Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: WcVxF8ShQcTroFWwf96eYtxlLTlAGNGdqfImCDdizf8=
Subject key identifier: 8D:FA:08:F6:5A:B5:4D:D3:68:C0:3E:FF:31:24:34:89:1C:84:7E:E3
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 0199FC8F48CBFF82139718AF010259E22DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: HtkmwwOGZRQYGjdEJlrT1oc2lwi6sKhaZuLel5Di/yw=)
3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:48:cb:ff:82:13:97:18:af:01:02:59:e2:2d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=8dfa08f65ab54dd368c03eff312434891c847ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:87:8c:78:6b:e4:a9:b9:eb:aa:85:93:4f:
78:8d:56:3c:19:8b:cf:f8:5d:e0:55:8e:45:e7:5f:
e1:ef:3d:a2:65:01:eb:cc:fc:33:f0:d4:13:8d:cf:
99:64:67:5b:c5:28:45:54:d6:f6:7f:3d:45:83:f3:
2c:19:c4:1c:ee:20:bb:ec:1a:7c:78:4b:5e:23:60:
76:52:02:8f:df:9e:59:6b:6c:e5:a7:7d:39:42:47:
2b:5d:e3:32:a8:0a:b7:92:9a:29:b8:71:e1:3f:42:
48:9d:56:8e:61:06:8c:59:af:c4:52:b3:3d:73:a8:
19:6e:a7:a7:49:9e:5a:d0:fd:4c:a2:5e:b9:72:e8:
4a:03:16:b1:ac:b2:ee:e6:85:ee:e3:92:54:30:a3:
08:46:bd:4c:1b:14:22:5c:59:4f:00:cc:6e:50:e3:
b9:3a:01:b1:b1:e3:a8:84:5b:0f:1c:ef:97:c2:e7:
07:38:19:41:f3:8c:28:be:2b:4d:bc:be:3e:37:38:
13:ea:f2:1e:9b:a2:fb:96:0a:62:92:90:24:42:b4:
70:77:5c:47:2d:bf:e6:ca:62:5d:6a:f9:67:3d:47:
4e:75:dc:2c:7c:9d:7b:37:72:1f:d7:76:ad:f2:20:
7b:46:e6:ff:8c:7d:d5:df:64:c1:1b:60:39:8f:90:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FA:08:F6:5A:B5:4D:D3:68:C0:3E:FF:31:24:34:89:1C:84:7E:E3
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c9:8d:4c:92:a3:2c:4c:73:44:a0:ff:9e:e8:cd:fa:e4:89:
59:33:a3:5a:35:05:69:ab:72:8e:41:49:c4:c6:eb:ed:9d:21:
0e:53:b8:bf:97:f6:ad:13:59:25:1f:38:e1:b5:b3:f7:a2:d0:
ae:71:5e:a7:d3:92:f2:e9:3a:1b:e1:3e:2e:d3:2b:b9:17:90:
e1:65:d8:a6:a0:72:79:61:f3:a2:75:ea:c2:34:ea:d1:8f:a7:
86:7f:81:77:82:a8:a5:83:7a:0f:7f:b9:70:55:8b:a5:bb:c0:
9d:da:79:34:4f:f4:09:f0:a4:ff:94:7f:54:67:76:0d:e4:91:
d7:5c:fe:e9:44:02:5e:c2:02:bb:b9:b9:03:34:67:bc:0c:ec:
3a:e8:fb:b6:43:8a:0f:4e:c5:07:0e:77:4b:ab:42:f7:8d:1b:
14:64:82:a2:ed:9f:e7:50:5e:d3:eb:a8:e5:46:a1:4a:84:8d:
44:3a:54:89:c6:bb:74:82:d7:4c:5a:cd:c1:9c:55:30:49:3e:
cd:6a:19:ac:67:b1:22:7b:27:86:00:0d:76:f6:47:61:9d:90:
5a:93:c4:ec:62:11:1b:8d:1c:f8:34:10:56:46:31:ad:0c:cd:
e1:e9:e1:4b:f0:cf:7e:d1:7d:cc:16:3c:be:ff:9b:fd:bb:ed:
fb:35:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:47 2025 by rpki-client