Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: OydbUwIIMeTc+m6sKmeMCG6eBE7NKUY+HT5Mza0qU7Y=
Subject key identifier: 7B:EB:8E:E9:18:2E:AA:EB:0D:38:3C:FC:DC:F6:FF:83:D1:FC:38:27
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 0199FCFD6C8D10650B7BD831099BD799DB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 0C51
Signing time: Sun 19 Oct 2025 15:01:30 +0000
Manifest this update: Sun 19 Oct 2025 15:01:30 +0000
Manifest next update: Mon 20 Oct 2025 15:01:30 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: /Ai4IoKwwNguyjRG47Fu5kR9EX8zSd2/LSWn24kFtmc=)
2: aZtA3Tb82BUczOl9SsTYverE7lI.roa (hash: LK8Z2BqrNCcDSNuABGRySwkLhGqKgLJf/sHl1VyEOIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6c:8d:10:65:0b:7b:d8:31:09:9b:d7:99:db:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Oct 19 15:01:30 2025 GMT
Not After : Oct 20 15:01:30 2025 GMT
Subject: CN=7beb8ee9182eaaeb0d383cfcdcf6ff83d1fc3827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:63:de:63:15:e2:b7:ec:2c:f7:85:75:ac:
40:79:3f:44:f6:6b:de:5d:a8:f9:fd:80:34:2d:f9:
a4:13:b7:fa:89:73:90:87:38:73:5e:70:bd:fa:64:
7e:f2:91:0a:a2:5a:a0:74:9c:24:28:b8:4a:f2:ee:
f6:9a:aa:c4:c1:7b:05:25:c5:09:03:01:99:eb:45:
f1:96:e4:45:01:32:6c:54:b9:5d:fa:37:15:b8:f5:
32:24:12:e9:d2:ff:08:a5:43:c7:08:20:dc:48:90:
4f:74:4b:c7:76:46:81:e8:58:81:29:f5:0f:ef:09:
a5:c1:c7:f2:6a:2b:0b:53:ce:88:bf:5a:eb:cb:9e:
43:26:d3:3a:0f:04:cd:bb:d1:69:57:5b:f0:1f:8f:
74:68:c2:d4:b0:eb:01:54:03:cd:f4:8c:6b:ca:d7:
4d:78:48:98:3e:c7:f9:67:52:61:83:cc:3d:b7:3b:
70:4b:c5:8c:24:21:b4:39:7b:5f:55:dd:55:fe:68:
57:00:82:ea:26:65:8a:ed:98:82:bf:59:dd:16:65:
ef:53:0a:0f:d0:cb:85:f9:b1:92:c2:d7:b1:d4:b0:
71:e2:ab:33:f5:d5:9f:22:5c:fd:7c:bc:74:07:78:
c5:00:04:5b:4c:44:30:26:a5:fb:e1:6b:b1:b2:b9:
3a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EB:8E:E9:18:2E:AA:EB:0D:38:3C:FC:DC:F6:FF:83:D1:FC:38:27
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:10:63:89:62:44:e2:8d:35:9c:a9:a6:b9:ea:a6:d1:56:fe:
1d:b3:bf:2c:04:77:55:33:dc:bd:ad:8d:b2:05:85:83:bc:81:
5b:92:c0:3c:9a:d5:46:e1:6e:cc:f5:ff:be:d2:30:ec:a5:98:
ad:57:f6:c4:14:14:c6:db:70:8f:eb:db:8e:90:84:b4:57:1c:
ea:02:c9:58:eb:19:8c:e5:b1:a7:8d:98:d7:b9:4b:e5:71:5c:
97:d9:04:2d:55:75:6d:ba:e0:03:79:40:b1:b0:b0:db:38:fd:
b7:b6:50:44:aa:b6:0a:db:e6:11:1d:ef:7f:2f:7f:4e:b8:85:
59:d3:fb:50:f3:cf:9f:4f:66:f3:97:5b:e1:53:ce:5b:6e:9f:
de:c4:aa:88:ae:a9:1a:63:d3:45:b1:24:10:f7:cf:92:0b:cd:
c3:71:70:23:38:69:fa:6c:b8:a3:9d:59:06:c9:11:be:a7:2e:
98:90:97:62:fb:cb:77:19:1c:a6:23:11:4b:dc:fc:11:74:de:
4c:d0:3e:da:bf:36:1e:ca:9b:9c:8b:da:b5:2a:48:82:e3:db:
75:d5:92:63:e8:18:40:a2:42:b8:4f:f4:01:00:5e:ed:ab:1f:
00:c9:6d:b0:48:52:05:85:0d:e0:8c:b2:f5:29:61:31:11:4a:
df:4b:8b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:55 2025 by rpki-client