Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json)
Hash identifier: s9aHdn8FtuXcwosb8+DTOLzAzodPB8t0fXGpH+NwJCw=
Subject key identifier: 58:F5:A1:17:2E:70:B7:F3:3C:07:1B:52:68:32:DA:F4:2E:30:B1:C8
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 0199FBEC123BFE6E2C6C88B8C33A9C18A755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
Manifest number: 14EC
Signing time: Sun 19 Oct 2025 10:02:56 +0000
Manifest this update: Sun 19 Oct 2025 10:02:56 +0000
Manifest next update: Mon 20 Oct 2025 10:02:56 +0000
Files and hashes: 1: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: 7JKDvzNK8SaGDpvkl0tioPWirYuo9kGBZ2xg+AkFF/0=)
2: Mk8AMLQRC0TMSZEM9wRPKQe_rUI.roa (hash: kj/bATPWc6gsPOSTnqsvTyx2Cven+aKMOotd9KFucsg=)
3: U1IJdlbbqYMq74Zgnki2ng7hcKM.roa (hash: 9WBhhRCHZxnvz9Na6TAE6zXjUSCL0zXJBZDCKRLKqvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:12:3b:fe:6e:2c:6c:88:b8:c3:3a:9c:18:a7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: Oct 19 10:02:56 2025 GMT
Not After : Oct 20 10:02:56 2025 GMT
Subject: CN=58f5a1172e70b7f33c071b526832daf42e30b1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:73:3f:4e:04:5b:f6:84:6a:58:db:7a:76:
1a:7f:2d:c3:9d:28:b5:fc:e2:8b:b7:d5:3e:c3:e3:
0f:47:55:db:29:3d:46:55:69:81:a9:28:4f:67:77:
59:b4:e6:66:4a:fc:59:58:a6:7e:b2:78:5a:a5:3f:
3b:4e:f1:c4:7b:e7:09:2a:66:c8:ef:aa:36:7a:7d:
89:f4:3e:1a:07:cd:41:13:05:e7:f3:9d:9f:7c:b5:
7d:74:7b:10:14:b3:c4:c7:81:fa:34:c6:29:d5:cf:
25:dd:2b:5d:60:3d:62:17:c0:1a:a1:f9:f2:2a:a9:
51:ac:31:ec:31:cf:1e:f7:a3:0e:f4:8a:32:77:78:
77:34:02:64:23:f0:f6:62:99:21:af:df:ae:b9:e0:
af:f3:be:75:30:f8:24:2d:66:56:07:ec:09:46:54:
55:a5:45:3e:f1:97:c2:a3:c7:10:08:37:29:b1:5e:
c6:8c:3d:50:43:69:90:32:0a:d5:6a:98:cb:59:4f:
9a:bb:ba:c0:0a:76:09:3a:32:84:7b:a7:32:30:51:
78:4a:ee:1f:12:94:5a:22:1f:6e:81:f8:1a:03:5e:
ed:a7:2e:6d:db:fd:9e:5a:1c:8e:dc:50:a6:88:21:
f7:9b:38:ea:68:d1:a1:1a:4b:99:f1:d9:3a:ad:a1:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F5:A1:17:2E:70:B7:F3:3C:07:1B:52:68:32:DA:F4:2E:30:B1:C8
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8d:9f:c7:11:fb:b4:40:31:4e:a1:20:e2:53:bd:fc:70:7e:
98:89:c3:7c:f0:ec:84:9b:77:e6:92:e6:31:bf:c2:2b:e0:bd:
cf:a7:f1:a9:1b:23:a9:2c:48:8b:db:ff:09:dc:90:f9:ce:84:
bd:91:84:91:0d:31:4f:ba:93:fe:7d:73:ea:a0:f4:25:be:c8:
55:5f:7d:63:d0:68:c6:cf:1f:40:26:46:7d:7e:15:e7:c1:ca:
df:35:7f:ad:fd:0f:05:bd:43:43:d6:6b:fd:90:a5:bd:2d:9e:
bc:50:40:d5:30:8c:6c:70:c2:ef:30:43:c5:da:2d:e1:66:09:
17:ef:e8:8d:4a:d4:d4:e8:3a:31:5f:5f:8e:01:af:d9:d1:bb:
37:d2:e9:d5:54:a6:f3:9d:dc:5b:f2:eb:3a:dc:33:96:c9:86:
61:ac:a4:1a:65:c7:42:cc:b0:54:f7:e2:f7:28:74:9d:65:ed:
cd:7b:43:c7:97:6c:55:40:99:f0:0b:46:8d:18:5d:39:6f:15:
e5:3f:5f:c7:e7:2d:61:af:9a:ec:5c:67:7b:81:c6:2c:92:35:
92:84:7a:b1:b9:37:9d:85:e4:ab:02:5d:65:6f:b4:bc:f7:73:
63:e4:39:f0:28:36:2c:e9:1c:18:2a:9f:d6:69:2e:f6:12:c3:
da:5a:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:27 2025 by rpki-client