Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier: 1iw7acWHE9LNJJWPLeI28XlDSU1Ycjlhl1adkhgF0jg=
Subject key identifier: 27:F1:11:9B:E1:62:DA:1E:06:E4:C6:59:E4:E5:79:17:29:FB:DB:FA
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 019A71B848A551983DF2E4D22232C6DC52B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (hash: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=)
2: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: WwnGurhd2T0j5AwN/uHJ/pb3GKLzSBRk1iD3ZxZxUh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:48:a5:51:98:3d:f2:e4:d2:22:32:c6:dc:52:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=27f1119be162da1e06e4c659e4e5791729fbdbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2c:10:db:6c:bc:ff:21:19:4d:01:21:a0:a2:
1e:41:3d:b8:40:cd:78:71:69:14:10:0e:74:63:e7:
79:40:d6:6c:83:b6:59:9c:4c:2c:fe:70:fe:3d:b2:
22:c4:68:9e:8c:4f:52:b7:de:23:c8:9a:65:7c:e2:
3d:c2:25:59:bd:95:41:1a:37:a0:e6:4b:d1:33:b2:
e6:18:a7:71:6a:93:90:ab:d5:92:1b:35:76:ff:f2:
5b:3c:21:08:82:44:1e:f6:57:49:36:b2:e4:5e:f1:
0b:7e:c3:67:23:23:81:69:a1:21:06:9f:8e:ef:b4:
cb:5f:20:d2:ea:cd:65:d3:75:08:d6:c3:20:21:b6:
12:56:2b:c3:a6:2b:f3:77:39:8e:75:58:32:a1:9d:
3e:52:2e:4d:ee:d1:cb:2b:f9:a7:2f:c9:c6:17:a6:
eb:ab:2d:37:0f:cd:88:d1:20:da:22:05:65:7d:0d:
22:83:0e:c9:d5:17:be:d9:44:f9:78:79:30:0e:6a:
16:47:48:e9:31:c9:57:24:36:e2:ac:62:12:78:19:
cb:ee:10:d4:d3:b0:c4:d4:d0:ef:f3:29:d8:b3:a6:
71:d7:55:7a:7b:4f:55:e2:1b:05:6f:2a:da:f9:39:
e7:43:e7:6f:7e:75:a4:40:bf:26:eb:88:35:61:dc:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F1:11:9B:E1:62:DA:1E:06:E4:C6:59:E4:E5:79:17:29:FB:DB:FA
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:85:5a:20:e3:31:cd:13:cf:29:c5:52:bf:19:78:b8:67:ba:
87:ad:61:48:0b:59:52:d1:44:b0:20:bb:89:a0:06:a7:70:8d:
a0:ef:d4:72:6b:1c:cd:d7:62:7d:56:84:be:55:26:0d:e6:58:
44:c0:25:66:4c:7f:37:0a:8e:39:4d:bc:58:b8:ae:91:85:3a:
0c:de:df:14:e9:65:36:10:74:8a:c0:bf:c9:15:6a:6c:84:93:
ac:d2:4e:e3:8e:74:76:23:fb:62:69:b8:00:5e:9a:bd:f6:4e:
14:dd:34:ef:20:20:90:0d:02:2a:34:cf:a9:f0:3d:97:6b:e6:
76:a9:31:98:19:2a:d8:07:59:04:c8:d7:82:8e:d8:76:5a:c0:
90:f9:d3:7c:45:bd:4d:9d:87:b3:1f:d9:0e:74:1f:12:61:3c:
88:e6:b8:69:ae:de:2e:16:5c:ad:7c:6a:6b:8b:72:b1:e2:b0:
35:44:4b:d9:39:9b:e7:45:72:e0:bb:28:5d:8e:81:0c:ef:77:
80:c9:47:d2:a2:fc:c0:7e:0d:26:1c:fc:a2:d8:ed:3d:fc:19:
4e:e5:3e:b7:7b:cb:b5:0d:49:33:cd:26:0e:c3:0c:07:06:5d:
44:ee:ee:f6:76:24:7d:67:0e:1f:53:16:9f:2a:80:34:81:2a:
31:e4:1f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:16 2025 by rpki-client