Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier: A0l4ec/LUQm3h/pCcJunNN2DoFxEIqd4JRf4FZoQAos=
Subject key identifier: 61:0C:6D:3A:08:4B:71:7B:D5:41:45:E6:05:97:A6:E4:97:E8:E6:D4
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 0199FBEAD36B741DFF2B12BE08ACC6424D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number: 0F7E
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: IpvxRCQ4DGVBzxgChmDm1FQPItCJLfTZogZeXk7E+8M=)
2: b64Uii9JYXCMSIcDqVfd-guKolk.roa (hash: zu1QMl+md4/UwiMRhp2koQ5VJ3r3EhScu5BVA2+NzSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d3:6b:74:1d:ff:2b:12:be:08:ac:c6:42:4d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=610c6d3a084b717bd54145e60597a6e497e8e6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:aa:18:f7:e1:c1:42:7e:83:02:f7:f6:65:
2e:9b:12:3f:ac:b7:1f:9e:d0:05:05:5c:8d:6f:8e:
c6:c1:57:1b:23:8d:f6:ac:10:4b:66:f7:99:df:ad:
b3:9a:81:4f:6f:77:5d:8d:f4:91:00:8e:a4:68:83:
40:be:91:3c:88:95:8e:71:a6:56:c1:1b:e9:fb:0f:
5c:41:d6:7d:ed:36:e3:eb:48:40:03:d9:67:a8:48:
ee:dc:ed:f1:ac:50:e1:bd:bc:e4:d8:57:34:4a:38:
b4:cc:ea:ed:a8:aa:f7:76:b6:78:5d:59:0f:0a:c9:
08:d8:27:46:ae:51:70:33:a4:4f:2c:fb:0e:fc:d2:
89:22:98:a1:50:33:ac:b4:f8:08:74:f7:83:7b:40:
60:d6:3d:33:27:b3:2f:16:85:2a:1a:d1:a6:e3:12:
34:60:40:97:86:3b:d7:7c:de:ae:70:2b:45:e7:52:
de:52:ed:55:7c:ca:7c:a7:8b:0e:1c:f6:b5:64:a6:
0a:d5:5d:4b:80:09:d8:3b:f3:7f:db:d3:cd:ed:16:
80:34:6c:ed:74:4b:38:4d:86:4b:cd:06:41:56:f2:
e7:41:08:3d:62:24:9b:1a:d2:5a:0d:2d:7f:50:bf:
0e:7b:d7:19:54:55:3a:16:a9:62:2d:c8:93:16:b7:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0C:6D:3A:08:4B:71:7B:D5:41:45:E6:05:97:A6:E4:97:E8:E6:D4
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:47:32:37:cd:3e:5f:fc:98:2e:8d:ef:11:e6:a1:b6:3a:91:
ab:dd:05:d9:5f:92:88:72:2b:76:4b:97:39:9f:b2:1b:cf:6a:
4a:00:75:e1:53:ec:ec:0a:90:58:d6:42:b8:db:3a:52:0f:f1:
25:56:a7:1b:b2:cc:63:1a:3f:cd:ea:3d:d4:d0:28:4c:9f:9d:
3b:37:f0:3c:a7:44:42:13:04:0b:29:fb:e4:80:07:2a:dd:6a:
fe:52:f0:01:98:d5:15:48:ba:d2:35:d0:0d:11:7c:c8:43:27:
1b:b4:ea:8b:07:2b:90:6a:47:5d:6d:7e:4f:c7:1a:02:81:5f:
79:c8:f9:35:59:7e:54:be:a6:0f:df:eb:41:3d:f4:d3:05:80:
bb:0b:c3:79:18:ea:f4:27:d8:b9:a6:44:4a:2b:d5:b0:08:41:
ef:ae:88:08:7b:80:23:fa:e2:ee:75:1b:6f:02:04:5b:99:ac:
a4:09:43:70:7f:e3:50:2b:b4:09:69:ea:4d:95:48:ce:84:1a:
5e:39:e8:eb:aa:02:49:99:c8:a6:7e:fb:aa:61:00:6d:65:4e:
e9:a0:d6:06:0c:72:b3:05:66:06:5d:24:62:a8:a3:16:b2:5c:
cf:bf:d3:10:c5:ad:9f:28:e0:e0:66:7f:46:45:f1:79:82:56:
0b:16:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:31 2025 by rpki-client