Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
File: Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft (raw, json)
Hash identifier: LLcXHKYJDnkg4ttMBuxg8NCcyGy9lXbjfHLlGI7aeLY=
Subject key identifier: 7C:EE:67:4C:70:FA:F0:86:2D:4B:7C:C0:4A:B1:01:4E:4B:10:99:49
Authority key identifier: 2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
Certificate issuer: /CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Certificate serial: 0199FAD7C7997453B546425356591A4A4D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
Manifest number: 100F
Signing time: Sun 19 Oct 2025 05:01:09 +0000
Manifest this update: Sun 19 Oct 2025 05:01:09 +0000
Manifest next update: Mon 20 Oct 2025 05:01:09 +0000
Files and hashes: 1: Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl (hash: 2wY7HjSVLkelJ5p9IVgP6cJ4l2UkxNO58CHS9YB0AoA=)
2: so_dnSs4BnrVZYioQ2oy6VOroHk.roa (hash: EXJQLyqb51APlznWLoV0tXq0fpUDEu2dhVkLYk30HsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c7:99:74:53:b5:46:42:53:56:59:1a:4a:4d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Validity
Not Before: Oct 19 05:01:09 2025 GMT
Not After : Oct 20 05:01:09 2025 GMT
Subject: CN=7cee674c70faf0862d4b7cc04ab1014e4b109949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:88:5c:ce:8a:a6:6e:5b:20:51:42:20:50:
b5:ba:9d:15:51:c6:0f:bd:51:6e:fa:25:e6:5d:ab:
32:f5:ec:2a:b3:01:f2:a2:44:0a:65:ba:31:07:e6:
b5:8c:90:4f:3a:31:26:b2:38:1d:11:29:4b:6a:ca:
cf:ec:e0:95:c6:0a:e0:5e:1e:12:78:3c:86:bd:06:
0a:32:c2:dd:18:17:07:4a:b3:09:2f:a4:5b:ba:b8:
75:49:82:5d:1f:25:40:b4:e6:38:d0:c6:ee:6d:e1:
8f:6b:e6:d4:fa:d2:df:91:9a:c2:6a:04:6f:3d:5f:
19:03:f6:7b:d7:25:08:c7:b6:30:f4:db:fa:94:80:
44:64:c2:19:98:bf:c4:02:ad:c2:e1:d8:1b:ff:b8:
61:7d:9c:d2:7c:79:3a:2b:0a:a2:d3:6e:90:ee:46:
d2:47:bc:e5:22:ab:40:db:72:cf:65:4d:28:b7:af:
f5:6b:34:5f:d8:2a:eb:49:7d:b3:0d:8b:ae:85:d4:
9c:6b:52:50:97:68:e8:1f:d1:7c:58:8e:2e:1a:fd:
95:57:36:a4:56:75:69:aa:8b:50:16:cd:5c:bf:a4:
e3:bc:f2:85:4b:32:2b:9e:3d:e4:bb:de:7b:63:8c:
af:5a:38:93:4d:13:ff:cb:81:5e:95:23:23:4a:6f:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EE:67:4C:70:FA:F0:86:2D:4B:7C:C0:4A:B1:01:4E:4B:10:99:49
X509v3 Authority Key Identifier:
keyid:2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:fe:46:64:5a:78:6b:e5:3b:7b:b0:1e:68:eb:67:56:6c:e3:
86:e4:5b:aa:74:fd:4b:64:65:e7:a8:c4:4e:61:aa:1e:e7:88:
e6:5b:93:fa:09:c8:ff:e7:0e:04:63:cb:16:39:8c:c6:38:ca:
74:56:75:af:36:ec:41:d6:9c:52:32:a9:c5:27:28:d0:ed:ed:
cb:9b:3f:f1:cb:f1:16:9b:bd:a0:52:0a:e5:f8:a9:e8:b8:b8:
e9:41:2f:0d:5b:4c:26:0c:33:c1:02:d3:d3:f1:37:51:e2:6f:
d6:f3:5c:0f:20:12:0b:f9:10:36:a0:f0:b1:39:76:b5:77:8c:
f1:b6:a2:4b:f3:78:cb:f8:b8:5a:65:33:46:4f:f5:61:ae:cc:
e1:35:64:55:93:45:22:66:60:30:8a:3c:3e:54:6a:50:0b:d4:
ad:23:6d:2f:ac:a3:dc:5e:06:c0:f7:9d:08:40:be:32:9e:dd:
c3:0e:7b:c9:12:35:9f:ba:f0:35:f6:c9:3e:b2:35:1a:87:f9:
d3:d6:05:c7:b6:9f:37:00:db:88:c3:05:66:d9:d9:f7:05:54:
6c:9b:bd:f6:c8:07:0a:5d:7f:b4:9d:4e:f0:91:0b:54:d4:5d:
70:9c:da:b0:e9:bd:7a:8e:f7:e2:30:3c:a8:09:47:34:e7:20:
56:38:33:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:18 2025 by rpki-client