Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: 6dJeTjFVygtx/SlAaTQg4LJ7VncG2148ZN42FRkvj98=
Subject key identifier: 6B:66:A2:BC:F0:4D:A9:86:C0:DB:E7:9F:64:3E:C9:D6:61:5C:BC:2C
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 0199FCC65EA844E97C1055EBD2B283F8B987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0B47
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: 4Dd_oz2TtpOXQBrGavmGYMPXNlw.roa (hash: lEaJsZdsULkNE5Gu41TR5VUrs6XkOuSkB/MqNMbSRqE=)
2: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (hash: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=)
3: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (hash: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: 6rO5/7k1ghrktHVVYDae7B+tYLAxqusim/vOQUrarmM=)
5: azXA0zek1r4GjxGORUc5CbVhlro.roa (hash: dBG8mL0HT6A6TrmZTX65GYmNTUtlNHr3mHgXq8jXk/c=)
6: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (hash: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=)
7: o9r3uR2f73He5KEKu4BwYPFzrZs.roa (hash: di2c5UqcUyXblOdBvGL8kM199QqPxFbroxHSs6c/vq8=)
8: qF7Yer0u7ziOGGwDeljcv2iin4k.roa (hash: ahTinSaOPP9oVbrP+xhco0U3iDA/GD0BuDeaOSksTIc=)
9: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (hash: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5e:a8:44:e9:7c:10:55:eb:d2:b2:83:f8:b9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=6b66a2bcf04da986c0dbe79f643ec9d6615cbc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:81:6e:a6:6e:27:2c:6c:1b:80:b6:d6:0c:62:
64:3e:ec:8a:51:c8:d7:e3:81:6c:66:c2:38:98:31:
49:89:82:fe:29:89:9a:02:09:2b:90:2b:a9:5b:7d:
d8:9d:c6:f9:76:e5:31:74:0e:1e:1f:99:6c:5e:14:
d6:76:e9:4f:72:d9:e9:20:fd:06:10:4c:da:d6:10:
6c:98:4c:ab:15:56:0e:83:38:b4:de:51:d5:32:ca:
82:9d:ef:26:41:0e:0c:dd:22:cd:ee:b2:00:1e:1a:
23:01:aa:9d:8c:a2:fd:1a:90:ae:eb:4f:0b:57:5a:
34:9c:78:99:9d:b5:28:59:0a:0e:68:57:17:1a:05:
1f:0f:c1:b1:70:ee:d2:5d:8c:33:62:d0:ae:6f:82:
fe:49:25:82:4a:91:9a:c5:af:15:25:23:90:8d:12:
ae:78:67:01:91:3f:fe:24:3a:3b:02:c6:3d:7d:88:
02:b6:62:45:fa:90:98:bb:39:50:97:8a:4b:af:3a:
73:94:6b:8c:f3:01:ca:ff:c9:d1:10:72:fd:ee:9b:
e2:2f:41:07:7e:57:9c:0a:13:77:33:8c:b8:6b:4a:
6e:06:93:bf:df:7c:61:19:08:03:ba:21:cb:f5:9e:
5b:e5:b2:39:63:cf:c0:4b:db:9b:b0:85:7b:9b:b4:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:66:A2:BC:F0:4D:A9:86:C0:DB:E7:9F:64:3E:C9:D6:61:5C:BC:2C
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:54:e0:4b:de:7e:b5:3e:bb:0f:c6:4c:0d:c8:29:d1:e4:ea:
46:28:86:e1:77:31:5a:60:1e:04:a3:2e:63:7b:fa:36:3d:7a:
db:18:64:be:60:a2:27:60:4f:da:21:66:d3:a5:8d:a7:db:86:
6b:cd:0d:2e:73:c2:9c:e2:3f:f3:01:44:2d:4a:58:07:d7:15:
ec:72:ac:40:c0:11:d5:8b:2a:b0:45:20:6d:1e:de:79:d6:2d:
2a:78:b2:0b:b1:25:3f:a8:68:00:9b:f9:35:13:15:c5:32:3e:
d2:af:46:0e:f4:59:be:4e:bb:50:1c:2d:6a:22:55:87:8a:01:
9c:77:69:64:eb:28:28:6f:d5:34:19:50:4b:9c:c2:40:db:58:
8d:41:e1:a3:51:7d:9a:7e:a5:d3:be:62:f8:4c:95:81:28:0b:
04:61:a9:e9:c1:82:b1:a0:72:8d:ba:c5:98:0d:63:a1:88:51:
62:56:8b:94:99:1a:41:32:23:fb:7d:99:2b:cc:65:40:ea:99:
47:08:d3:0b:d7:95:fc:cf:99:64:fe:64:d6:27:d7:29:ef:d8:
51:2c:14:84:02:c4:fc:ae:22:b0:67:b9:22:7e:24:96:89:cc:
b8:8d:24:e3:a5:34:b8:53:d4:c2:16:6c:41:2c:f4:ea:10:f4:
0b:da:97:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:44 2025 by rpki-client