Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: krWptXcKxNbbUIqUFLaEgMxLHPLwfR8fk9momwFGohE=
Subject key identifier: 73:56:90:88:89:80:F9:68:2F:7D:71:F5:09:3C:13:0F:65:D5:A6:45
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 0199FD6ACF6009FAF7BBF4BCEBC25E663ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 03F9
Signing time: Sun 19 Oct 2025 17:00:59 +0000
Manifest this update: Sun 19 Oct 2025 17:00:59 +0000
Manifest next update: Mon 20 Oct 2025 17:00:59 +0000
Files and hashes: 1: 4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (hash: ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=)
2: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: ewzEH59PlL1WhciLDspwc7dREP1SfrVyKmxf99kii3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:cf:60:09:fa:f7:bb:f4:bc:eb:c2:5e:66:3a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: Oct 19 17:00:59 2025 GMT
Not After : Oct 20 17:00:59 2025 GMT
Subject: CN=735690888980f9682f7d71f5093c130f65d5a645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:0d:9b:87:16:6d:1c:f5:75:bd:c2:a8:2c:
2a:93:9a:25:91:cb:8d:80:7c:92:b3:59:74:44:ad:
3e:a8:1c:e4:78:3b:f5:ee:b6:3f:87:3f:6e:cb:90:
e5:cb:19:ec:f2:eb:25:10:85:6f:a1:e1:c3:de:c0:
40:0b:c9:f3:de:3e:ba:e3:1e:4a:88:0d:ad:4b:56:
52:4a:ce:a8:c0:01:bf:cc:82:91:93:20:fe:39:ad:
51:6a:5c:0c:2c:0e:40:bb:6d:e5:81:35:34:64:cd:
f9:16:15:9d:14:69:e4:62:39:58:5f:09:eb:39:3c:
44:34:c6:5a:c9:26:1e:70:ac:b3:58:c8:d3:d3:86:
a7:cb:fb:8a:69:2f:55:e9:9d:6b:fc:87:c4:b1:b1:
11:28:3b:8c:60:b3:d0:08:fa:46:2e:34:8d:20:8e:
0e:f4:40:9a:f6:9c:69:aa:6a:4a:bd:62:a5:dc:b3:
a2:f9:b9:63:5e:2a:e2:75:bf:49:ad:90:7d:25:3d:
7e:d0:bb:bc:8c:0b:76:da:8b:07:cb:94:b9:e8:63:
35:8a:12:7f:f0:43:6a:6d:ce:86:09:fc:4d:37:2a:
dc:ee:7f:14:90:72:b0:86:e1:be:63:95:93:3a:06:
5e:28:3e:85:37:65:ce:72:3c:3d:32:17:42:06:36:
69:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:56:90:88:89:80:F9:68:2F:7D:71:F5:09:3C:13:0F:65:D5:A6:45
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:76:b3:a2:30:f6:ab:c9:40:8b:f0:c7:cd:e1:03:61:f8:75:
96:c8:32:10:50:57:3b:e1:0a:91:9a:11:f4:ff:c7:04:0d:73:
9b:67:c6:a9:a0:6e:7b:82:30:f7:9e:0e:d3:54:36:6f:69:24:
18:ed:4a:13:a6:b4:c1:b9:87:77:34:61:a5:5c:45:20:ce:ae:
dc:ae:0f:72:ef:06:e5:2f:75:f3:76:40:fc:31:99:17:3f:63:
98:a9:09:db:90:d5:d4:3d:ce:5c:83:69:71:07:bc:14:83:47:
32:a1:e4:cc:61:46:59:a6:3e:a2:55:94:ae:8e:ab:e2:53:5d:
00:63:cc:1e:90:7c:be:be:d0:3f:48:70:0c:02:34:37:19:a3:
f7:6b:be:00:87:15:13:53:19:ca:67:f2:bf:84:55:89:cd:87:
2c:81:0b:c0:77:97:d0:c0:c8:28:28:07:e2:35:59:ee:b7:a5:
65:82:f6:04:86:0f:f2:e1:39:05:40:22:d2:97:d0:71:b4:ad:
1e:bc:2c:df:e4:9a:68:1e:a4:1c:5c:70:0f:c6:b2:13:74:56:
f5:c6:d4:6a:c3:e9:34:21:2c:95:2b:d2:54:33:68:b6:82:2f:
a2:06:88:bd:59:a7:6f:24:25:bb:b4:e4:aa:7f:10:a7:21:69:
40:44:62:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:25:58 2025 by rpki-client