Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier: q6vabWsPd2KC0nVNCDjujGhZRCQVMNTx8V5u8Kn1RqA=
Subject key identifier: 36:6E:48:84:3C:91:DD:44:26:FE:4D:0A:DC:64:07:D5:7E:94:6A:93
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 0199FEB4FCE6C2983EB05921FE80581DC8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 23:01:38 +0000
Manifest this update: Sun 19 Oct 2025 23:01:38 +0000
Manifest next update: Mon 20 Oct 2025 23:01:38 +0000
Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: xP5nwbx9OpKwFxSGrK7WdYhMxs4ZKWf0ipiSY1EgRCQ=)
2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:fc:e6:c2:98:3e:b0:59:21:fe:80:58:1d:c8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Oct 19 23:01:38 2025 GMT
Not After : Oct 20 23:01:38 2025 GMT
Subject: CN=366e48843c91dd4426fe4d0adc6407d57e946a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:4d:43:e2:f9:7b:8d:f3:e7:be:59:d0:dd:
02:da:c8:b1:8e:f8:be:8f:58:e9:69:c3:12:b4:36:
55:81:12:21:19:7d:c5:a2:f6:49:d8:f9:24:4b:00:
1e:59:52:93:8d:e6:de:bf:c8:4e:9d:9e:b6:ef:44:
2f:e5:28:eb:29:a2:e1:95:a1:46:dd:81:0c:8f:6e:
4d:83:50:fa:e8:65:5c:78:ab:b7:b2:5a:58:cb:4c:
96:5c:50:81:05:4a:ae:68:fc:a5:10:e8:60:af:0f:
b3:a4:6d:6d:7d:be:03:e2:e4:be:67:94:d0:4e:fb:
82:78:7b:d4:15:8d:a6:3d:ef:d4:0c:36:cd:66:0a:
c5:a7:24:6e:86:cf:24:66:d5:55:5c:55:ed:61:a3:
20:d3:1f:a1:f5:51:e9:21:e6:d0:ba:c7:15:a5:53:
93:e3:d0:9f:bb:f8:d3:98:49:51:23:a1:d8:2b:8f:
41:c2:b2:04:fc:78:c4:a5:2a:a5:25:e6:69:12:af:
de:db:ce:68:d2:7c:fe:b6:bf:89:55:6f:7b:bc:86:
42:f1:b2:0d:cf:e5:dd:5b:ba:29:7a:17:83:82:2e:
d6:f1:12:48:f0:d2:46:d4:91:db:b8:a9:07:01:2e:
61:96:08:14:00:bc:64:86:c2:36:d5:fd:2d:4e:40:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6E:48:84:3C:91:DD:44:26:FE:4D:0A:DC:64:07:D5:7E:94:6A:93
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:84:fc:74:47:09:1b:d6:5a:f3:1c:b5:81:6f:6a:e7:2e:e9:
5d:99:aa:e8:34:84:d0:4f:e5:ed:c1:76:1c:99:0a:d8:cd:d4:
5e:e0:a1:73:d5:8f:d3:99:ca:f6:15:7c:3b:ab:b5:1e:30:eb:
70:03:2d:96:b0:ec:7f:c4:98:7f:46:01:c5:ed:0a:3b:53:bb:
59:4c:2c:a1:ec:e6:8d:7d:e7:6a:88:67:ee:97:de:b5:a5:32:
cc:f0:01:a1:c0:25:a0:4b:26:6b:8e:55:f2:4a:e5:09:f2:18:
09:05:3a:d0:69:42:cb:f5:0f:a2:c6:cc:e2:41:d1:9b:28:35:
d4:cf:03:84:50:87:f6:23:c4:8b:3d:64:38:1f:6d:09:b6:1b:
cd:ef:68:36:ec:ca:cc:84:35:48:6d:39:20:6e:40:8a:15:25:
09:6e:11:03:1b:88:3b:ab:53:eb:61:cd:58:df:67:12:00:38:
31:1a:63:47:14:bf:77:05:1d:11:18:df:6c:03:35:6f:dc:b2:
ba:c7:07:70:dc:b6:0b:36:17:cd:3c:80:b9:51:65:15:68:d0:
9a:8c:33:c5:19:07:5b:61:27:f2:8b:0f:c4:ea:8c:4e:b1:8d:
0d:73:3d:fa:5c:53:0d:20:4b:81:ad:80:5f:90:43:ff:23:12:
e2:13:0c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:36 2025 by rpki-client