Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
File: KrMqUfAYgPSEFWkbYAi482mcND0.mft (raw, json)
Hash identifier: CTbVgiZwkxeDcDs4GnRmJ5h+l89DStDMWLSX1410C+M=
Subject key identifier: 6A:55:86:D6:2C:34:07:A9:DA:F0:49:87:26:15:20:24:7C:C2:C6:A1
Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
Certificate issuer: /CN=2ab32a51f01880f48415691b6008b8f3699c343d
Certificate serial: 0199FB45E8AA6F62B459533D659A703FDA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:26 +0000
Manifest this update: Sun 19 Oct 2025 07:01:26 +0000
Manifest next update: Mon 20 Oct 2025 07:01:26 +0000
Files and hashes: 1: KrMqUfAYgPSEFWkbYAi482mcND0.crl (hash: VxJwKh023sTk0CWr2M6ZEjG96Q+QPVnaGijav6pUsnQ=)
2: i9bRqGmLoNeEMEQG2gZoK39jq_M.roa (hash: QM3nqUsH3GUvguf6sXYPTlR1T5XaS6Z20/NPBnkA7vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e8:aa:6f:62:b4:59:53:3d:65:9a:70:3f:da:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d
Validity
Not Before: Oct 19 07:01:26 2025 GMT
Not After : Oct 20 07:01:26 2025 GMT
Subject: CN=6a5586d62c3407a9daf04987261520247cc2c6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:f4:50:50:c7:f6:aa:cc:d7:35:70:80:7e:
b5:12:6f:0d:6c:2d:26:70:75:58:bd:2c:ae:3e:ee:
4a:3a:06:26:ad:5d:a5:be:eb:c1:33:22:95:90:ca:
e1:9e:52:f8:73:90:18:35:8d:76:9e:32:74:9a:9e:
82:04:ac:cd:f4:5a:5d:d7:62:e9:5b:f3:fa:e3:ec:
a7:56:7a:54:76:46:8a:6e:db:76:0b:82:96:d7:cf:
e0:32:61:14:91:de:95:5e:7c:2b:a3:cd:0b:36:ef:
f5:d9:26:50:56:ba:25:96:da:20:9f:61:46:b2:d3:
67:12:ac:0e:04:3e:db:42:62:5d:18:d0:a9:c0:34:
1d:57:79:f8:e7:ff:af:f4:e2:56:e2:6f:c8:49:a4:
a2:e9:68:0a:bf:af:c5:4b:ef:8f:4a:34:27:04:ea:
13:fd:ec:8d:c3:a3:92:7d:4c:7a:48:e5:89:45:3e:
6f:21:14:4a:76:07:d6:21:7e:ac:10:81:16:63:00:
e9:9b:9c:6b:5a:a0:1d:23:8f:01:cf:01:6a:0a:73:
d5:2d:32:23:ba:2a:22:0a:5c:ff:3f:92:3c:86:cb:
2e:a9:91:89:6f:2c:d0:92:93:0e:5d:14:ce:12:7e:
79:d5:41:8d:da:47:0b:6b:0d:30:4d:e2:2f:95:6a:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:55:86:D6:2C:34:07:A9:DA:F0:49:87:26:15:20:24:7C:C2:C6:A1
X509v3 Authority Key Identifier:
keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d0:39:05:d6:2f:0c:77:fd:09:fd:02:e4:75:38:b7:d4:b5:
b2:11:18:18:30:c8:8d:f1:91:5c:e6:3b:c9:b1:fc:ca:a2:dd:
f3:9a:84:94:b4:a7:c1:12:a7:22:4b:10:da:71:35:4e:8c:69:
52:cd:29:fb:d3:5f:a7:83:e2:51:e7:56:97:07:a3:7d:b6:d2:
e5:0f:46:04:64:c1:88:2c:0f:8e:a9:ee:c6:1d:0e:1d:d9:50:
1e:a9:54:76:b7:ef:8d:b0:5d:e6:33:2e:3b:b0:62:1c:30:6b:
60:83:76:dd:81:48:d5:c1:25:b0:ed:d8:7d:a0:fc:08:59:e6:
e0:b3:81:5d:64:1d:e0:99:1f:7d:6e:2b:e7:59:4f:03:9e:fe:
3b:42:80:36:ce:dc:9b:26:4f:e3:54:4f:a5:bb:39:12:98:90:
1a:e7:20:25:e8:8c:b8:61:a2:4d:23:4a:29:ed:68:f8:60:dc:
56:d9:78:0d:d4:13:d1:25:e7:73:db:99:21:cf:b4:7b:e1:70:
35:4b:4e:87:03:9e:43:7a:49:a0:7d:c8:9c:4a:9a:c3:21:6d:
46:62:c0:39:e7:48:a3:f6:df:10:f4:8e:87:34:c0:40:b9:a2:
a7:b4:1b:3e:9b:81:ec:29:41:19:1d:25:4e:15:b5:31:0e:c0:
aa:da:e1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:11 2025 by rpki-client