Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: kouegShzMacZubTjzJitY+I1Itxp9L4fdzYqNPXqfiM=
Subject key identifier: 66:9E:8D:6C:C9:BC:06:C0:AF:3D:DE:FB:1C:8D:21:06:E8:79:52:9B
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 0199FBEAE61A359892D32BD1CECCF3A8826C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 0D4D
Signing time: Sun 19 Oct 2025 10:01:39 +0000
Manifest this update: Sun 19 Oct 2025 10:01:39 +0000
Manifest next update: Mon 20 Oct 2025 10:01:39 +0000
Files and hashes: 1: 9cEvXYVcBJeRVXoK10hhOCyNhJY.roa (hash: ihTe2JjgXGvlLA7K+HxYQQd7iWcLoXsDNyag9kYHBGk=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: hlLFlFtkVNlwFayBNNxsAy6Ns5DWfH3jIhcDOlGaF7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e6:1a:35:98:92:d3:2b:d1:ce:cc:f3:a8:82:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Oct 19 10:01:39 2025 GMT
Not After : Oct 20 10:01:39 2025 GMT
Subject: CN=669e8d6cc9bc06c0af3ddefb1c8d2106e879529b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:d5:93:c6:63:9e:ef:bd:5f:b9:60:4e:5c:
b8:2b:cd:d4:29:8f:b9:57:76:7a:9d:1e:aa:28:60:
f9:fe:55:ce:05:f8:ed:55:01:30:68:81:a5:be:fb:
43:2c:1f:42:07:7a:cc:82:02:da:00:ef:41:40:bf:
b1:b8:f4:b6:45:9b:1a:07:ff:c7:73:11:79:68:4d:
14:dd:60:da:ba:48:01:c8:5d:56:fa:97:72:b3:50:
03:aa:b1:5b:89:86:62:55:ef:22:89:70:be:57:85:
74:37:8a:25:48:a8:db:0a:3d:4c:8d:e4:7d:cf:ac:
df:1d:c9:42:be:22:08:c7:51:84:a6:58:5d:5a:42:
73:95:54:db:59:01:1a:3c:68:29:af:03:bd:d5:f8:
a0:f8:84:30:fa:b6:ae:2a:ab:37:6c:1a:9f:c5:6d:
ef:0f:a0:b7:b2:17:9d:98:55:17:88:05:51:93:89:
8a:93:3f:c8:14:76:35:29:4d:df:60:f1:da:07:9c:
18:cd:dc:7f:eb:c9:6e:8b:d1:00:26:df:cb:3e:ea:
04:e2:0c:c3:1b:19:47:81:19:7c:08:8b:4b:31:97:
f7:f2:b2:8c:80:4d:51:a0:3b:f7:cb:c6:e6:49:f2:
7a:ce:70:e8:25:7d:f3:c9:d0:e5:c0:c1:44:d8:c4:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9E:8D:6C:C9:BC:06:C0:AF:3D:DE:FB:1C:8D:21:06:E8:79:52:9B
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:48:e4:90:4b:2c:f4:ef:cb:7d:9e:b1:2f:7f:42:53:26:d4:
08:aa:b2:b8:4a:82:1e:68:d5:eb:db:b8:e4:65:00:42:43:5b:
ef:e6:53:b2:cb:3e:e3:33:17:1b:b7:cd:92:9b:0a:1e:d1:df:
14:1f:eb:8e:e4:82:a3:23:18:1c:66:14:0e:0f:ee:78:33:2b:
29:5b:77:94:54:de:c0:a6:e5:02:42:4d:6e:f8:ec:61:3a:c3:
1c:00:45:11:40:92:bf:f3:e9:38:d1:98:32:51:fc:24:e8:1d:
2b:e5:4b:69:26:de:b4:71:58:6b:21:fa:f4:d7:9d:c9:e5:14:
9d:86:62:ce:02:90:d3:ea:59:6e:38:49:4a:06:a7:2e:9e:00:
32:d1:93:90:1c:1d:2f:93:18:0a:d1:d1:84:70:e1:3b:79:79:
86:6e:d8:fc:e5:a7:66:cf:7a:4d:19:ff:ca:4a:00:b1:31:61:
74:90:e1:2f:86:46:26:81:16:a9:62:44:13:fe:5b:c9:cf:64:
c3:35:96:5c:56:92:a9:76:aa:51:e5:82:a6:54:3a:25:56:47:
db:c2:1a:c0:1d:e5:a7:18:06:38:30:ec:af:c3:11:e0:24:56:
a3:07:21:5d:68:cb:b8:ec:a0:8a:e7:6e:f7:10:6b:2d:62:9a:
17:7a:ac:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:59 2025 by rpki-client