Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
File: KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json)
Hash identifier: jd3vnK6IgK3lPaxpXiFCRtBN+wMtcPOYp09y0OhyzBk=
Subject key identifier: C9:76:D8:D7:22:F7:C9:A6:DC:06:FD:18:46:4C:59:95:B9:ED:B6:CD
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Certificate issuer: /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial: 0199FDDA4DA7C6592F6C8FAADC6470FF37E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
Manifest number: 04E9
Signing time: Sun 19 Oct 2025 19:02:46 +0000
Manifest this update: Sun 19 Oct 2025 19:02:46 +0000
Manifest next update: Mon 20 Oct 2025 19:02:46 +0000
Files and hashes: 1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: HtEC7yimij1H2Dmbjh+CkRKw3hDk8ajIwPyNPC40nOE=)
2: _L4_714o--k52AHUTKE5ELIZMFQ.roa (hash: ji6+L6kBm6VqOpTZxUmb7EEqHaNzozcu4JNvhJv1V2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4d:a7:c6:59:2f:6c:8f:aa:dc:64:70:ff:37:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Validity
Not Before: Oct 19 19:02:46 2025 GMT
Not After : Oct 20 19:02:46 2025 GMT
Subject: CN=c976d8d722f7c9a6dc06fd18464c5995b9edb6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:fb:47:24:4d:d8:b0:47:5c:2d:9e:40:1c:
41:53:87:9e:c5:87:9f:e1:45:26:2e:6c:9a:fa:71:
3d:a1:60:f8:39:bd:75:e9:58:ee:63:86:25:2a:74:
31:c8:2b:68:7e:d2:00:0a:d0:0c:d5:9f:08:fd:27:
eb:ee:96:78:ed:eb:81:d4:93:8e:ee:d7:b5:5b:14:
18:59:1d:2a:d2:ef:f5:c1:0e:97:bf:f0:61:2a:40:
15:ff:73:a7:77:9d:97:1b:7a:a2:2d:60:a8:45:ae:
ff:9a:f1:48:6f:7e:5d:82:5e:6c:43:43:08:2f:23:
18:b2:12:14:26:ea:e4:fe:67:17:c3:3e:95:62:5b:
e2:2d:ec:f6:07:5f:03:0c:c1:c6:d9:99:a8:eb:09:
40:2c:86:2e:5e:df:8a:46:87:a3:1e:b7:31:c2:65:
e0:04:10:47:a9:f3:82:cf:08:57:15:28:61:bd:28:
92:82:fc:14:fd:a4:da:1e:57:7b:a0:dc:3e:43:07:
4f:c4:60:6e:cc:ec:38:6e:53:24:f1:be:4a:fb:88:
2c:d4:e5:96:9b:2c:df:18:f1:60:90:ef:00:71:7f:
54:1e:5c:3c:a5:e8:5c:1b:49:f2:83:ed:65:57:a0:
1f:fc:9a:a7:29:37:04:81:61:57:94:62:fb:a5:ea:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:76:D8:D7:22:F7:C9:A6:DC:06:FD:18:46:4C:59:95:B9:ED:B6:CD
X509v3 Authority Key Identifier:
keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c3:65:f2:5a:26:b1:45:c1:ca:77:ef:30:c1:75:3b:5f:d6:
8d:1a:0f:e9:17:b4:c5:3f:e7:5c:ea:ab:9e:de:5e:f7:ab:c9:
b0:62:f2:a9:86:a6:b3:3d:fa:6c:1d:48:c8:e4:29:ce:ea:40:
ce:a3:3b:8a:70:61:62:cd:aa:3a:5c:9b:4b:e9:6e:58:4f:78:
00:3b:5c:17:72:c1:0c:bf:5a:07:96:36:95:c0:30:53:59:ca:
89:cf:25:14:78:75:26:31:3a:72:21:07:00:b3:92:64:95:61:
65:9c:1c:26:78:8b:e6:8a:5e:0d:66:e5:99:b2:ca:f8:a0:79:
00:4f:84:19:c5:63:dd:a7:54:39:33:11:84:ff:e7:94:ed:3e:
e3:86:da:98:93:3c:99:47:a6:3c:c8:1b:f9:46:fb:d4:93:df:
a5:65:09:17:2b:67:69:2e:a9:0d:6b:da:0f:d5:03:96:1e:2c:
12:4f:4d:22:83:a8:05:f8:26:5c:5f:6c:82:2b:b8:b0:16:f5:
dc:01:13:51:4c:f2:5a:c6:36:5a:be:fe:c3:a2:e0:d1:86:62:
7a:09:8e:ab:49:a6:23:4c:15:d9:d9:7d:7c:5b:c9:4b:a4:3b:
3e:7e:fb:ee:0a:21:d5:9e:86:bd:c5:7e:6e:78:ba:f7:8e:71:
f2:b8:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:41 2025 by rpki-client