Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: CG9k9yIyz0NEy5SwL0eDkMEOSngf9k2qec9pF7zlbT8=
Subject key identifier: DE:72:D2:5B:9A:F4:76:06:8C:03:51:4C:2D:F3:B0:44:A2:FC:B4:A2
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 0199FCFD2855D7361DFAA8AE9B1DD12026F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 05AB
Signing time: Sun 19 Oct 2025 15:01:13 +0000
Manifest this update: Sun 19 Oct 2025 15:01:13 +0000
Manifest next update: Mon 20 Oct 2025 15:01:13 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: /lPOASKs+e7VbAqseLfAYPwoix459f+vXg2cV6k4/U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:28:55:d7:36:1d:fa:a8:ae:9b:1d:d1:20:26:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Oct 19 15:01:13 2025 GMT
Not After : Oct 20 15:01:13 2025 GMT
Subject: CN=de72d25b9af476068c03514c2df3b044a2fcb4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:53:ec:2d:a1:7c:c4:b5:80:d6:7d:8b:82:
45:a5:f8:e7:3a:77:18:9a:82:cd:d6:eb:b5:b0:b1:
77:59:05:d3:ed:4d:68:40:6c:8f:2b:d4:e2:02:60:
88:1e:a5:09:58:57:00:72:2c:74:c2:6c:15:bd:c2:
9a:25:cc:68:3e:74:d2:4a:0f:3a:43:8c:88:ba:0b:
ad:db:fa:d9:a3:09:32:20:ec:8b:c3:14:59:59:e4:
df:44:ca:93:27:fa:cc:ae:c3:88:5c:e4:39:45:09:
9c:8f:ef:7a:e5:69:71:47:1b:a6:c7:a1:36:c0:49:
d9:38:56:24:5f:99:93:20:0e:3c:02:d1:59:19:5b:
d6:80:c7:92:57:aa:5d:e7:3f:35:3b:b4:be:fb:6e:
5d:8f:e1:5c:0e:7f:b6:70:c3:06:bd:fa:f9:06:32:
5b:ad:ed:d5:08:fe:68:70:37:96:0d:20:41:69:91:
b0:88:c7:b3:a0:3a:e8:c0:9a:50:31:49:ad:48:71:
45:d5:8a:fb:39:37:1f:16:84:33:17:13:fc:5a:39:
aa:3e:9b:1a:0e:39:84:27:35:ec:cb:de:11:8b:45:
d0:2f:5b:4d:82:e0:76:c4:0d:1a:95:7e:13:b3:7c:
4c:db:57:1f:74:47:7f:2e:5e:34:0a:02:50:a8:25:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:D2:5B:9A:F4:76:06:8C:03:51:4C:2D:F3:B0:44:A2:FC:B4:A2
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:13:3f:e2:c1:be:87:eb:9d:19:64:cb:ea:1f:41:04:d9:ff:
21:2e:60:5a:03:6f:54:f8:36:3c:98:5f:05:e9:bc:f9:99:4d:
38:1b:ed:fa:a1:d3:32:c6:e7:29:da:fd:0e:41:56:58:96:f5:
8a:db:38:8e:4e:38:70:66:1f:a3:d1:e0:9b:06:d2:ba:8a:29:
02:1c:b6:be:8b:0c:0b:fe:8d:3c:1f:47:96:61:81:9b:ac:c9:
7b:e2:23:19:50:3d:cc:4a:2c:e4:57:cf:18:01:0f:18:73:fd:
1f:79:88:bb:3b:fc:a8:3a:a1:71:b7:fa:a5:82:96:3e:4c:3a:
e0:d4:38:a4:e0:5a:8b:15:dd:9b:cd:c0:47:9a:06:f3:df:a3:
ae:00:79:86:f0:82:4d:d6:ce:86:ea:d8:05:0f:42:7f:bb:33:
92:0e:63:2e:bb:cd:72:6b:1e:08:51:62:ff:4c:9b:a1:6a:0a:
4f:f2:af:97:80:2c:58:40:0b:2a:db:31:fb:59:95:9b:46:06:
df:d3:01:c7:27:cf:a4:95:be:58:d4:82:56:8b:67:39:cb:a4:
1c:f1:b3:68:49:f9:63:99:61:d6:81:80:d2:2c:0a:3d:d9:c7:
12:a7:a5:83:9f:95:f3:f9:87:cb:7d:bb:ea:35:c8:68:b1:d6:
b6:69:ab:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:44 2025 by rpki-client