
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: LwYNcE0DmUjQVKtEtrXkgDYVxMhJGKffo/oSI6ZbTNY=
Subject key identifier: BD:A1:26:AD:ED:06:F9:33:81:F6:13:F0:7C:09:09:02:AC:5A:37:9D
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 0199FA69D29FCDD47717656470367BF85435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 03:01:03 +0000
Manifest this update: Sun 19 Oct 2025 03:01:03 +0000
Manifest next update: Mon 20 Oct 2025 03:01:03 +0000
Files and hashes: 1: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: LbkgzmupxjPGMTgoIFa8x3wTUHFS/HRBhJF8IhZwgHU=)
2: wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa (hash: 1/0ldOLBPILSR69hThfIMtpZUKnlBM4vs1kLEHBC5Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:d2:9f:cd:d4:77:17:65:64:70:36:7b:f8:54:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Oct 19 03:01:03 2025 GMT
Not After : Oct 20 03:01:03 2025 GMT
Subject: CN=bda126aded06f93381f613f07c090902ac5a379d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:34:ca:10:ce:54:53:42:9b:84:1d:00:50:
03:0f:68:af:8a:dc:43:7e:00:a3:38:16:0b:24:75:
51:5f:af:de:36:8a:e4:22:3c:a9:d9:2d:d2:89:ca:
9f:cc:63:d2:93:17:0e:75:ec:b8:14:1f:d1:ce:cd:
b4:a0:f6:17:e8:5c:a9:9a:7c:2e:f2:d5:1c:a9:54:
16:3c:a3:77:78:5a:2f:68:e2:52:b6:07:67:96:5f:
53:ee:32:2f:f9:94:6e:f4:ad:16:cf:30:c2:e9:ce:
f8:68:68:d9:89:26:ad:65:30:d1:b7:4f:21:bc:ca:
c6:82:a3:25:52:74:0d:4e:14:66:8f:e7:ca:7e:3b:
75:4b:f0:e6:16:82:d0:8c:c4:91:c1:5f:c1:96:be:
4d:cc:9b:33:b1:8f:65:58:7c:a1:ba:f2:9d:d7:3a:
04:01:87:24:c8:3e:ac:55:0b:fc:13:fa:25:06:db:
56:b9:3a:1f:5d:18:78:10:02:56:33:6f:de:06:31:
b5:9a:0c:62:36:3f:f2:a4:cc:92:89:05:46:7e:59:
ad:53:a8:e7:29:1d:fe:3a:06:27:26:1f:df:3d:1e:
c2:d6:74:12:20:dc:80:a1:ce:50:a8:bc:d6:18:34:
de:41:13:63:5b:c0:a2:a5:e5:37:bd:74:a6:d1:75:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A1:26:AD:ED:06:F9:33:81:F6:13:F0:7C:09:09:02:AC:5A:37:9D
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:63:6d:7d:be:b9:99:81:7f:5d:ab:4e:71:01:fd:07:5b:30:
88:6e:bd:b0:b5:4a:8a:8a:14:d6:5e:22:b3:d7:64:a7:58:6b:
c3:86:66:eb:35:d7:43:4e:e4:4f:55:c5:6e:74:35:24:c3:7c:
4d:b6:c6:c4:0e:56:61:e4:51:c4:4c:65:34:91:45:83:5c:44:
ac:68:9e:dc:bf:52:7e:8b:98:f1:84:9b:a3:16:65:c5:29:52:
b7:d7:6a:12:5f:e6:c0:00:31:3c:48:09:a6:0b:8d:a8:90:ae:
5f:92:75:6e:75:0e:48:a8:98:14:ac:19:ed:81:a6:50:be:74:
cb:43:80:05:2b:16:b7:99:e2:80:7e:07:4c:b5:b6:3d:c2:08:
d2:8e:e5:28:1c:10:35:b5:94:15:0d:b8:c2:82:bb:7b:4d:7f:
cc:96:85:c6:14:26:d3:51:bb:eb:fa:ab:c9:ae:04:8b:06:82:
32:be:96:6a:92:4e:80:78:5a:83:1a:ac:16:97:e8:7b:79:e5:
14:32:c4:56:59:1f:03:ca:b5:33:7e:b3:1b:e4:25:e3:d0:29:
23:08:fa:22:b2:37:53:c7:bc:9b:7d:a4:03:a7:fd:8a:f9:aa:
51:60:9f:5f:6b:e3:18:df:55:2d:83:ea:7c:c5:3c:38:76:33:
45:ce:7b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:36 2025 by rpki-client