
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier: /xvy4Dua9O5o6CcuUGcIZoHQcGdmsCHxKRgodS+ZiqY=
Subject key identifier: 79:E9:14:B8:57:E2:67:4E:63:E3:61:49:57:BA:5B:4A:33:55:B1:27
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 0199FB458C0F53A34747430762EE8F7E82BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number: 0741
Signing time: Sun 19 Oct 2025 07:01:03 +0000
Manifest this update: Sun 19 Oct 2025 07:01:03 +0000
Manifest next update: Mon 20 Oct 2025 07:01:03 +0000
Files and hashes: 1: KC67bUzfDKSrHmCB6UUpuneAEt0.roa (hash: kjD/C1Ln2i2diMcFsx9dGCTAO1I1ywN8NGufWziFBfg=)
2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: na4JBcKgkQcFg7ByJAh79RwXHWuTtWpC0lYe2k45hS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:8c:0f:53:a3:47:47:43:07:62:ee:8f:7e:82:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: Oct 19 07:01:03 2025 GMT
Not After : Oct 20 07:01:03 2025 GMT
Subject: CN=79e914b857e2674e63e3614957ba5b4a3355b127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:e1:65:d1:0b:be:ea:89:56:56:a1:c2:a9:
a6:b7:a5:42:e5:68:32:49:da:6e:1c:54:c1:51:47:
af:a6:e8:62:d6:d6:97:8b:26:e6:8b:57:21:1a:1f:
2f:9c:8e:e3:12:62:3a:06:61:79:2b:c4:f5:7b:1f:
af:cd:1b:00:c9:7a:6b:43:35:5a:64:ce:68:64:07:
6f:e8:a8:78:21:e2:4e:a3:ee:bf:82:fd:24:3c:ed:
94:19:61:7f:95:bf:85:d6:f9:f7:a3:6e:b0:32:0e:
40:6e:d8:64:7f:9c:2b:3f:d9:9b:57:4e:3f:62:09:
50:69:13:d9:db:66:52:dc:0d:f1:46:af:c0:87:79:
00:37:f5:a6:5b:ff:e2:09:d4:ff:5e:96:a2:37:a9:
30:b3:b7:02:96:1b:ed:cf:ef:54:bb:c2:8c:6e:aa:
3f:41:fb:22:60:93:6a:04:89:87:ec:23:61:8b:1c:
91:bf:ed:f2:19:f7:96:5d:6d:07:45:df:b2:67:5b:
14:a9:a6:37:e5:15:fe:29:be:4c:8e:9e:7c:e4:f4:
31:e9:7a:fc:69:b6:ca:31:21:38:c5:93:92:70:bb:
d0:24:32:94:08:b4:bf:a8:05:1e:f5:2b:18:a8:7b:
0b:cb:80:38:6a:b3:45:29:1c:74:0e:1c:7f:45:68:
52:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E9:14:B8:57:E2:67:4E:63:E3:61:49:57:BA:5B:4A:33:55:B1:27
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e9:33:81:5f:28:81:aa:9e:0a:96:e7:73:5b:2d:1f:2a:59:
c8:ff:58:cb:ba:c4:a3:db:8c:e9:15:84:80:f2:82:07:2e:27:
a3:25:34:75:cf:6b:c2:ff:d7:fd:bb:d1:05:21:b0:8f:a4:1f:
87:b7:2a:8c:f8:5d:70:2c:24:7b:36:83:d3:98:bc:23:ef:c3:
cc:4d:cd:03:36:54:6a:7b:b7:56:84:89:39:45:69:33:b4:c3:
f1:08:20:49:49:7d:ce:ae:86:7e:a4:2b:91:40:fb:e4:02:54:
e3:bd:68:26:88:fc:2e:75:f7:9c:72:df:c6:56:00:22:58:05:
e9:88:0a:2d:20:b4:b3:50:f0:84:b5:c9:fe:f2:aa:d5:d1:94:
1b:a1:bb:e8:24:9b:c6:d4:02:3a:06:3d:02:40:bb:51:25:c8:
33:ac:92:70:4f:c7:ed:11:3e:66:09:24:ca:3f:22:a0:a1:d2:
e5:8c:f9:4a:20:46:ff:50:7c:ec:2e:95:95:5b:85:31:f1:a4:
91:e6:92:50:9d:00:d1:77:c5:99:de:a9:ba:90:41:5b:a5:23:
19:72:1e:ec:61:3d:c6:cf:52:cc:49:77:b1:dc:bc:73:57:93:
97:74:fb:49:5e:dc:c8:ff:64:6c:48:74:f9:ab:c4:52:22:a3:
e6:e2:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:12 2025 by rpki-client