Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier: wYmPfB315pjNTZoqhZMEzP99+tGrXjWIaIGmgb0E5QE=
Subject key identifier: 35:D5:C9:E7:A7:21:6B:7E:3B:06:9D:10:A6:48:60:7A:1B:01:4B:B0
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 0199FB45BFAD859735B39D1448B02173AA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:16 +0000
Manifest this update: Sun 19 Oct 2025 07:01:16 +0000
Manifest next update: Mon 20 Oct 2025 07:01:16 +0000
Files and hashes: 1: 0HbGWRHIhLcfmf6kLXAQdepQymA.roa (hash: RFLCzQy5MXPE72eUiDWdR8f6HUuF1oAdf92PY+ZrIEU=)
2: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: wijSi8ncKDmE7TAnabZ5XWq7aFJnoOGBL2DPIuUU9dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:bf:ad:85:97:35:b3:9d:14:48:b0:21:73:aa:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: Oct 19 07:01:16 2025 GMT
Not After : Oct 20 07:01:16 2025 GMT
Subject: CN=35d5c9e7a7216b7e3b069d10a648607a1b014bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:73:30:43:62:bc:17:0c:96:4f:62:5e:4c:
aa:d3:b6:c4:3b:2d:3e:40:47:b3:b1:c9:e4:43:04:
d1:88:d8:e0:67:04:7a:f6:5a:12:a7:f7:5f:ca:9f:
c0:0a:71:93:77:82:59:f5:c4:d7:3c:4c:ae:5d:e5:
21:d9:d4:9e:57:88:56:21:01:22:af:15:43:66:f0:
89:13:5c:07:bf:c6:d4:06:d3:71:85:bb:7e:b9:8a:
70:37:84:07:ca:04:c7:d7:6a:5c:ad:cf:af:c7:19:
84:49:db:31:1b:fd:f5:98:44:97:c9:b7:6b:63:71:
49:6f:a0:d9:b8:79:22:6a:90:d5:4e:bc:f0:66:b5:
fd:b0:76:cb:ce:02:45:80:ec:41:b0:aa:6c:a6:99:
b7:2e:c3:5c:f8:12:99:f2:2d:75:e2:b6:5a:14:f7:
17:76:25:f8:fe:b2:bf:05:a7:8b:b2:27:58:16:c9:
b7:8b:be:f0:fa:8f:28:c6:41:be:f1:aa:0a:0b:02:
ae:55:75:8b:be:aa:cf:80:31:39:db:25:5f:a8:c0:
f9:6f:00:31:32:e0:7b:17:8d:14:aa:78:d7:46:b6:
ee:77:cf:16:aa:47:22:a1:ab:ac:5c:a9:40:ef:a3:
2c:bc:8d:38:2b:40:6e:9d:85:2c:a7:cd:2b:6f:76:
4a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D5:C9:E7:A7:21:6B:7E:3B:06:9D:10:A6:48:60:7A:1B:01:4B:B0
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:1f:75:7d:35:2f:22:8a:6c:6a:9b:2b:5a:ff:79:6e:68:3b:
ec:84:d6:4c:b4:41:30:cb:13:2b:2a:ef:f3:f5:c0:60:dc:3b:
b9:22:e9:dd:66:9f:09:5a:1c:6c:0f:33:73:39:7b:a0:50:3b:
02:ba:9d:45:4c:01:9d:b5:e7:a5:5c:47:be:98:30:eb:03:68:
50:af:a1:47:15:1b:93:7a:9a:d5:d1:69:b7:1b:2e:7c:fe:e1:
ce:49:3b:7e:c9:de:38:1f:83:74:ba:83:72:7d:49:27:85:be:
9c:28:f3:2f:9d:b9:55:d4:78:d4:b3:bf:4c:b0:1b:89:15:9d:
0c:05:e4:c3:93:72:69:87:c0:73:81:36:04:6f:50:cc:5c:b1:
70:e6:8b:c6:88:47:39:6e:88:c8:84:72:41:13:bb:43:ff:4f:
1a:4f:9f:2c:e3:46:52:61:96:65:54:e4:73:f1:07:47:66:36:
fc:85:43:df:da:ee:2c:b3:b3:89:71:ab:b9:1f:2b:b7:90:7f:
7e:d9:af:71:66:f1:b8:72:fb:93:be:14:9d:63:71:ec:7c:54:
8c:f4:00:55:1c:f6:22:67:86:44:44:71:e3:19:0d:68:1c:76:
b6:24:3a:26:94:27:2a:3a:80:e6:bc:6e:b2:42:9f:0b:fe:b6:
b8:56:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:20 2025 by rpki-client