
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: fDaPVGDd9Xpklg1prybphy+idz7qYEQBa7mddnz6on8=
Subject key identifier: D8:7A:4C:3C:C1:03:5C:99:AE:19:93:68:6B:0B:BB:73:0E:6E:BF:BF
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 0199FBEB88A79CAE34ED58CE3ECE9389C85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 12D8
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: ViY2zesCqHuFzRpA5ktShtKk3txa2y6/M8dfgRCJ88w=)
2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:88:a7:9c:ae:34:ed:58:ce:3e:ce:93:89:c8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=d87a4c3cc1035c99ae1993686b0bbb730e6ebfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:9a:54:cc:44:1c:39:90:a8:d2:7d:8e:e7:
27:b6:6b:e8:a4:58:2a:45:42:2b:3b:06:fc:3a:8a:
15:57:52:58:cd:14:33:ad:01:ae:42:f0:41:77:6e:
c9:d1:30:5c:c4:3a:e0:f9:f2:74:15:aa:ae:92:31:
04:d8:31:7f:13:33:6b:c0:e2:eb:03:3a:7d:bd:1a:
20:3f:93:be:59:ba:fd:66:b4:99:16:e3:4e:03:2f:
2b:57:8e:d7:56:1b:47:24:59:1a:51:dc:a0:8a:9a:
14:92:ce:85:05:fe:da:81:d3:84:57:44:84:49:9f:
de:57:0a:21:70:cc:4a:d2:e8:b6:f9:d7:64:eb:46:
b6:b7:a1:55:38:80:c1:8c:64:5d:ba:3b:dd:f0:a9:
a9:bc:52:4d:3d:fd:8d:94:fd:f8:3f:8d:4b:06:eb:
c6:cc:58:82:33:0f:9d:e9:b4:34:a7:ff:ab:15:f4:
b6:90:61:cf:b0:99:5d:85:64:69:4b:38:d1:a4:5b:
9b:da:b4:67:ef:be:c8:eb:f2:f0:1f:b4:ea:44:07:
00:4d:cd:f7:02:98:76:f1:53:62:42:ad:2b:3a:b6:
b9:9b:88:f9:ed:f7:2d:9d:42:e6:98:26:fc:65:db:
bc:91:8d:e0:9f:64:12:08:c3:e3:58:b1:8b:a2:f7:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7A:4C:3C:C1:03:5C:99:AE:19:93:68:6B:0B:BB:73:0E:6E:BF:BF
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e9:b9:46:c1:c9:0b:33:1b:55:17:aa:fd:a8:10:e5:68:67:
76:36:76:0b:58:9b:20:1c:d3:7b:fd:52:58:cf:64:d4:93:cb:
94:af:73:47:7e:cd:93:32:78:4a:20:5a:5f:14:e3:95:bd:d2:
ea:c8:56:02:d2:7b:0b:ec:68:b5:0a:af:94:99:2f:4d:57:6a:
6d:5e:d7:cb:1d:08:53:54:07:f8:3f:e0:12:f3:1b:24:69:bf:
cf:a4:97:cd:bf:56:13:e7:bb:d4:0c:af:b7:c3:af:7c:97:f4:
70:66:b4:ba:a6:22:7f:c1:bf:e8:2f:24:72:6a:71:c9:24:f6:
52:20:50:3e:7a:31:ca:9a:43:52:38:d7:88:5c:a6:28:47:86:
92:9a:34:5c:d9:d4:52:04:8e:61:8e:3e:e2:1d:ca:7a:68:e5:
44:77:ec:df:c1:f6:e4:c8:9a:54:3a:2c:85:1d:f9:f0:01:a2:
90:d9:6b:32:05:d9:2d:dc:48:9d:cc:62:da:26:aa:bc:2d:ad:
bc:35:7b:5c:dc:60:5e:64:5c:a2:fc:62:8a:6a:56:a9:5b:6b:
ab:82:24:c5:e7:40:89:93:be:cc:13:3a:40:8f:7d:fa:79:74:
c5:7c:da:e6:ea:d2:9e:4a:5e:46:0f:e1:22:05:eb:d1:f4:38:
9a:c2:5e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:02 2025 by rpki-client