Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier: AD06uPoTa6x8apIdP0BXEti0IT6BoYOIqwULwr/a5Kc=
Subject key identifier: 84:C9:A9:63:05:B2:17:7D:E0:D5:CB:3B:39:4E:B1:9A:BC:BE:05:63
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 0199FFFE94C21AEB24BF7158B2E14F7868BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 05:01:38 +0000
Manifest this update: Mon 20 Oct 2025 05:01:38 +0000
Manifest next update: Tue 21 Oct 2025 05:01:38 +0000
Files and hashes: 1: AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa (hash: D5KLLlx/C1ALQLS5LYzAlXJyxWisqcBsxXVALk1wu4g=)
2: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: k6b4ZqI4X6X3KaaX/NQQdQSex1UEBlTt88psSko/Rn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:94:c2:1a:eb:24:bf:71:58:b2:e1:4f:78:68:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: Oct 20 05:01:38 2025 GMT
Not After : Oct 21 05:01:38 2025 GMT
Subject: CN=84c9a96305b2177de0d5cb3b394eb19abcbe0563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:9b:f2:be:31:5a:7f:0f:d5:ca:87:06:ba:
25:b4:ee:d4:3d:66:1c:28:47:26:af:ee:ea:cf:62:
cd:b5:92:d9:95:30:1a:cf:ef:47:06:b7:0f:eb:b5:
dc:67:7a:bb:fd:ab:ab:1c:86:e2:61:f2:30:52:81:
85:3a:07:f3:a4:5a:46:96:c0:68:b9:83:59:a9:ec:
dc:1c:1d:62:36:ff:a7:f5:0b:71:30:a3:6e:f1:3f:
51:44:37:55:38:7b:29:cc:8c:66:74:5b:95:81:6d:
f8:e8:1c:b3:90:1f:80:62:9a:6c:18:75:59:33:8f:
c4:16:ef:db:33:f6:e2:49:e0:d4:f7:0d:f8:0f:bc:
0d:a3:a6:62:34:38:f1:6e:18:4c:08:89:40:5b:a6:
8b:9b:d7:23:47:f4:d6:00:e0:f8:75:0a:2c:56:d4:
69:1f:36:d2:8d:10:ac:af:37:55:4b:ba:88:6b:33:
70:ab:69:54:64:36:58:09:e9:68:7e:df:e0:1e:21:
1e:d4:30:7b:dc:a3:32:08:c4:60:be:df:fe:b8:51:
47:c1:57:69:a7:bc:07:12:27:ce:a7:6e:74:fe:80:
15:cb:f5:a4:68:65:b2:d1:9f:37:04:c8:b6:cc:7a:
00:9c:de:3e:9c:1a:81:ef:66:c4:3a:06:63:28:21:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C9:A9:63:05:B2:17:7D:E0:D5:CB:3B:39:4E:B1:9A:BC:BE:05:63
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:da:e0:4f:f8:19:07:d8:a2:76:bb:91:60:7f:b3:03:e6:d2:
fd:84:4d:2e:ac:54:c9:ed:e3:52:48:3c:c9:d8:90:57:77:45:
93:8d:46:72:f3:c5:8d:a6:8e:76:22:25:5a:6a:27:f8:1d:7b:
58:b8:9f:8d:51:e6:c8:0b:c1:39:50:7c:4e:3b:d9:86:62:50:
c0:c3:01:95:c9:b3:9d:1e:d0:18:90:11:a0:fd:3c:f1:92:69:
23:09:32:14:29:81:21:5e:3c:c3:5b:8b:3f:14:9c:70:d0:a2:
c3:24:28:ff:30:e6:be:07:56:c2:f8:c5:2e:eb:cd:3f:58:52:
27:51:6d:d2:45:02:c6:2c:d6:87:2a:dd:43:9f:ef:11:e5:83:
30:9d:2b:2d:88:ee:52:b0:a3:9d:e0:11:47:68:15:e2:de:16:
8a:cc:bf:af:8b:a0:d7:e5:1a:cb:f2:57:34:64:f5:09:8e:d7:
86:c1:e7:9a:8d:85:dc:74:30:a7:d9:19:16:15:11:aa:68:b1:
4d:7c:07:1a:1a:18:66:64:d3:e9:6d:ae:77:8f:ef:8c:f2:58:
c0:32:ba:fe:0f:ef:b8:d8:34:3c:18:ff:38:4f:49:28:93:61:
fb:3b:67:5c:53:0f:63:d7:d6:0e:42:75:78:d5:78:4c:4c:27:
7c:3d:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:33:28 2025 by rpki-client