Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json)
Hash identifier: hPoSPo1Hh8r80CVjTi+TkuUdLcvZSSmfOcHo7vWFzyk=
Subject key identifier: AC:8D:47:C6:DF:B0:59:DA:02:0D:60:20:88:6C:C4:CA:E0:DD:1A:74
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 0199FFFE28C07542122352764EF3857D69F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 05:01:10 +0000
Manifest this update: Mon 20 Oct 2025 05:01:10 +0000
Manifest next update: Tue 21 Oct 2025 05:01:10 +0000
Files and hashes: 1: JA1Qmok16UVDdfZh6XKyNHXDBms.roa (hash: R2I0tDS2SffmNY3pvYLLZlvv4NZOrPOW0QqVh2PyubA=)
2: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: Km8vnE8H7a+cYRVgIpdvcncVfqu7OEgWTSh8mPA6ugY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:28:c0:75:42:12:23:52:76:4e:f3:85:7d:69:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Oct 20 05:01:10 2025 GMT
Not After : Oct 21 05:01:10 2025 GMT
Subject: CN=ac8d47c6dfb059da020d6020886cc4cae0dd1a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:17:07:cf:f8:b5:20:be:40:c2:83:30:82:
7c:64:c3:6c:f8:52:6b:90:fb:84:7b:13:1e:fb:db:
36:e2:31:e8:24:ad:cc:67:97:36:07:08:ed:a0:ee:
3f:ea:df:29:15:48:db:ec:ff:e1:84:10:7c:64:47:
6b:b3:ef:7e:84:ea:7f:70:59:d8:3f:7f:0d:d3:56:
6c:27:ba:31:57:d3:77:6d:7b:cf:62:2b:c1:b2:d2:
87:dd:56:07:86:97:f4:86:af:8f:9c:e5:8c:55:74:
c1:b3:cb:20:c3:62:4a:70:de:d1:e6:fc:2f:69:f3:
85:15:b6:83:53:0d:6d:84:81:2e:8c:f6:15:ba:97:
e6:e1:8b:e7:2a:39:82:1a:35:c9:e1:9f:dc:36:a5:
c9:a6:19:e4:3e:01:1a:76:b1:2e:39:b6:87:d1:b8:
29:9a:e0:40:5f:d6:59:73:36:29:c4:1e:f8:c5:5c:
38:0b:bb:35:c5:55:08:6e:f7:21:40:fe:1c:4c:e5:
ab:fe:a9:84:10:7f:75:aa:15:4e:eb:45:5e:f8:9f:
5a:5e:b6:12:e7:e8:4c:5a:fa:c1:50:ed:7f:6c:27:
1d:a3:2a:ba:79:66:50:bc:3c:7a:a5:fc:e8:24:9a:
41:c6:54:6c:35:ae:4b:16:64:3b:cc:74:93:11:69:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8D:47:C6:DF:B0:59:DA:02:0D:60:20:88:6C:C4:CA:E0:DD:1A:74
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e3:64:ec:61:cb:03:d8:35:9a:ac:58:8b:ff:a2:2b:d3:91:
4c:64:ca:ee:03:41:07:bf:7a:36:a9:49:13:45:3d:dd:c5:9a:
ae:17:a4:20:e7:67:ea:75:87:d9:fc:86:a2:34:59:51:6d:87:
c8:95:41:9b:73:71:51:5f:d8:49:5c:91:03:7f:ab:4f:45:1b:
a6:0e:11:ce:cf:1c:be:18:8d:d0:58:82:81:a8:db:64:58:5f:
91:9d:b6:e3:02:1f:20:56:d5:7c:ce:69:ac:11:6d:38:2f:57:
38:c0:44:2b:d7:08:ec:3a:52:ab:37:64:26:7f:87:29:ab:20:
9a:a3:71:5b:eb:49:77:89:4c:27:05:7d:2e:fc:35:7e:5c:bf:
58:57:c0:cd:1a:bb:77:8c:64:c8:dd:da:08:db:fa:dd:da:ee:
1e:55:a1:46:11:dd:83:62:61:5e:f9:32:9a:ab:2a:10:56:82:
f0:2e:eb:c8:a5:28:d0:eb:41:15:ab:d4:4a:b5:22:a4:0c:4e:
07:2d:f9:05:53:ef:03:2d:36:b1:ac:84:0e:55:82:5c:e3:43:
bb:fa:9f:78:f6:b8:46:53:2b:39:e8:74:e1:d9:98:03:a2:71:
d6:6b:ed:e3:20:a6:1c:16:d8:75:cd:f8:d6:8d:c9:20:61:91:
04:3a:27:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:17 2025 by rpki-client