Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: R5q2DsQ5MLIm/YTbno2F1RcJWGPeVoL9Ly/zKjCMf/A=
Subject key identifier: 63:CF:26:CC:20:E0:85:85:BF:72:60:49:15:07:FC:CA:79:7C:B2:BA
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 0199FD33F833F20F0860EC8BD3BB60980371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 0FDE
Signing time: Sun 19 Oct 2025 16:01:05 +0000
Manifest this update: Sun 19 Oct 2025 16:01:05 +0000
Manifest next update: Mon 20 Oct 2025 16:01:05 +0000
Files and hashes: 1: 3YY6GiMAHoxwyM3tSzQ_rLqI6Qk.roa (hash: LKb1pDdE0gPQ1/qoBSBh29z3OF0TSjmwJB0/pkVjbww=)
2: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: 4pPpgtvAstN1gC5oAcSYeGuVOuko3crfq9lPAX32PI0=)
3: qVZvmvoLKS31NPSfpMQJyaGRrqk.roa (hash: SULs7/ySz/dcjuHf4saElB1X8gAKzCb6LN3XcIMxsQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f8:33:f2:0f:08:60:ec:8b:d3:bb:60:98:03:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Oct 19 16:01:05 2025 GMT
Not After : Oct 20 16:01:05 2025 GMT
Subject: CN=63cf26cc20e08585bf7260491507fcca797cb2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:6c:0d:1e:ad:97:84:ce:88:54:a0:65:19:
24:f2:b9:78:3d:7e:e0:20:97:d3:f7:6a:67:e4:85:
f2:24:0c:2c:22:91:77:43:b9:51:86:51:d1:ec:7f:
5b:24:f5:77:02:1b:fb:02:7c:2a:01:99:7e:22:bd:
7f:3c:d8:3b:c4:0a:5b:3d:b6:be:e1:55:a3:42:86:
30:db:91:d7:f6:a6:ec:65:a1:d2:59:34:4d:e5:eb:
95:ea:c7:dc:17:41:23:22:2d:6d:2d:93:c5:57:e0:
c0:3f:5b:fe:f7:46:51:4a:72:20:87:c4:bd:be:90:
be:7b:3d:c4:36:75:93:6a:e4:c9:99:82:36:0d:69:
6c:9e:81:24:f0:6e:61:62:df:3b:cc:90:2c:84:f1:
dd:f0:58:4c:5a:14:ad:04:71:34:85:1f:cb:03:0d:
94:ab:a2:4a:fd:7d:d2:6a:a2:9e:b1:5e:a7:aa:cb:
5e:e7:71:38:64:3e:a5:45:36:a9:bd:ef:d5:f1:8d:
ec:e3:4c:f0:59:05:d6:93:89:2b:83:4a:58:21:4b:
64:fa:31:ce:78:ce:0a:05:f3:ac:03:f5:37:35:f2:
f1:bc:c6:94:04:f7:36:0f:ab:60:ed:ef:42:77:e4:
c8:19:2e:96:fb:e1:6a:35:3f:10:b4:f3:5d:ca:11:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CF:26:CC:20:E0:85:85:BF:72:60:49:15:07:FC:CA:79:7C:B2:BA
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2c:a6:57:d3:be:d9:2a:f7:e9:de:3d:87:51:c9:40:87:f0:
22:d0:a4:d8:67:b6:35:b8:49:bd:49:45:4f:0b:2d:ed:1a:6a:
e4:23:75:81:b6:ae:62:a3:d0:05:01:c5:0a:e2:bd:30:ef:c4:
fc:dd:ad:fa:a0:80:01:31:36:d7:a6:1f:c5:8d:65:a0:b7:46:
a3:c8:08:15:2d:cc:06:4a:ed:16:55:a1:90:5e:61:2f:a1:54:
09:ea:ac:e8:3b:95:f7:c9:38:18:2c:f4:05:1e:38:22:4a:cb:
30:0a:48:ef:55:80:df:bb:e2:81:8b:eb:1a:10:30:5c:50:39:
db:b2:06:f8:f9:f6:52:12:b2:51:c0:54:ca:ae:f5:dd:de:e4:
a8:7c:4a:48:3f:98:5f:f4:35:a2:e3:c1:53:f8:6e:41:04:a3:
f2:ea:6e:e5:3a:2a:2e:86:49:3e:25:93:3b:40:bc:fa:92:5e:
da:e8:55:1d:a5:e9:45:ca:50:2b:3b:ac:1f:7d:c5:1b:6d:7f:
c3:08:11:f4:e0:ae:44:6e:ec:08:19:fd:54:bd:9c:a2:72:d3:
66:7f:55:27:67:1e:09:18:35:2a:39:dd:a6:27:17:ec:15:c4:
71:0f:ca:18:98:af:7e:bf:5e:12:b3:2d:ca:f0:09:c5:d9:b3:
1e:f1:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:11 2025 by rpki-client