Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: pN42gs10KN7VzRuJd0koCC+3etJubsSP0EDjZNWZLGw=
Subject key identifier: 39:F5:51:26:EC:F1:37:F2:EB:69:DF:A5:26:9E:13:30:57:69:91:75
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 019A00A3352DAD17E2BDA7B6276C83A20807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 1469
Signing time: Mon 20 Oct 2025 08:01:27 +0000
Manifest this update: Mon 20 Oct 2025 08:01:27 +0000
Manifest next update: Tue 21 Oct 2025 08:01:27 +0000
Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=)
2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: UVhz9RG2A/LA5y2BSkti0vUAP43eLVs3O3J7ZVCB5+4=)
3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:35:2d:ad:17:e2:bd:a7:b6:27:6c:83:a2:08:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Oct 20 08:01:27 2025 GMT
Not After : Oct 21 08:01:27 2025 GMT
Subject: CN=39f55126ecf137f2eb69dfa5269e133057699175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d7:03:37:2a:e5:27:c8:17:e1:be:b4:01:fb:
94:7a:be:3b:45:4a:05:7c:93:e8:99:38:0b:67:ac:
bd:fd:f1:4b:18:54:70:46:c9:47:af:81:b8:40:99:
40:46:7d:66:82:ce:7f:a1:d8:c4:18:ce:d7:b5:d0:
fe:c9:60:a9:53:b1:81:bd:bd:84:d3:ef:b5:c2:dc:
1d:d7:a7:fa:71:59:b8:09:d3:df:d4:e3:08:6a:4d:
79:90:04:6f:05:e4:b1:96:b4:b0:e1:fb:2b:94:92:
8e:9b:c1:d7:59:32:ad:fb:62:08:bd:ba:3e:21:e8:
79:5b:bc:bd:55:06:7c:a0:45:87:93:02:37:1f:d2:
4d:92:71:0c:c5:9b:22:2a:9a:87:aa:5d:d8:9a:56:
24:d4:cd:ea:ba:04:f6:5a:62:de:9e:14:b0:0e:60:
28:74:00:7f:7d:2d:cc:e9:40:95:a9:ff:0e:9e:ca:
44:15:21:5c:23:fb:20:d4:e1:d3:64:4a:5a:2b:2b:
af:5f:77:e8:80:03:49:02:72:2c:d9:a2:ef:a9:01:
b7:b0:e2:d1:46:65:0d:f5:44:35:dc:f0:69:c1:52:
a2:79:b8:c2:92:3a:00:8f:dc:f7:7e:23:0c:7c:32:
45:8e:ec:21:ec:82:87:d8:4d:48:84:ca:53:6e:14:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F5:51:26:EC:F1:37:F2:EB:69:DF:A5:26:9E:13:30:57:69:91:75
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2a:0c:33:b4:23:48:9a:44:00:2b:43:75:22:46:2a:97:bf:
21:48:08:4d:2c:80:d5:10:78:67:de:dc:db:e1:31:7f:1b:7a:
c1:17:a5:1a:07:c2:8c:de:62:64:c8:b8:90:81:c3:28:10:c9:
0b:b3:b6:6a:d7:06:de:47:be:f7:53:0e:14:c5:92:b5:65:eb:
ff:6d:f6:16:2a:ca:ce:28:95:a6:a2:2a:dd:ae:23:1f:5a:81:
29:e1:d5:86:f8:ee:2f:7a:e2:04:5c:91:96:0e:26:8c:02:02:
2c:e9:62:ad:62:52:2b:76:56:25:de:10:f5:49:cf:82:e4:3f:
3f:3a:3f:06:58:fc:66:ca:9e:c6:0a:56:7a:bc:62:44:7b:a3:
5b:bb:b0:a9:20:81:f0:cf:d6:e2:9e:ae:f0:e0:4d:33:eb:05:
0a:2b:76:5c:cc:ed:28:b7:b3:6c:76:07:9b:a7:2a:55:d9:1f:
7e:93:a0:50:b6:80:1e:69:f7:03:5a:3d:ae:95:d1:5e:bf:ff:
08:e8:90:f5:c9:45:c3:d4:8d:3b:0d:8c:e9:c7:08:7e:0b:a0:
a6:fd:0a:79:54:53:32:d6:73:fa:d6:07:cd:93:71:3c:3e:06:
ce:3f:62:fe:7d:66:1c:24:43:d6:c8:8f:52:f4:c8:db:8d:b6:
90:18:10:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:56:19 2025 by rpki-client