Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
File: kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft (raw, json)
Hash identifier: 7sjqZo0VaT9stLv+KjNwvChD7UFsSa5SgqqLmrXwkF4=
Subject key identifier: 95:CC:4C:CA:CD:63:84:AD:09:AA:AF:83:77:EB:B2:27:24:87:77:F0
Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
Certificate issuer: /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Certificate serial: 0199FCC6C963823CCCEB26B927F8C0BFCB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
Manifest number: 1610
Signing time: Sun 19 Oct 2025 14:01:50 +0000
Manifest this update: Sun 19 Oct 2025 14:01:50 +0000
Manifest next update: Mon 20 Oct 2025 14:01:50 +0000
Files and hashes: 1: 6fnAZ8W2MGF8ZNrQkh_nCxeTpv4.roa (hash: VVdXTpC74ZKSlf0OaYeG4sfAbOWwASAnFr5UUxM1yrQ=)
2: jwF2Fe8ZjLBRTo3L_7TINNi10fQ.roa (hash: Ap/raQBvujEIQc3hDUBU94DRN1La9dL+OAKrqJu5rbU=)
3: kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl (hash: wo9mgrUMZL/FieTq6WQyNgUzAX0A24AzAmzFRW4QWVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c9:63:82:3c:cc:eb:26:b9:27:f8:c0:bf:cb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Validity
Not Before: Oct 19 14:01:50 2025 GMT
Not After : Oct 20 14:01:50 2025 GMT
Subject: CN=95cc4ccacd6384ad09aaaf8377ebb227248777f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:f9:1e:d6:02:87:d3:a9:93:83:d1:83:15:
8f:28:c2:6d:41:37:87:9a:74:49:f4:1e:a1:3a:49:
9d:f5:23:53:22:cc:86:f8:2c:32:fc:89:79:32:2f:
4f:01:d4:5a:e4:51:c6:96:f8:d8:0b:2f:63:c9:99:
ca:17:bc:93:9d:9b:ee:6e:fd:9a:ad:27:2b:08:e0:
05:ee:eb:8b:c5:42:8c:b9:56:92:55:9d:12:9f:77:
e2:80:4d:01:5b:f0:e6:46:5d:07:37:08:21:cc:7b:
f3:09:9a:56:f1:8a:74:c2:06:f4:2e:5c:f4:36:0d:
34:e5:ff:a2:16:4a:57:7b:72:f1:29:c0:e5:b7:4d:
f6:74:ad:40:d7:53:af:69:14:67:9a:b0:48:2a:64:
f1:38:ad:d6:a5:e3:ba:ca:49:78:59:fe:c3:56:aa:
19:5e:85:79:c1:5a:cb:d7:e2:f5:e9:26:19:f8:d6:
05:0c:82:63:92:71:7e:a4:a3:10:a8:c3:61:0e:f9:
67:07:30:31:b4:eb:a5:d3:95:af:3e:f8:a4:d9:6b:
5d:4d:d6:8b:6d:81:3d:1a:4c:8f:4b:80:eb:9f:18:
07:34:84:15:ad:49:7b:19:ad:a3:a6:0c:3f:9a:5d:
50:ea:8c:33:7b:5b:a8:00:ce:06:e7:75:da:0d:ba:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:4C:CA:CD:63:84:AD:09:AA:AF:83:77:EB:B2:27:24:87:77:F0
X509v3 Authority Key Identifier:
keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:84:8e:fb:7b:60:10:10:f4:e0:5e:28:b2:7a:2f:c4:2d:02:
d6:4b:14:13:a4:c2:6c:d5:f6:94:12:c5:f8:14:62:cc:b6:c3:
be:31:a0:e0:ea:26:62:be:bf:81:bc:48:a6:8e:ec:51:80:7b:
c2:f2:5c:4f:08:5c:78:99:e3:c2:cb:b4:d0:77:c9:2c:c9:1b:
0d:a0:b0:2e:8c:df:4c:29:58:22:50:b3:6b:79:86:99:9c:1b:
6c:ce:02:11:e0:04:df:82:e4:38:2f:97:e0:0e:be:7e:e5:0f:
b7:fc:43:cd:1d:f5:42:c1:03:34:45:ff:e1:41:4c:b0:88:f3:
f9:6f:6c:93:49:8b:c1:8a:e1:67:66:25:94:29:90:db:79:83:
46:a7:a9:ea:1e:b9:d5:c8:70:94:23:f6:f6:88:5a:7a:9a:3f:
4e:f8:4a:e0:11:07:d1:43:53:42:f6:74:fa:87:d1:85:c6:5f:
52:a6:d3:28:1d:ac:a5:ca:86:51:49:88:67:78:cc:fd:10:2a:
df:5a:74:89:8a:8a:3e:4b:a5:c0:fd:fe:f3:6f:22:3f:9e:d0:
23:74:c0:d8:d6:5a:03:8f:f3:f4:7f:74:08:a0:ad:d7:8e:f4:
fe:c9:83:8f:d7:89:3d:d8:ef:d3:bb:e2:6c:78:42:4c:29:aa:
32:35:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:34 2025 by rpki-client