Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
File: KQgY9N9Ka9El1fIhJBRaafW2o0w.mft (raw, json)
Hash identifier: Zh/6L0Du2cxHxA5WWdKmONZZpGOxyr2X8i6Mm2AE+oU=
Subject key identifier: BC:C5:4F:35:CC:6C:9A:B7:90:1C:8A:F8:E8:B5:DF:EA:D9:FE:8F:27
Authority key identifier: 29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
Certificate issuer: /CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Certificate serial: 0199FBEAAF5B7A833E1D8C01AE6B33B37580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
Manifest number: 015E
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: KQgY9N9Ka9El1fIhJBRaafW2o0w.crl (hash: UtYuqZ9HiPnAPvJWlVXOLdWJp4hPWkl1dpa0UEzd/mk=)
2: eRG91sI4OxgJ5Ftj11HHCdo0lp4.roa (hash: XcHiB6tZLyMWY77AGAaJ1ywYGGueBg3m4NiJeGQTKn0=)
3: gH5Nx8BjDuFW9EStmNz8wzpaF0c.roa (hash: 4+5mIuyJK0b0oNUWLYEpywekd9cxzAgZ3IGvlVb8A04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:af:5b:7a:83:3e:1d:8c:01:ae:6b:33:b3:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=bcc54f35cc6c9ab7901c8af8e8b5dfead9fe8f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:c8:0f:a8:17:7f:c1:c8:fd:8f:6f:37:97:
50:76:62:a4:e1:ce:6b:38:71:d4:45:ab:53:54:d1:
6f:3c:d0:92:24:43:f1:f3:c9:73:89:03:da:04:ed:
30:00:e8:e4:3b:b9:4d:b2:2a:24:e5:5b:6b:6f:a1:
0b:48:43:c6:3f:40:88:23:fd:4b:1f:b4:5b:cf:b1:
22:b2:3f:04:a6:39:44:83:82:5f:ad:d3:a0:9a:76:
bb:9b:db:dc:8b:18:ad:bd:a1:c2:b6:f6:5e:4a:6a:
48:62:10:1a:e1:70:81:c7:2d:4f:03:19:0a:b7:fc:
a1:cd:73:9d:49:7f:5f:e4:18:6f:d0:a4:ab:e3:dd:
93:58:ab:01:98:95:e9:5c:ab:08:70:38:0d:1d:78:
f4:d3:a3:6c:64:05:54:76:dc:f7:27:1c:25:be:59:
4f:f7:b4:b0:4b:69:a0:92:ce:b0:23:a7:22:51:78:
24:cb:a6:62:a2:2d:eb:de:22:e0:43:1c:1c:e8:58:
ba:a8:f3:e9:49:cd:5b:d9:9d:98:10:6a:bc:1c:b8:
97:d4:2f:15:c1:36:21:8a:87:6d:3b:51:49:39:a7:
78:2a:05:8f:e3:b7:a0:7a:72:ba:2e:bb:6a:9f:c7:
da:9f:ae:c5:d3:64:d6:a3:05:be:81:2f:53:3c:e7:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C5:4F:35:CC:6C:9A:B7:90:1C:8A:F8:E8:B5:DF:EA:D9:FE:8F:27
X509v3 Authority Key Identifier:
keyid:29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e2:ae:ab:d5:cf:dc:ef:c2:76:0f:00:3f:03:1a:4b:c1:80:
ee:66:bf:90:dc:7a:12:a5:83:8b:65:5d:35:ab:38:97:71:e9:
e8:8c:77:ce:31:6f:bf:fa:bc:c5:f4:dd:50:76:21:02:c8:29:
98:6e:89:4f:9e:2f:6b:1b:95:4b:ff:91:95:67:07:8e:2b:0b:
ce:d5:1e:bf:3c:ab:dc:e0:3c:dd:99:6b:4b:64:91:ac:58:de:
9a:ff:b6:6b:05:3a:43:f3:60:88:89:10:75:ff:0d:85:3b:bf:
5e:4e:c5:4f:a5:1c:cb:d3:d1:f4:15:7d:92:70:65:2e:c6:94:
6e:17:53:2d:6c:13:27:10:57:93:18:3f:db:e8:3d:68:60:f1:
7b:86:bc:94:f2:31:45:64:49:dd:0d:7b:79:3c:df:36:41:5a:
bb:a9:11:92:74:ae:c4:46:0f:db:40:60:78:7c:b8:80:b8:fc:
86:ab:50:63:55:20:07:d1:d6:5b:66:72:5e:09:8f:aa:21:a4:
42:c7:d0:8f:5b:6b:9c:64:8c:78:9a:ac:0e:88:73:35:f2:9b:
52:e1:32:82:44:6c:e1:83:f9:c2:b2:31:9d:d0:ff:ea:9b:27:
49:e0:04:c9:44:84:7e:67:ba:e3:e0:b4:ca:d8:79:ad:b1:86:
73:10:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:40 2025 by rpki-client