Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: w78aM/gKz5EaIU/DncOMYjP7utnIijZMNlTqgU+TG7k=
Subject key identifier: F3:45:97:97:32:A9:91:3F:93:83:B6:B4:73:78:07:03:93:BB:80:77
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 0199FF599B995D039F182FA4858D1AF9CC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 12F3
Signing time: Mon 20 Oct 2025 02:01:26 +0000
Manifest this update: Mon 20 Oct 2025 02:01:26 +0000
Manifest next update: Tue 21 Oct 2025 02:01:26 +0000
Files and hashes: 1: JePrT9N5p_vpcuN2wLJvV6n4f0o.roa (hash: ec+cmY8FX0sUxq4KIX8YI3T2SVi2Yc81u8O7CEJnLdo=)
2: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: SLQCGtML9Lm85zOkOzd/iDpP8bjXhYt09VOyvBo4kW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:9b:99:5d:03:9f:18:2f:a4:85:8d:1a:f9:cc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Oct 20 02:01:26 2025 GMT
Not After : Oct 21 02:01:26 2025 GMT
Subject: CN=f345979732a9913f9383b6b47378070393bb8077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:60:ab:57:22:95:54:b3:1f:ad:de:67:22:
72:cd:50:2b:e7:06:47:1a:72:21:b9:ec:45:0b:e5:
41:27:ec:29:cc:52:6b:da:a7:13:8d:fd:ff:14:2e:
e8:2c:db:74:ef:e8:16:9e:1d:fa:7e:78:d5:d3:21:
bd:d8:c6:02:0e:05:c6:0d:07:6a:02:1f:4f:37:9f:
56:ba:94:c3:e6:eb:7d:cb:c7:54:54:9a:0e:f8:93:
0e:2c:39:23:1a:83:aa:a8:38:b2:06:1e:ac:06:71:
c5:05:3f:9f:af:f2:61:e5:b0:16:2d:3f:31:14:ab:
52:17:c6:1e:18:3b:c5:aa:89:92:61:5d:a6:9f:c6:
38:8f:8a:00:68:f4:50:00:40:97:a0:db:a2:66:58:
a4:43:cf:7e:cb:e8:fb:03:49:df:4c:0a:54:75:7d:
b2:07:5e:b1:84:e7:8c:43:70:04:e3:1b:a4:d4:6e:
51:c7:52:0d:cf:f0:c7:8f:32:f6:f1:cf:60:72:e6:
57:89:08:35:71:f4:65:ed:06:10:77:5b:df:71:d1:
b7:d2:f4:c0:aa:ef:d3:5f:6a:40:46:5c:0d:f4:7b:
fd:2d:b7:c0:c2:40:4d:cc:6f:76:1b:5f:80:dd:a2:
b0:f1:fa:62:24:44:76:83:6b:e9:2e:c5:79:1e:16:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:45:97:97:32:A9:91:3F:93:83:B6:B4:73:78:07:03:93:BB:80:77
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:cf:80:71:00:f2:45:83:3d:bf:c1:c0:75:04:c7:3d:5e:29:
43:d5:c8:14:9f:cc:f8:f2:a9:e5:02:0e:c2:6f:70:f6:79:ea:
3b:97:dd:ad:41:3f:14:12:fc:f6:b4:68:4e:40:07:bc:e4:19:
f7:a6:ea:00:20:7c:d9:6f:3c:0b:96:5c:ec:a1:4c:1a:89:67:
48:78:67:66:13:c7:0c:98:b0:9b:74:12:a4:31:f7:98:80:81:
e5:86:c6:8e:53:ed:58:04:36:1f:39:b1:d7:df:51:ca:31:0d:
db:71:9f:0b:39:57:2d:0a:13:49:31:61:e4:ed:6a:72:92:49:
21:f7:16:cf:88:a1:6a:ae:40:89:ff:b1:24:bc:74:df:8b:9d:
cd:14:9c:53:69:3e:dc:57:62:b0:b3:05:c5:68:28:73:3b:0b:
ef:66:46:1e:dd:2b:ec:e6:2e:7f:d6:b7:e4:7d:b8:61:a7:ff:
be:22:53:5e:e5:ac:59:66:61:48:e8:9f:c3:00:f3:77:36:b6:
11:12:87:a4:24:6e:20:ea:17:79:f6:02:a9:bb:66:0c:a2:69:
cf:96:15:74:39:e3:d3:58:9e:5e:d4:af:36:63:45:aa:a1:5a:
52:75:7e:e4:b3:d6:b7:9b:b7:c7:13:3a:ac:e7:ba:ef:a6:fd:
c1:67:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:04:24 2025 by rpki-client