e3:a2:
1a:81:a9:b4:d6:2e:f1:8e:95:34:1a:5e:93:b2:de:
bc:d4:0c:fe:67:42:ed:46:99:b2:0a:78:60:03:8c:
18:15:88:fb:82:3f:26:9b:95:99:c1:92:d4:0c:71:
03:65:c0:c6:b4:1a:f0:d6:e7:fc:d6:62:de:ee:a2:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8D:19:FC:E3:A8:0E:E0:8F:3B:C5:58:5F:74:ED:57:95:D6:88:90
X509v3 Authority Key Identifier:
keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:93:80:9c:3c:c1:30:f0:38:2c:24:bc:21:6a:44:da:3f:df:
fe:e9:c0:9b:3f:ad:f4:b1:c8:5f:4a:88:01:ad:ee:ac:8d:65:
be:86:b4:09:a2:dc:60:5b:c5:d3:21:91:51:e0:45:69:c7:1e:
2d:44:19:a5:d6:53:44:91:b2:1a:50:05:4c:a1:ff:c3:78:f5:
96:4f:b2:ea:a7:8d:b5:4a:88:b1:8f:bc:32:d2:69:98:70:45:
16:ca:30:29:c9:f9:d6:56:3c:ce:2c:36:d6:63:d6:74:d5:ac:
02:09:a4:20:3f:e7:56:18:c0:1e:ca:09:7c:85:ea:ef:65:62:
38:1b:f3:60:a5:38:25:83:5e:2d:a6:b5:f9:26:a2:b2:07:a4:
c7:f2:be:c6:0c:da:5e:94:9f:d4:b2:d0:9a:45:65:30:c0:82:
39:c0:b0:b1:f2:0d:0e:34:15:0f:9e:a0:cf:bb:ed:cc:e2:19:
b3:20:b4:3e:6d:58:1f:27:f1:cd:03:a8:47:8f:30:6c:b5:a5:
1a:31:53:4c:bf:b9:a1:3c:76:37:ea:23:9c:22:3b:e6:34:ed:
91:36:da:58:98:6d:8e:d8:1a:cd:8f:88:3d:19:8c:cf:55:17:
73:59:0f:b2:e8:19:6f:7c:d3:4f:9c:8a:6c:3f:d1:ce:f5:f5:
4b:50:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:03 2025 by rpki-client