Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier: AO7sTSNfw3RriIhpcwebJFAxVSykjga0vRU5XVpW+ng=
Subject key identifier: 3B:02:A4:11:20:CD:A8:C9:6B:94:44:07:6B:EB:9E:AD:32:E9:98:AF
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 019A28561DA9E4210C50D6EDF18499BB8D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 01:02:03 +0000
Manifest this update: Tue 28 Oct 2025 01:02:03 +0000
Manifest next update: Wed 29 Oct 2025 01:02:03 +0000
Files and hashes: 1: eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa (hash: IgyAOYuvEIPEY/4VEwvCRv4xZp0QVNPeSnZmgWxYe1k=)
2: hSwwAZmeTaolcY9O9J-gjnCspyc.roa (hash: GT5DIH9LX8Y0Myj2ZdVG14Q8npex7JbrhTK4BHXYqYY=)
3: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: OeKAClvynS2YKJvQTdme+l4Te8QGnhfmFjEYWhbhl0Q=)
4: rPhc70wdg_DNFy8p_DFC0TNrzZE.roa (hash: izXtXZXXy5nvEOdPnUDtBt7NCMNBYID7xzPo2/E3HvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:56:1d:a9:e4:21:0c:50:d6:ed:f1:84:99:bb:8d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: Oct 28 01:02:03 2025 GMT
Not After : Oct 29 01:02:03 2025 GMT
Subject: CN=3b02a41120cda8c96b9444076beb9ead32e998af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:43:88:c0:16:38:f2:21:6d:cd:76:9b:4b:
96:fc:de:9c:17:4c:d9:43:cb:e5:9a:d2:23:87:55:
ed:39:cf:14:2e:58:c5:dd:1f:00:f5:8a:af:36:97:
2e:1d:7a:fe:ab:26:e9:b9:51:58:43:98:9e:1c:a6:
97:32:7b:8e:ee:47:8d:9f:c1:3c:af:b5:6c:2f:2e:
a2:bd:75:18:9f:75:bf:46:5c:20:2c:f6:fc:70:8c:
64:fc:47:86:ae:51:f8:58:4a:2c:9a:ef:0c:79:ef:
cf:a2:9b:db:34:fb:31:70:2a:29:9d:d3:67:f2:24:
22:f5:e0:c6:11:a0:4b:78:f0:b1:c0:bd:20:58:42:
9d:5c:db:68:1e:fa:1b:a6:36:db:f1:ad:29:98:8b:
6d:38:20:5f:d7:1f:9e:20:79:a5:18:42:98:3d:79:
e9:1f:10:e9:72:38:a7:9f:6c:6d:4c:32:9c:d0:12:
2f:ff:55:f7:c2:32:19:26:65:e3:9f:1f:d9:f9:50:
a8:cb:0d:6b:62:be:64:b9:19:0b:4a:ff:a2:c4:36:
8d:d3:11:12:01:df:e9:cb:1a:36:f6:81:ca:5c:c4:
4d:03:40:96:ba:f2:ac:a2:81:d1:3f:76:d0:16:7f:
2c:9e:36:28:d9:15:fa:0d:f3:07:ae:48:64:66:28:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:02:A4:11:20:CD:A8:C9:6B:94:44:07:6B:EB:9E:AD:32:E9:98:AF
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3b:b8:d4:ec:b4:85:d6:91:78:69:9b:8d:5f:8d:a7:f8:04:
36:01:96:25:26:17:28:03:87:6a:18:f3:37:12:cd:66:da:12:
ea:10:2e:35:7e:72:a7:62:3c:d8:e0:17:f3:de:e1:28:aa:d5:
07:4b:36:e3:0c:84:42:e4:79:7a:23:b0:ad:38:36:69:54:0c:
3f:5c:d4:41:02:ef:5d:e2:e5:ac:35:34:97:b5:ac:72:18:2e:
a3:dd:14:df:1a:f0:ce:54:d4:4f:9c:eb:c4:bc:7f:ea:a0:ee:
91:0c:77:de:86:71:3f:22:72:7a:8d:90:84:e9:9c:df:be:c5:
82:b3:1e:0f:2b:c2:52:e4:9d:09:eb:4d:00:e6:b8:f7:7d:e1:
99:e5:47:06:96:8d:16:3c:df:20:7a:d8:4b:ab:a8:99:8f:35:
68:9a:da:f9:e9:8b:76:b6:e1:23:d8:97:cb:4c:38:20:fc:2d:
14:40:95:6b:98:fd:95:d7:a1:3e:d1:8c:b8:42:e0:1e:85:8a:
c3:64:b4:8b:05:22:8a:50:24:7e:4d:de:97:ae:57:b5:e9:d8:
8f:f0:46:fc:f6:2a:2c:0b:a5:57:e9:b4:f9:5f:bd:4e:53:ab:
46:a5:4a:b2:24:4e:9d:7c:32:8c:77:73:b6:07:ee:e5:b8:62:
ec:65:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 08:08:11 2025 by rpki-client