Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
File: KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json)
Hash identifier: K1QPowseu95s1tXgvXJ5eyRMeTeWOaoOTT/x2P+bav8=
Subject key identifier: EA:47:7B:A2:85:B6:2D:C6:5E:24:1E:DF:A7:E5:7C:FE:0E:4C:63:2E
Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2
Certificate serial: 0199FC58D00739631FD6F382B66896D4ACCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: EdTyc-f6MbzKNflZEVb0lTRcFng.roa (hash: LosjQRA+dA0QESjdH00I3Sd8eYNzb4MjK8b7Xcsie8w=)
2: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: pOsQvB7B1W3Rqi8StPgEof6cq3pBERqYPH3zNvrfjKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d0:07:39:63:1f:d6:f3:82:b6:68:96:d4:ac:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=ea477ba285b62dc65e241edfa7e57cfe0e4c632e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:dc:71:03:b3:ce:78:4f:2f:bb:26:2a:70:
9f:10:51:d6:3c:3a:fe:ad:0e:f9:40:97:65:2c:c9:
92:5e:bd:74:70:21:fa:0d:3a:ee:d7:2a:d7:32:6c:
03:57:a9:4a:c1:c4:b1:53:09:8a:4f:16:03:6b:53:
ff:f1:59:6c:ae:62:69:08:74:90:19:b7:e7:e5:b6:
5b:4a:5a:43:b6:9e:2f:f8:66:7a:6a:89:59:c2:13:
65:e6:23:5c:c3:25:e3:c0:3a:b5:37:10:50:69:50:
16:52:a9:33:e8:2a:c9:4d:8c:ed:49:f0:b6:e5:a2:
7d:34:3b:ca:5c:5a:97:91:87:aa:af:15:58:1a:b9:
3d:a7:5e:63:77:86:b0:e9:ce:96:1c:91:a7:ab:68:
f0:4b:09:32:b0:c2:d5:3a:8b:74:d5:23:16:44:22:
af:e1:f1:fd:13:ec:df:16:ba:75:c8:69:2e:3b:ed:
8c:97:ad:1b:70:b9:bc:76:74:89:fa:74:c1:0e:30:
28:49:f1:92:dd:99:e6:89:ff:bc:0a:43:74:00:df:
3b:7d:08:c7:41:78:1d:1e:5d:f1:2a:94:b2:73:19:
82:77:d4:7b:fb:7a:51:51:cc:d8:6d:a3:2e:17:9c:
8e:e3:c9:66:a9:c2:a2:dc:ed:81:06:56:50:37:86:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:47:7B:A2:85:B6:2D:C6:5E:24:1E:DF:A7:E5:7C:FE:0E:4C:63:2E
X509v3 Authority Key Identifier:
keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:35:41:cc:9f:61:39:1a:37:50:07:2c:26:99:22:d8:5b:50:
aa:c5:c8:50:6c:89:b0:3d:eb:25:cb:45:5c:f4:75:fd:d1:e7:
e3:3d:40:da:83:75:ed:a7:32:53:75:12:43:96:46:4a:dc:f8:
87:22:ba:53:ad:c6:11:61:14:a8:c0:3b:bd:a2:09:96:88:c9:
cf:c7:5c:77:9f:6d:d0:8e:d6:8d:ee:3b:84:21:59:a5:76:cf:
0d:52:dd:50:7b:3a:e4:74:ee:41:28:28:7c:9b:ce:f4:6a:6d:
c7:93:e5:d5:88:5e:8f:2e:c4:79:2e:f2:1f:2e:08:7c:dd:ee:
65:fd:40:83:df:1f:a5:ee:20:06:10:38:37:6b:f2:72:23:41:
cb:5b:06:c4:90:d0:22:73:e7:08:c9:39:5f:00:35:4e:8e:52:
54:72:5e:b6:cc:13:d0:ff:67:27:08:2b:13:9a:df:cb:1d:f4:
5f:1f:86:72:a0:55:18:c5:22:b5:cc:b8:fe:64:f6:ab:10:2b:
54:8f:5a:99:49:62:ad:9b:a4:c7:98:22:95:b2:40:70:c2:8c:
9a:c4:88:d1:ef:aa:4f:84:b0:65:27:75:c4:1b:4c:ed:7b:6b:
47:29:aa:0d:d6:0c:61:b7:97:85:3d:cb:2b:a3:20:57:fe:a5:
45:57:57:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:19 2025 by rpki-client