Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File: KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier: gdjNOMW6kn19hrwzBiI1r9Vq7gkjPpZMyi/KWRJmAZ0=
Subject key identifier: 03:8E:73:BF:B2:27:E3:72:1D:3B:C4:75:44:51:71:91:9E:AE:70:2F
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial: 0199FD6B5BB74D5B76D9F4FB906C64644346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number: 0A95
Signing time: Sun 19 Oct 2025 17:01:35 +0000
Manifest this update: Sun 19 Oct 2025 17:01:35 +0000
Manifest next update: Mon 20 Oct 2025 17:01:35 +0000
Files and hashes: 1: IrngZwNeCRKtAoxB4sjafysXZOU.roa (hash: F88BOJPqoOgD37Dontv64Q9dEIIVW8ruH+Ll3zUdJ5A=)
2: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: Ns1VBvufcon54uHnBvV1oENdjEjaOK1G12GJsstQ5eY=)
3: fLPcJ1RIjba-u72cjm954X9WUC8.roa (hash: 5ctmy3KSPkOthc06xHFkUIcKR/lSHvthuixFmuKfgFo=)
4: kkAK_iZPZkQ3SU5RdHZU1RDOfeU.roa (hash: W2MujiWrNHHsLvMLkdeEzpSgSuXzmOtIKkDO9DQfbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:5b:b7:4d:5b:76:d9:f4:fb:90:6c:64:64:43:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Validity
Not Before: Oct 19 17:01:35 2025 GMT
Not After : Oct 20 17:01:35 2025 GMT
Subject: CN=038e73bfb227e3721d3bc475445171919eae702f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:d0:3c:7d:e0:59:2b:94:65:d7:a3:e4:77:
90:7b:97:e9:19:51:61:3d:95:f2:dc:05:e7:69:20:
e9:47:ef:34:fe:57:85:bc:3e:ae:c7:04:d7:57:43:
44:80:97:7f:88:1b:f0:1f:a2:e1:71:02:e4:94:11:
2e:93:79:e6:8f:6f:72:35:9e:47:5a:5d:89:d2:df:
d8:cd:c9:42:37:bd:4b:64:0b:b8:09:50:3f:bf:8b:
38:46:3c:c3:ac:36:6d:02:b5:1c:e5:9b:25:cb:15:
a3:c4:c6:68:17:75:40:a2:9c:47:2e:4d:e2:73:96:
80:36:70:7c:00:2f:7f:6d:4c:c1:ee:b4:ca:d8:e4:
61:1c:ff:b4:a4:cf:6a:69:30:4b:3b:2f:ae:f1:db:
86:79:de:d6:21:da:97:46:ad:18:e1:1d:3b:8f:9b:
ca:b7:83:9f:fb:44:2e:be:cc:3e:d2:30:b5:dc:49:
ec:cd:c7:df:47:25:52:7d:04:02:b4:29:22:ca:15:
29:b3:3a:34:ee:aa:0d:c1:0c:f8:e9:dc:d8:e1:09:
ba:c7:af:09:75:1f:e3:55:c9:b4:8c:59:85:8c:98:
85:cc:2f:f4:f3:42:0e:aa:b8:7e:50:4f:b6:35:36:
17:3f:1a:32:58:a3:57:34:4b:e4:83:ae:00:59:ee:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8E:73:BF:B2:27:E3:72:1D:3B:C4:75:44:51:71:91:9E:AE:70:2F
X509v3 Authority Key Identifier:
keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:79:2b:f4:e9:5c:90:27:e6:b2:4a:e7:da:52:75:dc:eb:c3:
58:29:fc:1a:02:af:28:5a:75:38:0d:98:12:d1:da:0c:f1:84:
51:07:ac:62:31:e2:28:20:24:9e:90:f9:0d:f1:d3:80:41:6a:
b7:02:ca:d1:2c:fc:dc:4e:b8:0c:a1:35:db:2c:17:67:18:cc:
35:a1:c1:17:ed:06:42:b3:cb:83:50:68:d9:fe:63:c4:80:31:
2f:17:b0:41:ea:af:60:43:50:84:12:62:b8:ba:b4:b3:46:55:
fb:6e:a3:7c:7d:9b:d2:03:ca:e4:2f:14:f3:7a:27:76:3a:13:
bb:3e:3e:93:84:e8:db:fb:2a:0c:ec:0b:16:27:97:39:2d:6a:
ef:07:d3:3c:73:12:7f:d8:5c:06:58:cb:53:13:43:50:40:a4:
dd:74:79:e9:55:8b:14:6d:1f:8b:e0:e8:3c:44:d0:99:29:94:
5b:6a:ff:9f:e1:b8:77:b6:9c:2b:a2:0c:c3:82:dc:7e:98:39:
52:b4:9b:46:ef:45:4f:b6:e8:0a:fc:a6:5b:72:e1:9c:01:0b:
55:05:80:c9:8d:9d:c4:27:4f:54:93:97:b9:18:d4:fd:3f:4b:
45:3b:c7:1e:0e:f4:fa:71:3f:18:ba:59:48:7a:ba:6d:c9:7d:
50:16:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:50 2025 by rpki-client