Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
File: KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft (raw, json)
Hash identifier: KN5BZtl4C+/EjiiR3AuvkDDJJMnMQNbkpmt2dI+C17o=
Subject key identifier: C6:95:95:26:FA:2E:42:E2:28:34:67:DE:EC:CD:67:33:EF:60:64:FE
Authority key identifier: 2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
Certificate issuer: /CN=2aa380e230cb334361b4861e2f694124387f8529
Certificate serial: 0199FDD8F77843ADB80408453329FC7E7191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:01:18 +0000
Manifest this update: Sun 19 Oct 2025 19:01:18 +0000
Manifest next update: Mon 20 Oct 2025 19:01:18 +0000
Files and hashes: 1: KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl (hash: EmK1S17tPaAMiA60bAOPJCkNyv8glQrt63LSK4e39Io=)
2: SjvSMbvX_pvw3i1Pn6Bx1TTyu6U.roa (hash: kgWKItzA9z25TXtV7XlZgfoMV6KRvWKz0GsOPfm6isI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f7:78:43:ad:b8:04:08:45:33:29:fc:7e:71:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa380e230cb334361b4861e2f694124387f8529
Validity
Not Before: Oct 19 19:01:18 2025 GMT
Not After : Oct 20 19:01:18 2025 GMT
Subject: CN=c6959526fa2e42e2283467deeccd6733ef6064fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:df:3a:e7:0c:e6:56:0b:03:67:32:a8:76:31:
75:37:4c:a4:cf:fa:46:64:84:dd:dd:bc:80:60:9c:
d6:12:16:af:04:d3:d9:c9:0a:55:b0:92:24:68:7b:
e3:a9:aa:38:cd:88:31:c2:31:90:c8:a6:ae:14:5c:
8a:43:73:4b:0c:61:3b:5b:0a:c7:e5:7e:21:99:ed:
d9:5e:fc:bf:64:39:f6:95:fa:2a:de:b5:1f:bc:f7:
18:c4:a0:56:d1:6b:b6:4e:22:07:93:24:99:bb:32:
5f:ef:65:ca:97:e8:8f:b3:77:eb:d2:7b:32:42:87:
84:d3:41:71:c7:07:35:84:d9:0c:4f:ad:5e:4b:3a:
81:d7:90:93:15:14:8d:d3:b8:95:93:7f:2b:5e:74:
f5:d4:d6:40:18:83:84:41:27:a7:1a:38:8a:55:bb:
c4:9f:d9:4d:20:de:5e:89:5d:75:e9:25:a8:fa:35:
5b:65:da:55:08:f7:35:c0:45:f9:5e:82:13:1b:47:
63:e9:81:2d:db:ce:21:c2:8c:7f:9e:6e:5e:1a:85:
89:67:7f:56:35:b5:45:19:bc:d1:98:fc:6b:ea:a2:
d5:fb:71:bd:18:1b:d8:8a:10:af:e1:75:04:5f:73:
d4:ce:c9:7a:27:f1:a1:0b:f9:a1:dc:97:cc:eb:5b:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:95:95:26:FA:2E:42:E2:28:34:67:DE:EC:CD:67:33:EF:60:64:FE
X509v3 Authority Key Identifier:
keyid:2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:61:c8:15:cc:f1:e9:8b:c5:4b:0e:16:bc:00:19:b7:2c:cb:
1f:6d:84:6f:fe:64:e6:17:4e:89:10:76:79:22:a4:04:80:21:
12:f2:e1:a4:0a:13:59:28:80:2c:4e:d7:d4:e1:c8:83:37:4a:
61:e7:0d:bb:92:75:02:cb:44:a1:bc:02:3c:d5:ab:ad:b5:71:
bd:86:93:ca:64:7a:5c:64:eb:40:79:fa:8a:ab:82:5d:50:58:
fc:3f:a3:d6:af:69:f9:53:b3:41:74:7a:7b:4f:1f:bb:84:f9:
00:9a:a6:19:1c:50:68:b5:81:46:81:48:1b:78:06:36:47:f4:
14:15:f4:bb:0b:b0:05:10:9f:9b:19:33:ff:f4:94:c0:21:4c:
ed:03:36:3e:e4:1f:0c:3f:69:3e:7a:3c:b2:bd:c3:10:1d:21:
31:d1:d5:d7:a9:d5:68:57:16:b3:22:49:3c:1f:37:89:e0:08:
ba:c0:4a:b5:33:46:2b:23:69:3a:21:26:eb:24:1b:d1:cd:51:
63:26:ec:94:5f:bb:21:51:0b:96:98:9c:d7:7f:ba:b7:75:26:
a3:72:aa:89:ab:1c:79:46:6d:d2:8d:9d:54:c3:87:26:13:10:
34:92:53:ea:d1:88:fa:7d:71:ee:ca:b9:52:4c:01:1d:26:34:
58:47:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:21 2025 by rpki-client