Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
File: KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json)
Hash identifier: eS9tSCWgBDBaGNvqGSNGVgANcy0XtXX8zwV9yH1Qifw=
Subject key identifier: D3:A8:C0:4F:C4:71:8E:4C:A2:C4:56:35:68:74:44:8F:1A:ED:F7:4D
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial: 0199FC586E69F76A997E9672148C32DE3FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
Manifest number: 0EE9
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: ePLJxOn2k/bUbzzdQwDWj2NcpNWZviWXfyjUHJysQws=)
2: dJ6Z6uHBiaScsgFwBNYwQYgTmkk.roa (hash: A47IWxTys6UPyaxxT7KgUDJag9HKcyHJ4nrmIQJOjaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6e:69:f7:6a:99:7e:96:72:14:8c:32:de:3f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=d3a8c04fc4718e4ca2c456356874448f1aedf74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:35:03:ad:87:57:e6:1a:e1:a9:92:ef:21:
10:b7:c1:f7:a9:61:90:e1:48:87:87:40:94:38:f6:
71:d4:3c:50:f3:4c:a0:b8:22:8a:51:87:b2:0b:7a:
04:32:c2:ae:d7:d6:d4:33:bb:4f:6d:e5:2c:61:85:
4e:34:2e:21:fb:02:97:96:97:2c:dd:ce:aa:b5:46:
db:11:94:d4:af:53:5c:6e:a3:05:52:1c:72:13:e6:
f3:99:34:04:9d:db:30:17:2d:31:54:76:ec:cf:dd:
ce:4b:50:a1:fd:06:28:9e:5e:e1:38:43:35:8b:64:
d9:00:eb:ee:08:9f:d8:7b:f6:cd:5a:33:50:bd:f4:
29:2d:ed:6c:10:18:ce:e5:84:3c:69:1a:ac:4a:2d:
bd:92:cb:f6:ce:57:54:db:b8:4a:88:30:1b:1c:54:
c3:6e:94:ff:5f:ce:3b:53:41:e1:c7:24:d2:ac:48:
89:27:77:3f:08:63:a9:eb:ec:45:66:90:c4:5e:b6:
30:cc:1b:22:82:c8:e7:d8:d7:98:c2:98:ce:e3:27:
81:28:d7:fc:b3:d1:a5:4a:d2:d6:a0:04:44:78:08:
d7:bf:5e:f4:a7:d1:11:fd:7e:7c:38:7b:b0:90:79:
99:39:3b:b7:02:13:31:55:ec:7b:ae:02:c6:12:14:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A8:C0:4F:C4:71:8E:4C:A2:C4:56:35:68:74:44:8F:1A:ED:F7:4D
X509v3 Authority Key Identifier:
keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:03:24:04:88:97:80:0d:10:a1:73:0b:d9:b0:e1:c2:45:85:
07:a4:40:37:a6:97:e2:bd:2b:13:ec:53:24:f6:0a:4e:71:e9:
46:4b:45:3c:3d:72:f2:ce:53:60:ab:35:77:eb:7f:3f:75:9b:
4c:08:75:e2:c0:e3:62:33:6a:fb:f7:2f:34:63:2f:5e:6e:87:
52:73:2a:49:da:a5:67:39:57:c1:5b:cf:db:33:04:4d:8a:66:
a7:ef:bf:a2:23:72:27:2f:d6:2f:3f:a2:7a:df:cf:6a:51:a8:
2c:fb:51:59:da:ff:b3:86:35:19:29:03:ab:91:f6:fa:a8:88:
6d:27:43:22:c0:32:4e:69:cc:a8:d6:40:49:7a:c4:6e:cc:74:
12:11:87:7b:26:2f:f8:44:7b:75:84:41:1e:6e:33:36:40:c5:
66:78:05:ab:e3:9d:26:af:66:ba:45:cc:3d:d0:a2:08:18:5e:
ed:e9:46:f8:40:eb:1c:9c:01:13:43:5a:a5:18:ee:e4:6c:da:
56:3a:95:5e:38:ef:ad:ed:ee:ca:ee:47:f9:4a:0f:28:55:a9:
b5:9f:27:96:f3:38:50:87:0b:48:bb:31:86:53:0a:b6:0a:90:
ef:6c:a2:fb:07:2d:60:7a:fa:1e:75:c9:db:57:bb:b5:ff:3c:
f7:de:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:47 2025 by rpki-client