Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
File: KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json)
Hash identifier: aXBBj9Oda5YZ5Tb23dngLlQhLcJjOvEcGAu10qjU/9w=
Subject key identifier: A6:21:0D:55:D9:18:A8:92:1F:C9:6F:06:01:3F:89:B2:B1:41:79:34
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Certificate issuer: /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial: 0199C2D6A7F5854FEED4921D594C01D931DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
Manifest number: 16C8
Signing time: Wed 08 Oct 2025 08:01:11 +0000
Manifest this update: Wed 08 Oct 2025 08:01:11 +0000
Manifest next update: Thu 09 Oct 2025 08:01:11 +0000
Files and hashes: 1: 25LU7394eXHg-PBe4_GLTG3VIkw.roa (hash: HyP22/g9CSOKH8mPcT6JDAYedjiAUR/5O/lp9cDajCk=)
2: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: AEPHgk8IG5awlsenV08fKd1/Uugg3PSPk3e3WcLNiEQ=)
3: VUqvat4WtfuUczhMBY4TDvxEK_s.roa (hash: Zqzw2dEApvnq4zRqyWAKudIEokzGJ+rSfWzcaKX+at0=)
4: jfIFCuUZlCfoxkAB48zp-OMBSv0.roa (hash: tfMbXizXQYE7ANVbZs7KN2qDtk5wxuAhU53t/l8imds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:d6:a7:f5:85:4f:ee:d4:92:1d:59:4c:01:d9:31:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Validity
Not Before: Oct 8 08:01:11 2025 GMT
Not After : Oct 9 08:01:11 2025 GMT
Subject: CN=a6210d55d918a8921fc96f06013f89b2b1417934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:cb:d1:8e:83:23:f0:c4:1e:d4:8d:12:61:
84:d9:e5:26:d7:80:cf:5f:5e:51:cd:32:7f:aa:39:
65:c0:2c:8a:9b:01:54:db:ca:6e:30:ec:15:4f:4f:
0c:b6:69:2d:02:0a:ad:55:3a:81:76:6e:ab:36:46:
2e:13:9b:21:36:19:f4:03:d7:b1:75:1e:bd:78:03:
55:58:96:e9:d0:b8:9a:9a:80:fe:f6:87:fc:7b:da:
fb:2b:c3:8d:3d:73:c1:57:f2:da:20:3d:86:eb:cd:
d5:30:22:74:7b:fd:6a:77:d9:cc:20:22:aa:6b:8e:
ef:7f:9e:48:11:0f:ab:f8:79:6f:7e:e0:52:22:61:
42:95:a7:03:01:10:ab:38:82:7d:fd:8c:57:a6:11:
89:d8:69:a7:d2:a6:38:b7:4e:24:e7:2e:5c:a5:f6:
0f:16:6e:3b:16:b2:7f:3c:11:c0:94:19:7a:11:01:
d5:c8:f8:5f:c3:1e:f1:97:10:aa:48:fc:0d:a4:dc:
fb:f3:74:87:7e:64:d2:40:1e:9f:38:77:aa:81:a3:
9c:93:ab:29:94:1b:62:4c:7e:53:97:05:6b:d9:44:
d4:85:68:ae:0b:63:f3:87:7a:95:99:a5:78:08:80:
ef:e6:25:37:43:6f:e6:00:1f:08:52:69:5f:28:ae:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:21:0D:55:D9:18:A8:92:1F:C9:6F:06:01:3F:89:B2:B1:41:79:34
X509v3 Authority Key Identifier:
keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e7:5e:44:97:59:72:54:10:ec:2f:ae:b9:97:5f:e4:bd:42:
f4:2e:42:ee:0a:fa:3b:50:53:2d:ab:3c:81:41:1a:3f:e4:37:
56:9f:f8:41:8b:a1:dc:c5:7a:ba:e1:e3:a8:e7:29:d3:7d:88:
5d:6a:c1:78:a0:43:b0:14:e5:55:85:44:c0:fa:96:4b:79:2d:
99:06:cc:af:cf:e9:09:1c:b7:f5:7d:11:35:48:1d:86:7b:87:
50:a3:28:34:50:10:ff:d5:90:af:9c:ce:2d:5d:42:d8:54:7a:
b8:2d:80:ea:8b:9a:d4:0b:e4:45:5a:a1:fd:f1:18:af:d9:0e:
5a:a0:88:10:54:03:91:9b:88:45:66:c1:b8:da:63:b2:11:07:
83:3d:e0:72:c8:88:1d:a7:48:c0:66:3d:8f:40:36:d0:f8:f6:
fb:9f:d2:bf:22:63:51:64:a7:88:06:60:83:dd:2e:bf:c0:ad:
76:df:e4:c0:8f:8d:30:7f:ef:8d:64:19:53:8a:e1:d5:59:b5:
2f:e6:c2:ba:08:ec:63:d8:7c:cb:56:93:86:bb:de:61:97:b1:
e4:05:cf:bd:71:a2:19:53:5d:ce:f0:79:f9:71:25:a9:9e:ea:
2c:25:a4:aa:e6:d7:61:a8:01:6e:f2:41:d7:a0:7b:3f:c2:33:
93:8a:af:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:48:26 2025 by rpki-client