Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier: zPw/YzKoMAYROnMbhpCT/XXtjMbtgwxvMw/rfPZDFXM=
Subject key identifier: 5D:BA:58:77:8C:6E:D8:20:89:52:FB:E5:26:42:48:2C:73:27:2F:C0
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 0199FC8F9942EA8FD9AE5E794C132DDBBEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number: 0882
Signing time: Sun 19 Oct 2025 13:01:33 +0000
Manifest this update: Sun 19 Oct 2025 13:01:33 +0000
Manifest next update: Mon 20 Oct 2025 13:01:33 +0000
Files and hashes: 1: EI7dYlJh6LhMXB8o9nb3T4Z5aSU.roa (hash: MmSw3Gp5lTTxkK0eiPx+eF3FQfljG+ipyig54PF6DUw=)
2: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: Q04El5oMqVtLGsDq3fQZI0kWpzicjxNHIbw93SFRCps=)
3: RnDsNDAUOmfocBcXgLTcHPDDhKQ.roa (hash: yyfreslJl3l+RdMxXIwzsT6k7E7HMN8jhFZGTbEdlJI=)
4: Y8zzieez_mdBu3g9ytJW3F1qtcM.roa (hash: IBQYnJmIJpRbjM/GjJNvEs/gT4e0NBRUv4AwTGSAB8I=)
5: _eEka1D2F9svheD7_1S50A6jg0c.roa (hash: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=)
6: jTf4hu8p-YdeMkBcAMreST3RURY.roa (hash: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=)
7: qV0bi1f4xUUogQC2jTvfOlCFNsY.roa (hash: JeZIDT/pHiJyZCYpNCof5wbSJ0INX3sJ+QZbs083uM0=)
8: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (hash: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=)
9: ueIl5HLpFqn43HBQc7-Q4ZVn06k.roa (hash: fzhg7jHCYT5oIQ824HH1vwjcqcxosVhT8YpZmbw8K50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:99:42:ea:8f:d9:ae:5e:79:4c:13:2d:db:be:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Oct 19 13:01:33 2025 GMT
Not After : Oct 20 13:01:33 2025 GMT
Subject: CN=5dba58778c6ed8208952fbe52642482c73272fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:6b:18:cf:c7:20:41:d0:d7:b3:ab:6c:ac:
02:f3:e8:e1:ab:0c:91:6c:8a:d3:71:dc:d1:f0:8d:
5f:58:24:f4:25:bf:c4:bd:d5:e7:99:e8:4e:d2:af:
01:02:d9:b0:2f:96:33:8c:cd:7c:a4:83:18:e1:87:
99:3a:8c:7f:ef:0e:8b:df:8b:c4:af:17:e5:27:9b:
cd:79:14:c8:63:12:05:75:a0:89:48:22:01:35:cc:
07:00:b6:d2:b0:c2:6e:b2:11:48:92:c1:a1:af:a6:
74:4b:62:5c:13:63:cb:1a:2d:df:dd:5b:2a:fc:55:
ef:42:89:30:a8:99:c6:8e:e2:40:76:9c:82:10:49:
27:6b:ce:81:19:8c:3b:c0:e3:ed:8b:8a:57:2d:ac:
b0:46:5f:c6:2b:95:64:bc:dd:77:10:ba:60:df:11:
fe:3c:e8:bc:fa:6d:4e:b5:0f:89:7a:51:d7:37:07:
c8:bc:86:d9:cb:f7:c7:09:0a:17:8e:ab:9a:a5:97:
50:67:bd:13:7c:58:bd:eb:ad:e2:58:48:67:c4:1e:
e2:33:18:33:a9:85:0a:e5:29:66:eb:78:28:d6:94:
55:a3:f7:9a:bb:86:34:4d:92:ae:d0:5e:0c:d9:ce:
75:24:e9:6a:12:ea:de:5d:3a:27:25:ce:8d:93:91:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BA:58:77:8C:6E:D8:20:89:52:FB:E5:26:42:48:2C:73:27:2F:C0
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5f:fd:70:4b:5d:15:77:cb:c7:96:b7:88:29:e9:54:9c:75:
47:fd:bd:2e:f7:4b:36:fc:53:90:6d:36:5e:f1:da:06:3e:8b:
5d:3f:22:b4:4d:db:93:27:21:7f:ca:b7:19:ae:2f:4e:22:d9:
8f:ba:d5:6c:c7:03:50:e8:7a:6b:95:c0:73:96:11:1d:6d:33:
2a:aa:11:e8:33:16:25:a6:ce:4a:51:bc:e9:1d:82:30:c3:e0:
15:f7:f3:bf:74:46:01:f3:ee:9c:d1:78:37:95:d4:79:c4:9a:
5d:61:78:82:2e:3b:9f:da:4e:32:ca:84:81:52:80:03:e5:da:
e1:25:4d:23:fb:8e:45:30:a0:17:dc:fe:26:a9:fa:8c:2b:06:
39:46:21:f8:02:d8:a5:a6:c5:21:b5:66:f8:00:dd:a7:f2:b6:
cc:c6:8b:15:43:e4:f1:b2:33:a4:32:06:38:82:86:42:77:c9:
8c:0d:c6:51:c9:86:25:1f:b9:2c:58:b9:82:66:e7:68:27:e2:
73:bb:66:d9:da:f1:b8:39:f5:b6:86:35:f3:b3:00:e2:88:a1:
41:63:5a:14:68:40:c0:2d:a5:94:ae:7e:0c:cc:3e:9b:e0:6c:
e9:44:ec:8a:5f:7d:88:d7:b4:5c:7a:10:db:db:63:78:b5:3e:
71:e9:6d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:32 2025 by rpki-client