Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: QDxHzEoi2sHrOEkOFyx01pFLZPUqeIFYPs9LtOKRsWY=
Subject key identifier: 27:70:23:68:A0:FB:9E:39:AE:2D:AB:00:C2:6F:15:E7:84:79:17:A7
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 0199FBEAAD2A9EAB16714D5495FD25D72296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: 75qkVCY5XXIcFQQiW3dyFVzW6eQ.roa (hash: dXFNWNpycxDfWS4F1kZ68a/+XDX33UqEzrugZvo8DVg=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: UJcWmeH2+dcfSRm3GvqdU+eRpYr8cMfZXB6vmKgFGbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ad:2a:9e:ab:16:71:4d:54:95:fd:25:d7:22:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=27702368a0fb9e39ae2dab00c26f15e7847917a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:d6:f5:80:5b:d6:e0:30:86:41:13:dd:4c:
41:41:09:fd:48:11:b7:1e:e7:a1:2e:f5:c7:55:2e:
b7:db:51:b7:d3:6f:2e:3d:a2:5f:e9:0d:32:bd:c6:
d6:0b:61:af:d4:44:07:a5:54:e0:f8:cb:b5:62:4e:
a4:02:1f:cd:20:36:89:de:42:76:57:71:60:ef:3e:
42:3f:40:5b:9b:58:c8:2b:8f:13:9d:c4:21:e1:c4:
e3:68:24:1a:6a:63:8d:8a:34:a9:8f:a8:29:ad:90:
b5:73:51:7e:c3:a6:ed:fd:ca:91:bb:13:aa:bf:ef:
9c:9f:e4:3a:0b:eb:9a:0f:0b:cb:2a:b1:f3:3a:81:
ee:26:96:55:b2:2c:fc:48:2d:58:71:6c:22:04:5a:
c0:08:9e:0a:d1:91:10:d6:32:4a:e7:d7:4d:4d:a0:
3f:50:63:e6:16:9c:2c:6e:f5:2e:b5:de:8e:e6:60:
98:18:86:a9:7f:53:61:92:12:ec:f4:5e:0b:e6:91:
04:c1:64:36:70:d6:7b:81:f4:f8:8a:a2:c1:04:dc:
31:d7:e5:fa:b7:e6:54:25:47:d5:62:0d:71:fb:18:
48:18:d8:b7:79:c6:e3:9e:a4:5b:68:f1:66:1c:c1:
e1:b3:92:bb:31:18:ef:10:17:2f:a8:6b:e2:29:d2:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:70:23:68:A0:FB:9E:39:AE:2D:AB:00:C2:6F:15:E7:84:79:17:A7
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fd:82:36:10:31:c8:2d:e5:c7:82:0d:d2:37:8d:7d:1f:c1:
f8:79:5b:23:6e:ca:3d:df:ce:8e:b6:9a:69:ad:6f:a1:1d:ea:
99:3a:4f:2c:f2:af:fd:4f:36:01:b8:97:ee:fe:e4:8c:60:65:
e3:93:a6:5c:f4:0c:a6:19:09:1b:c0:f7:f5:aa:14:86:9b:a3:
0b:fb:22:3d:b8:94:39:1e:f9:71:8b:51:22:41:b5:a7:8f:99:
fe:d9:81:e8:d3:e0:5d:d5:36:a8:b4:60:51:a3:94:ff:52:97:
fe:38:32:a7:4a:5e:a8:f3:c1:88:18:91:73:02:df:1f:6d:8d:
00:9b:0c:4c:81:ca:56:cd:62:7e:a8:47:bf:d3:76:6d:c0:a7:
ab:8d:af:e2:6f:9b:d9:d2:bb:58:3a:1d:d7:b2:c4:68:c1:69:
37:2f:49:33:fa:e0:65:5d:51:58:cf:37:3d:d7:59:90:ee:95:
f4:4e:5a:ec:e0:2d:4f:a1:96:34:7d:ce:23:e3:d1:1d:c3:92:
5b:eb:fe:94:6b:6d:01:f2:e3:8c:d1:e4:16:67:73:40:ae:27:
8f:f3:e5:0d:82:14:20:b4:f4:2f:b8:f4:61:20:e5:42:5f:2d:
1e:c8:65:78:67:8d:fd:7c:62:19:2d:5d:c7:10:d1:63:fc:a1:
69:13:8e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:09 2025 by rpki-client