Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier: TdLSYsknBBX6YGm9cLYaOT7o3fTjpISRSF74yGx39fc=
Subject key identifier: 07:5F:C6:4D:1B:4F:8C:E9:AB:4A:5B:9A:79:7E:C8:8B:FE:BE:88:56
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 0199FBEB14FFEA6C7ECD05609721D97BDAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number: 0DAE
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: SxCAWtOlZ8W6D4un2mkWMgsM5Ogjsl32N+VWcq/II6w=)
2: qZc8LbpaDAe8YC_wNESeZVdptts.roa (hash: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:14:ff:ea:6c:7e:cd:05:60:97:21:d9:7b:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=075fc64d1b4f8ce9ab4a5b9a797ec88bfebe8856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:14:51:c2:e4:17:73:c0:15:69:2f:5f:05:
9c:66:c3:16:27:2d:28:9c:ec:ad:c2:1e:a5:0c:b4:
d1:8f:45:ce:0e:c6:28:48:28:c0:d4:8d:10:63:c9:
74:ea:68:3c:64:d8:79:4b:32:cf:39:f1:05:b8:88:
34:e1:8a:17:0d:ba:aa:de:76:1e:7f:76:25:c8:97:
2a:9b:f2:c6:92:4c:8e:da:c0:d3:c1:ec:9e:d5:01:
8c:84:39:52:b0:72:f2:3c:b5:2a:6d:9a:91:d8:44:
19:ce:5e:e2:fb:51:be:98:96:b0:11:d4:87:83:30:
1d:6f:a0:2e:54:bb:dc:21:c0:2b:8b:58:4f:b2:15:
7a:fa:be:21:3d:24:1b:83:1e:83:2f:d5:c6:b1:48:
f6:1c:95:dc:28:8a:d1:dc:12:05:75:a7:14:4a:26:
d2:e7:21:8c:07:c5:fe:4f:05:c5:83:2d:85:c2:2d:
5e:be:9f:ba:5a:b9:3b:5a:84:6b:6a:cc:4e:bd:a8:
54:84:7e:89:f6:8c:e9:a8:2b:d1:d6:5b:57:b3:83:
e8:cb:46:31:57:67:5c:99:08:71:e9:c8:47:dd:f8:
a0:b8:8d:08:cc:9d:f0:3f:50:66:ee:87:ba:76:66:
d7:22:59:55:27:44:41:c3:37:9b:f1:72:3b:77:c0:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5F:C6:4D:1B:4F:8C:E9:AB:4A:5B:9A:79:7E:C8:8B:FE:BE:88:56
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d6:4f:1e:c0:4b:45:32:49:c0:d3:49:dd:46:ba:4b:8f:87:
7f:c0:d3:ac:b2:13:0e:46:13:af:d9:3a:79:06:b3:e1:53:98:
6d:77:9b:99:56:cd:86:1b:e6:ef:35:3f:83:90:e7:95:44:a8:
80:fe:fc:e7:96:42:22:b9:78:4d:0a:69:35:2a:c6:37:98:98:
44:2e:d7:a4:ac:0e:e1:a2:83:87:f8:b4:55:fc:02:1c:3b:dc:
74:e4:97:ee:df:44:5a:b4:19:ef:de:d3:95:e6:99:e5:ae:0c:
39:63:72:58:a6:ff:83:f4:7e:7d:f7:3e:da:a5:84:ff:ae:95:
91:53:dd:54:37:80:c6:c6:ba:62:77:c5:1b:30:69:ea:e0:79:
3f:13:78:2c:45:4e:03:41:a5:e4:8b:c0:99:d1:52:39:ec:06:
e3:fe:7b:96:21:25:6e:27:32:16:54:dd:2b:e4:73:ef:c7:87:
a5:c4:e8:e6:17:f4:d7:f8:39:29:47:9f:b3:87:9a:cf:1b:4c:
fe:d6:c6:68:8d:f8:50:3b:6b:08:94:10:ba:f2:9b:74:40:d3:
6a:6f:dc:1b:4e:62:a1:8f:ee:7b:3e:ce:6d:45:e0:43:76:15:
65:60:c3:0e:24:40:3a:64:6f:e4:25:4a:65:f1:05:de:9f:cb:
54:20:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:13 2025 by rpki-client