Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier: GwSeMyBpf+dJbW2EVDkv+hXzGtSTaO4X//ev5Cc6s6k=
Subject key identifier: 6A:84:78:12:69:CB:61:CA:AA:82:BF:56:7A:75:88:36:A5:28:6E:07
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 0199FCC65D9DF55C0D5B27EED57D6BC38DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number: 1630
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: nSCq9KmIR2A6W9gjfBUqR7Jx5njtfkbXnXdKRSlNaPY=)
2: fXGb1AdmtKED61MI3C4rhXBHP4g.roa (hash: eR+whMFm4iqXvD16fqLVfHjrwLVKXZG15LaXEU0R7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5d:9d:f5:5c:0d:5b:27:ee:d5:7d:6b:c3:8d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=6a84781269cb61caaa82bf567a758836a5286e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:37:fd:6b:38:80:d3:b8:bd:3e:1f:cc:61:
83:2f:16:3c:53:b0:fd:9c:ba:a0:92:f2:1a:a7:f4:
29:c1:9d:f8:40:79:fc:c8:67:ac:71:84:71:be:e6:
73:70:a0:f0:56:98:c3:7f:e3:57:bf:d1:69:70:1b:
33:5d:32:6a:a8:a3:b5:7c:13:31:ef:ec:9a:a1:64:
66:a2:cd:c9:e5:5b:55:02:57:2a:b5:59:30:b0:08:
e3:a1:24:c5:cc:74:88:e0:9c:c1:06:1b:ec:fd:54:
ae:19:d4:35:5a:4c:a2:66:36:3a:58:10:5f:82:f6:
49:16:70:63:49:48:8b:48:0b:e5:24:9f:31:56:cf:
77:39:51:e3:f2:8f:f1:1d:2f:ef:5d:ed:d6:a7:52:
2f:de:ce:d4:ea:23:3a:10:2e:75:78:93:8f:23:eb:
41:9e:24:43:c2:6c:c2:11:60:54:d7:6c:a0:c8:ed:
0b:66:4f:b2:6b:45:c2:01:a6:7a:89:f7:b0:34:47:
e9:0e:e9:f2:6e:5f:ce:b4:b4:41:07:c3:b2:6b:d6:
34:8a:d1:93:a4:b0:40:1e:02:12:01:c2:6a:83:21:
30:83:25:50:9e:b1:59:cf:70:65:49:8b:e7:df:7a:
35:ec:78:26:44:ed:28:29:7c:4f:72:4a:f2:72:eb:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:84:78:12:69:CB:61:CA:AA:82:BF:56:7A:75:88:36:A5:28:6E:07
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1c:1b:84:49:67:27:75:0a:ac:53:e0:f1:22:86:28:c4:00:
ed:79:d5:0d:5d:91:2c:fc:30:30:1e:fe:b6:e4:56:a5:99:fb:
a3:15:24:94:b4:66:0a:ae:fe:d1:a0:8a:9c:2e:15:58:fc:90:
08:e7:9b:04:9a:68:f4:5c:e7:01:12:30:fb:ab:df:78:89:22:
85:d3:01:5f:39:17:bf:b6:00:61:08:f4:e4:92:de:e7:cf:c9:
de:34:04:0c:29:4d:c6:d4:4c:1e:f7:f0:ba:ae:9d:e6:21:66:
bd:03:01:f4:d9:d4:ab:7b:76:bf:fd:f9:f0:95:47:ff:fe:49:
e2:8a:9b:fe:9b:8e:e2:65:e4:1c:f6:0f:d8:9b:4d:56:3f:a9:
c5:e0:a5:a3:40:69:ef:88:fb:2a:69:0d:99:e1:9a:3c:31:2f:
00:b1:43:87:f7:4c:fc:47:ed:28:7b:b2:51:e7:79:d6:5b:13:
55:94:3a:00:4e:2c:06:d6:77:7e:e9:88:73:09:3f:d9:95:c4:
bc:a7:16:71:28:9a:47:dd:51:ce:a3:f2:56:fc:e7:21:79:98:
94:49:c2:56:9f:6e:64:03:bd:2e:06:60:81:c9:ee:a9:d0:31:
3c:0c:cc:d5:41:62:66:a5:ef:11:31:cc:a4:65:f0:83:fd:fc:
59:56:75:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:17 2025 by rpki-client