
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File: KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier: F21y4NGgj4jKx7GOz9IpxizPjvnIGqAJbGF4l8yUU20=
Subject key identifier: AE:18:B8:E3:67:F9:C6:48:68:31:75:B2:3B:6F:70:63:13:95:7B:D0
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 0199FDDA92711CC0173F79C2A8EE2BD284BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 19:03:03 +0000
Manifest this update: Sun 19 Oct 2025 19:03:03 +0000
Manifest next update: Mon 20 Oct 2025 19:03:03 +0000
Files and hashes: 1: 8TWqg3TfqZs_5FrvevicA08_Me0.roa (hash: 4Z8rTsO/+irkApy694NCfCAKUJGTnN/zDl7bvRScmHU=)
2: E0LmXjQbMH-5PikYPEcuzzsWqGg.roa (hash: ptzM6Lx0G4exHD8wnG0yaiK9TLZgE439UHeYQgYNx5s=)
3: GKCHcnuOeAwv2OrVrhhlx1glPKg.roa (hash: lsZazQ3pOXhSWOPU2R2jWTWFqUlOxcs/A3f1wvZkH2U=)
4: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: bUsuuXIrAB0nPURzoGHZBojcw7r7jwnPr1AI1giuYLY=)
5: wTbdYlsUFkp3d9dHZust_Lw_6AQ.roa (hash: OT9PLyVKPfe5qaWoveQ3/agGSLh/5l0V3Q2WNMZnLKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:92:71:1c:c0:17:3f:79:c2:a8:ee:2b:d2:84:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Oct 19 19:03:03 2025 GMT
Not After : Oct 20 19:03:03 2025 GMT
Subject: CN=ae18b8e367f9c648683175b23b6f706313957bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:ba:d6:4f:14:23:a5:35:6b:b1:84:45:15:
f7:16:42:1f:e2:64:05:5f:c5:07:f3:75:ef:2f:b0:
14:1c:e9:c1:f2:d8:e2:19:9b:1b:7c:36:06:12:0f:
c2:ec:0a:71:c4:a1:fd:ad:7b:f6:b3:35:f5:dc:6e:
9b:b8:b9:3e:b9:26:3e:52:7c:21:a2:12:64:a4:9e:
ed:cd:c0:68:12:11:e6:9f:46:fc:21:c0:5d:8b:39:
ba:e8:65:e7:ae:a9:9f:93:40:d8:c8:18:0b:f4:b0:
d9:89:7f:9a:1a:6b:20:9b:91:69:a0:a1:6b:b3:d1:
48:e2:4a:e5:8e:de:c8:2d:62:31:6b:47:f0:15:ec:
12:2a:ae:3d:ba:d8:05:bf:17:31:5e:67:11:e6:be:
bb:dc:71:40:03:68:82:eb:61:71:f2:d1:2e:db:98:
0e:a1:d3:27:be:64:ea:cf:7c:98:16:23:21:35:b3:
80:74:f5:35:4f:5e:06:18:ec:d9:ed:48:66:4e:c9:
1d:ec:30:90:78:86:f5:e4:3e:8c:26:bb:a2:96:72:
14:95:06:85:e9:01:3e:e0:b2:97:b9:3b:a0:30:d1:
41:68:79:ca:01:58:07:5b:85:55:55:8a:05:68:0d:
7f:a8:eb:5b:40:dc:f8:91:77:6f:74:07:76:07:6d:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:B8:E3:67:F9:C6:48:68:31:75:B2:3B:6F:70:63:13:95:7B:D0
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:51:60:2a:fb:83:d1:ab:94:f6:12:3e:4c:e6:89:b1:25:30:
d5:16:d4:56:5b:36:5b:b6:df:d5:56:42:26:7f:bf:2b:58:da:
4e:7c:dc:1c:1a:c2:17:8d:49:5e:69:f0:25:5c:39:96:60:4b:
e6:3d:2f:0c:b6:ad:d6:a5:fa:fb:a1:96:ab:e0:f8:da:aa:21:
55:ea:fc:12:cf:98:81:1e:54:e0:82:fe:9d:f1:93:0b:c8:c3:
56:54:ef:6a:42:c7:02:c8:b4:b5:fb:1f:7d:45:87:33:5c:13:
0c:10:57:da:df:b8:17:45:3d:03:64:87:be:32:99:0f:d1:79:
95:c7:ec:ae:21:c7:f5:da:93:4a:c2:ed:6b:8b:8d:16:67:f4:
54:ed:c5:70:bc:34:39:b9:3e:36:c4:e6:66:97:b9:84:5b:ad:
da:8f:34:71:38:7c:81:d5:08:b5:10:d2:6d:c5:c8:7c:31:2c:
65:ff:66:66:ea:76:b5:9b:64:ec:f2:cd:1f:55:00:4d:28:95:
70:87:fc:e8:77:d7:5a:04:64:f5:c8:eb:55:8e:9c:44:a4:22:
27:4e:12:ba:d4:b6:42:c2:a4:64:c3:2f:43:be:6d:ee:1e:b0:
5a:cf:84:9a:66:23:4b:a4:d1:42:b8:07:97:f2:2e:bc:2c:e9:
fc:19:07:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:13:56 2025 by rpki-client