Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: hxz4iN/4PJwG5IObj+5C79+ANnfKcUQ2miDRmuozmKM=
Subject key identifier: 30:62:5C:22:F8:C1:11:51:22:30:4B:FB:5B:28:63:06:40:A5:51:73
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 0199FBEA823C5FD4575EC99C0AC22541F349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 069F
Signing time: Sun 19 Oct 2025 10:01:13 +0000
Manifest this update: Sun 19 Oct 2025 10:01:13 +0000
Manifest next update: Mon 20 Oct 2025 10:01:13 +0000
Files and hashes: 1: fIvnp6gdPn80_yvJlotdGcog18A.roa (hash: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: fAKPiHqfS6gQMJL+/WkVJgbbB36AqFmH+vxS8IrLEpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:82:3c:5f:d4:57:5e:c9:9c:0a:c2:25:41:f3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Oct 19 10:01:13 2025 GMT
Not After : Oct 20 10:01:13 2025 GMT
Subject: CN=30625c22f8c1115122304bfb5b28630640a55173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:c0:02:4a:4b:6f:49:15:0f:e4:ba:2b:ca:
10:62:de:b2:68:46:37:c5:14:0b:51:c7:d2:a9:68:
f9:41:a8:80:fc:f0:ad:01:3f:30:55:1c:0b:27:ac:
e0:84:4a:51:77:78:0f:72:46:eb:9b:0a:4a:4d:34:
ea:f5:48:e5:44:9f:96:ae:90:29:2f:e7:a8:79:9e:
35:d4:16:2e:fc:b0:5d:03:4a:05:37:9c:c2:78:04:
70:97:5a:6f:5e:31:b3:e7:3e:cc:92:ce:79:65:f4:
80:c2:1a:46:5d:f4:d9:e0:f8:3d:e5:5b:bb:35:ad:
cb:32:cb:da:1a:97:cf:5e:3d:ea:c4:57:62:8a:e6:
48:d2:31:b4:5d:51:36:bd:c1:f7:f4:c8:46:72:54:
90:80:83:8c:00:94:cf:a5:1d:d7:15:8e:5f:56:0f:
25:03:da:16:6d:ba:9d:6c:42:a0:b7:99:06:96:de:
56:cf:b3:3a:4c:75:40:6f:e0:17:58:ff:98:ca:89:
45:ed:65:2d:9b:2a:69:62:d0:12:e5:e5:c5:9e:c2:
1d:70:49:40:6d:32:bd:e4:25:51:ec:c1:17:86:c6:
75:be:5d:c8:92:18:fe:fc:91:6e:cb:52:cd:8a:d6:
04:f6:fc:e9:21:f0:c0:a2:84:11:01:d6:25:1e:00:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:62:5C:22:F8:C1:11:51:22:30:4B:FB:5B:28:63:06:40:A5:51:73
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4d:1a:9f:54:ad:2e:83:31:07:c4:82:5a:ed:22:54:6b:4b:
31:57:e8:f1:c7:a0:09:d8:ed:28:94:e8:25:b2:e8:38:82:8e:
87:be:f2:05:ed:3b:90:2e:61:d3:97:44:ba:3d:2d:45:bb:8e:
fd:cc:85:3b:42:a7:f2:52:23:ee:a1:40:36:48:e5:59:89:d8:
4b:1b:2f:4c:65:d4:9f:0e:cc:0c:78:b1:e0:89:75:2d:21:b5:
42:6e:8a:b1:3c:4c:50:03:28:9e:4e:c0:0d:b9:74:5d:9f:1d:
29:9f:44:00:7b:e8:7a:9a:c5:20:b7:f9:80:0f:bc:dc:39:8e:
f9:be:c3:ee:94:55:9d:d2:21:ef:0a:7d:0f:f8:af:94:77:f4:
76:42:38:9c:90:4e:a4:02:48:cb:8c:2d:3e:f1:ab:04:de:66:
45:3a:da:5c:ea:ab:5d:22:aa:e5:03:90:d3:bd:52:c7:e0:61:
50:d2:35:20:a0:74:ce:99:a8:c7:ea:11:97:13:f2:10:2a:3c:
ff:28:d9:ab:b2:e6:6d:31:83:42:b5:c4:d1:43:a7:68:15:81:
f7:5a:8a:ea:da:15:65:ad:63:95:e9:d7:62:d6:a4:bf:63:bb:
bd:79:e0:f2:4b:70:21:bd:0f:39:94:8a:72:c9:7a:84:b0:63:
6b:41:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:13 2025 by rpki-client