Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File: kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier: S+KrgzveEZtwokBxVfbwJG10fjb9dL20jVmMZcoGuS0=
Subject key identifier: F1:25:7F:14:90:C6:1C:4F:44:35:AB:BB:E0:BD:74:60:A2:10:8D:56
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 0199FBEAB7618EB4B93D9A16F20BC517E863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number: 15C0
Signing time: Sun 19 Oct 2025 10:01:27 +0000
Manifest this update: Sun 19 Oct 2025 10:01:27 +0000
Manifest next update: Mon 20 Oct 2025 10:01:27 +0000
Files and hashes: 1: 64T0ThntK_T_XpMgojpC9XD428A.roa (hash: IOm91WRA7m29s//pvbAOHwECZ0iF5k9Wr7VRSaUENC8=)
2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: zSX6xJGjZs8WNg/w8sV9kPE5BzdBEmZZ63fhWJfVR6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b7:61:8e:b4:b9:3d:9a:16:f2:0b:c5:17:e8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Oct 19 10:01:27 2025 GMT
Not After : Oct 20 10:01:27 2025 GMT
Subject: CN=f1257f1490c61c4f4435abbbe0bd7460a2108d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:f8:1a:c9:c2:7a:14:94:e4:2c:42:f5:ac:
5f:fd:ac:6a:02:e2:1b:93:ce:3d:f3:18:1c:98:3d:
5d:c4:f8:6e:fa:9f:83:2f:89:d1:bd:dc:46:ab:7a:
30:a2:ee:cf:bd:ab:1c:2e:17:29:6c:3c:88:0d:a9:
34:77:2e:ae:76:74:13:e4:f8:e7:7d:91:80:e8:e1:
29:ab:a3:1b:9b:ca:8a:a6:8f:a4:4e:7a:b8:79:94:
33:d3:8e:b1:9f:57:58:34:b1:9f:5f:37:d3:a3:35:
12:fc:b8:31:4c:db:cc:e4:6f:94:a0:2a:75:c0:b0:
4a:ea:77:df:a6:26:89:16:9e:c2:f6:3f:4d:67:4c:
65:86:3c:ab:43:12:43:8d:6f:ec:1a:1e:aa:af:ca:
84:da:fe:52:05:53:6f:49:da:4c:6e:c2:05:ee:2e:
54:4a:cc:b5:d2:e5:e3:79:94:6b:93:f5:69:78:04:
fb:dc:c0:81:f6:ff:bb:81:1f:39:4b:e0:ab:9f:1a:
7a:48:ee:33:67:af:ee:04:f6:c8:fe:ae:6d:b3:39:
55:f8:27:f1:bf:e7:3a:2b:fd:99:2c:e2:31:03:05:
fa:2e:b1:34:00:c8:bf:3c:36:4d:aa:3d:0c:0a:ed:
47:9d:19:8e:4a:4d:b3:fc:32:55:87:99:20:d9:de:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:25:7F:14:90:C6:1C:4F:44:35:AB:BB:E0:BD:74:60:A2:10:8D:56
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0b:ac:cb:40:4c:e7:81:06:5f:ed:61:6f:6e:a0:2b:ea:66:
d1:95:e8:4c:04:fc:ca:5a:33:a2:68:1e:b0:94:63:82:16:39:
04:e8:82:4b:ca:02:fe:92:d2:b3:4b:1a:46:90:f7:6f:28:82:
c5:ac:a3:70:b4:7e:1b:8d:c7:ea:46:06:41:0c:ad:29:a3:47:
ee:2b:d9:1e:43:88:1e:46:00:e8:91:7e:77:24:42:3e:ae:bf:
b3:c1:e5:fe:7e:76:6d:fa:0e:1d:61:eb:22:51:c6:73:b8:56:
94:de:a2:b2:88:39:76:21:35:40:77:6b:cc:79:34:10:39:b7:
31:f2:30:40:06:56:41:cd:dc:0c:de:07:26:7c:b3:04:69:6c:
f8:b6:7f:9c:96:c6:33:03:07:df:7b:d4:17:95:07:b1:2b:cc:
e9:fe:ca:9f:0f:9a:52:f7:0d:b7:b9:f2:ec:0c:c0:8f:dd:f2:
fe:c5:90:fe:ba:8a:32:63:ea:79:33:8c:f6:06:1e:ec:30:3e:
b4:40:7d:65:51:93:15:25:78:a8:5a:50:72:58:bf:a7:72:75:
8e:44:d9:3b:d9:42:eb:91:de:b1:88:3c:ad:07:3a:5c:2a:61:
f7:5c:2d:3e:44:c0:56:45:7e:ad:38:67:d9:fe:5a:61:14:e7:
70:f0:5c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:59 2025 by rpki-client