Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File: KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier: JAyuSgYc59ceQ40YqQZexa2IzVVSCoBZPCc1Fqsbtok=
Subject key identifier: A5:E9:D5:75:2A:13:15:27:64:CC:B8:45:A6:02:C0:C1:5B:76:60:71
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 0199FE0FEE531243FEDBC7FACECBD522F343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number: 16C9
Signing time: Sun 19 Oct 2025 20:01:20 +0000
Manifest this update: Sun 19 Oct 2025 20:01:20 +0000
Manifest next update: Mon 20 Oct 2025 20:01:20 +0000
Files and hashes: 1: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: B8PBlycrymMkVUb15qNtNx6jUwPkS93qm9S/3wDyNBM=)
2: piJhKM_we331Drsk15cixPVEH_I.roa (hash: NHNPopSWAyph5Bx3EeKPWL7ZkR7orplnRo1YXxckaSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:ee:53:12:43:fe:db:c7:fa:ce:cb:d5:22:f3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Oct 19 20:01:20 2025 GMT
Not After : Oct 20 20:01:20 2025 GMT
Subject: CN=a5e9d5752a13152764ccb845a602c0c15b766071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:a6:36:df:c8:de:8f:16:d5:4e:8e:79:7d:
cc:d0:ba:d7:86:22:44:e0:9a:92:f0:da:54:02:7c:
0a:21:62:4e:f4:f1:40:e7:ab:03:ec:62:1f:fa:62:
37:46:af:e3:d4:66:8b:1a:43:b6:27:bc:6f:d2:d3:
d2:26:3c:cf:fb:57:80:2b:25:94:60:8b:fc:c0:b0:
8e:cf:ce:a0:54:9e:69:6a:8d:35:a3:47:ce:bf:92:
d6:39:8b:f9:99:ab:fc:35:fb:86:5b:bb:2e:01:ba:
48:70:c1:5d:cf:d9:30:29:b5:a6:ab:db:97:c0:5e:
46:3b:6f:60:db:78:8a:83:61:69:ff:a7:cb:17:2a:
9c:11:1c:ad:54:27:e9:31:f2:50:60:81:19:15:53:
d7:ce:41:7c:39:90:37:78:e2:56:29:29:c6:89:d8:
0d:66:09:5f:d4:1d:36:82:06:c1:b8:18:1f:6f:b0:
5e:92:04:43:d6:15:a2:20:67:71:3a:d8:f2:4c:9e:
7d:2f:52:bf:ef:43:47:cc:2c:99:3d:81:a5:2a:6f:
e0:d5:78:c0:2e:7b:14:3d:b2:76:97:90:29:5a:8a:
60:3d:b4:76:53:ec:2a:e5:7a:65:92:be:4a:66:b1:
77:48:19:f3:0a:19:21:0a:30:71:ab:f6:3f:f7:a4:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E9:D5:75:2A:13:15:27:64:CC:B8:45:A6:02:C0:C1:5B:76:60:71
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6d:e6:f5:e2:9b:80:41:18:60:40:a3:0c:6f:f2:53:e7:39:
25:e6:30:c8:e7:47:0b:9b:20:d4:1e:29:44:14:b9:e1:2d:e0:
5c:06:b9:a7:c3:9f:25:ed:9e:9e:62:c5:c7:91:d7:f2:21:37:
40:cc:e7:51:05:66:25:52:90:4a:06:a9:4d:5e:68:30:46:e0:
28:a6:83:c1:d6:12:04:ea:64:46:a3:e1:9e:66:2c:cc:43:eb:
fe:2c:e8:3b:de:43:db:5a:bc:9b:e6:6c:2d:26:7d:eb:74:98:
c3:80:f8:33:2b:b5:da:ee:b1:5b:64:61:80:f7:25:ab:2d:a0:
0c:50:c9:7c:e1:92:7e:ea:ce:e8:0a:b2:b8:15:73:03:64:d3:
59:74:dc:aa:11:15:26:6b:19:88:ba:37:41:68:53:c7:2c:81:
35:58:70:e4:d3:1a:2c:82:d3:b6:6c:d8:5e:ae:78:d7:cb:56:
23:74:71:5e:95:4b:aa:ad:a4:f5:d9:db:af:15:9b:d6:65:76:
28:1e:21:71:d9:39:6a:54:73:17:c3:a1:0d:e3:01:f9:e9:c2:
19:e2:0c:24:4e:35:8d:a5:c2:e0:10:fe:66:22:d4:9b:2e:fe:
66:f6:47:92:6d:0d:6e:16:a2:f1:66:f7:ba:fc:28:49:6a:c8:
6e:1f:54:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:56:24 2025 by rpki-client