Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: wnzAegD4K5SPOiZh2+n/XC8syRYcPfkcyJnNAgQ59h8=
Subject key identifier: 5A:B3:E4:9B:EA:DE:37:EA:71:9B:6E:BC:03:75:12:02:50:6D:BC:44
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 0199FAA0D1191AFC5212F20D4B5EE4583775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 141E
Signing time: Sun 19 Oct 2025 04:01:07 +0000
Manifest this update: Sun 19 Oct 2025 04:01:07 +0000
Manifest next update: Mon 20 Oct 2025 04:01:07 +0000
Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: JzLiq35WBU6FQkvq6Zbb6KcckqBGFSwNsdEWrWCaDI0=)
2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:d1:19:1a:fc:52:12:f2:0d:4b:5e:e4:58:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Oct 19 04:01:07 2025 GMT
Not After : Oct 20 04:01:07 2025 GMT
Subject: CN=5ab3e49beade37ea719b6ebc03751202506dbc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:71:c4:e5:0e:cd:0c:45:56:41:6f:ca:d1:
41:02:ad:ec:b1:62:6b:e4:45:d8:dc:ae:61:79:02:
27:b6:3f:c4:a2:8f:d9:67:06:0e:e7:1c:0d:0e:11:
97:b3:f7:ef:25:5b:8c:47:8e:5a:57:c1:ac:b0:23:
e3:d0:3a:4a:9d:d4:c1:22:ba:da:b5:39:90:32:e5:
d2:dd:39:81:41:15:85:92:e7:47:e3:65:59:7a:b3:
d2:47:55:0c:ea:d5:b5:a3:bf:83:d6:af:97:da:4a:
50:de:14:83:13:84:49:73:fd:77:b7:81:82:9d:88:
82:93:fa:3f:d1:ab:38:74:67:41:4e:fd:2f:96:7f:
72:28:4c:2f:be:60:d3:3b:9d:8c:b1:e8:bf:90:c7:
06:3f:2f:c4:db:1b:6f:5b:23:86:25:6c:c8:cc:71:
00:b5:22:91:75:88:94:2d:9b:ca:a1:ce:88:66:aa:
84:db:57:99:ff:ba:17:97:7b:10:03:bd:9a:d8:b3:
61:1c:d7:e8:06:d7:ee:f3:c6:85:ee:18:57:69:42:
bb:b4:8a:04:81:cf:f3:e3:87:c5:31:d6:d8:8d:3f:
c9:fe:2a:0a:2b:24:55:a6:38:9f:29:41:7a:dd:88:
40:d7:56:66:98:79:9f:8f:2a:bc:a9:30:10:8d:10:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B3:E4:9B:EA:DE:37:EA:71:9B:6E:BC:03:75:12:02:50:6D:BC:44
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d7:0e:8b:5a:8b:b5:5d:3c:95:17:e3:f0:0d:85:ce:4b:70:
b7:57:2d:9e:40:d0:d4:e1:84:c1:58:8d:7a:74:ae:b7:9f:b3:
99:5f:82:8d:99:ca:8e:12:70:9d:7b:39:ac:56:35:45:30:d9:
f9:57:ca:7f:98:fd:e1:04:6c:ea:74:b1:f1:10:95:4b:e5:71:
39:19:f2:0f:19:88:3c:e5:aa:50:f7:6f:20:75:7d:55:32:57:
39:c4:5a:cd:93:be:93:40:a5:64:20:37:ec:98:ec:77:1c:62:
87:bc:49:8c:ec:8d:29:38:25:e2:44:50:69:f9:5b:c0:9f:5e:
c9:de:b1:4a:c4:1e:c5:73:ec:ff:74:6e:4a:59:74:ed:38:0d:
f7:80:d0:8e:66:e2:4e:2b:28:ee:55:f1:55:e5:fb:f1:66:70:
a8:e9:24:93:74:7a:bb:8e:c0:7c:af:c7:3d:b0:dd:68:dc:3e:
2a:e0:cf:bc:58:e9:54:6b:18:5b:fc:39:e9:c5:40:93:6b:52:
0f:5d:5d:33:89:32:3c:82:38:fc:a6:2d:81:e8:b7:0e:9c:b1:
c3:c4:f7:d3:37:64:e8:b0:2d:de:21:65:b0:4d:4d:89:21:90:
04:7f:0a:d7:3e:9e:a0:a0:4e:96:c6:1f:49:77:b5:6d:34:91:
00:4b:e2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:08 2025 by rpki-client