Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: lyhN4b7F8EGW38qOTJV6yjDb0ckKxjyVUOJZfvnG5LQ=
Subject key identifier: 4D:BC:E6:4D:48:76:2F:E8:64:17:B5:BF:F2:15:0D:64:20:5C:72:22
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 019A28552F09DB1719B11F865D88DEC30A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 1564
Signing time: Tue 28 Oct 2025 01:01:02 +0000
Manifest this update: Tue 28 Oct 2025 01:01:02 +0000
Manifest next update: Wed 29 Oct 2025 01:01:02 +0000
Files and hashes: 1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=)
2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=)
3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=)
4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=)
5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: xTUkIjpxrla8IftRPYnSB44LtN0Iy+D2sA5/8IiNQQY=)
6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=)
7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=)
8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:2f:09:db:17:19:b1:1f:86:5d:88:de:c3:0a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Oct 28 01:01:02 2025 GMT
Not After : Oct 29 01:01:02 2025 GMT
Subject: CN=4dbce64d48762fe86417b5bff2150d64205c7222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:ec:25:9a:65:be:b3:50:69:ab:5c:0d:01:
ea:8c:58:f0:1f:6d:5c:14:d2:3c:eb:09:7d:eb:da:
40:2f:1a:9f:e9:1f:95:7c:66:28:cb:39:22:85:92:
e0:78:0d:c2:38:5a:e9:41:54:f0:98:db:fd:d2:e4:
9b:22:72:0f:ae:72:fb:29:7d:f7:ee:1f:4b:fe:20:
96:90:6d:af:60:83:07:31:4a:b5:16:e6:ab:16:76:
45:84:1e:68:6c:44:b5:e1:65:b2:7c:38:90:12:57:
cf:ba:f1:4f:f0:f0:82:c9:a6:9f:a3:4a:7c:2e:93:
e0:99:58:52:85:74:b7:dc:a7:70:3e:24:1b:1e:7d:
1a:85:e7:c5:d5:51:44:58:2e:a7:9a:5f:1f:08:f6:
64:35:5e:f0:4c:95:15:58:68:1b:ba:99:30:a5:1f:
71:dc:56:c4:54:5f:49:eb:05:3a:89:6d:89:6a:2d:
2d:17:d4:12:90:fc:87:7a:e1:40:5b:74:ff:9c:f9:
4d:c7:b7:a9:b0:29:0f:0e:dd:79:77:49:c6:2e:c9:
17:e4:91:87:c4:71:7d:9f:6e:8a:3d:d6:f6:60:91:
c8:f9:56:a9:ee:24:df:47:bc:f1:b6:e5:cb:4b:38:
e5:d1:7f:10:11:67:98:b7:90:25:eb:57:a6:18:68:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BC:E6:4D:48:76:2F:E8:64:17:B5:BF:F2:15:0D:64:20:5C:72:22
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:39:be:98:2c:21:dd:93:cb:5f:7d:6e:06:19:33:ce:db:f4:
35:ee:b8:69:ed:89:39:46:bb:83:bf:d0:e4:0e:c3:8e:96:f5:
c1:0d:42:81:50:0c:77:bb:43:39:2c:a4:94:14:61:3a:e2:38:
62:9a:9a:9b:14:3b:79:98:0f:6e:b4:f9:20:1f:c2:2d:bb:91:
e6:71:11:23:29:81:8c:12:68:23:db:e4:78:d6:b0:0a:d6:64:
cd:13:73:4e:a5:1c:bd:73:7e:d3:df:59:8d:bb:ba:cc:f5:c6:
d8:40:54:52:9e:0f:0d:4e:34:71:17:78:3d:42:4a:73:1f:3f:
d5:ae:0b:d3:bd:d6:f2:a3:ed:7f:20:91:d7:65:39:96:e5:cd:
e7:ba:49:09:3a:12:ac:9e:f1:44:5b:8a:10:f6:de:a2:2c:95:
3d:0b:f0:9e:56:50:68:a1:ff:66:48:01:a4:0a:57:cf:af:e6:
3f:af:33:15:f3:c0:5a:72:04:68:bf:2c:46:96:a0:b5:75:3f:
db:df:dc:c5:5a:65:f6:e0:cb:0a:3d:ff:10:a3:f3:18:0d:28:
d0:d0:d6:aa:d3:d5:a7:f0:ef:a2:66:df:07:2d:49:c4:16:d1:
3e:ae:82:5d:b5:72:66:c0:c9:32:15:ed:c1:50:98:8e:5b:8a:
73:43:80:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:45:18 2025 by rpki-client