Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier: ZvmwyPCKQFBOWbjtVqsQIB0qJZXAh92WbAIxtG0z1vc=
Subject key identifier: B7:4F:5D:BC:4E:C5:FD:64:C6:EA:AA:B4:25:92:ED:98:08:F6:E0:C8
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 019A08C9C583040D08D86360597BDBA290F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number: 16E8
Signing time: Tue 21 Oct 2025 22:00:32 +0000
Manifest this update: Tue 21 Oct 2025 22:00:32 +0000
Manifest next update: Wed 22 Oct 2025 22:00:32 +0000
Files and hashes: 1: 0HbGWRHIhLcfmf6kLXAQdepQymA.roa (hash: RFLCzQy5MXPE72eUiDWdR8f6HUuF1oAdf92PY+ZrIEU=)
2: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: Wfmc6iOnjH1MqLVM/fZFJJnu6fardbBKMeLIFy+Qukk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:c9:c5:83:04:0d:08:d8:63:60:59:7b:db:a2:90:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: Oct 21 22:00:32 2025 GMT
Not After : Oct 22 22:00:32 2025 GMT
Subject: CN=b74f5dbc4ec5fd64c6eaaab42592ed9808f6e0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:cc:52:35:24:fd:e6:be:8a:90:f1:2b:92:
a4:4a:a7:ca:bf:a8:a5:68:ba:7a:80:4e:30:9d:41:
aa:c2:c1:bf:8d:12:1c:70:56:42:93:8a:f3:f1:4d:
23:f4:3d:b0:48:88:dd:ee:28:28:cc:37:bd:01:45:
fe:08:94:43:1a:d0:02:ba:60:72:9d:c2:eb:b2:cd:
32:f9:a5:9c:b3:ef:03:28:c8:93:9c:1b:c6:db:75:
57:03:70:9b:0a:2c:5e:33:e1:e6:66:29:94:15:eb:
6a:f2:e2:47:64:65:41:5c:93:b1:66:6c:b9:a8:53:
5e:12:2d:6f:4c:b4:4b:67:fd:b1:f4:56:13:35:45:
8b:c1:08:a9:f3:c8:d5:78:fb:d4:04:f4:d6:10:94:
58:59:65:a4:63:98:2d:c0:c8:bb:3d:36:00:a1:3a:
bd:a2:a2:b1:b7:b9:06:4e:6d:d3:b3:97:52:81:44:
48:e2:7f:01:3f:5d:5d:fe:50:28:27:8f:bf:3c:fa:
a6:dd:fd:c5:38:9f:45:fe:c5:2b:70:ab:01:1b:9d:
32:c4:74:96:ab:42:4a:fb:ad:bd:b0:75:ac:91:55:
bb:0c:17:a9:fb:08:e6:75:c3:ed:0e:83:c6:ae:4a:
cb:e2:82:29:75:5d:6f:69:65:eb:31:19:9f:b9:58:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4F:5D:BC:4E:C5:FD:64:C6:EA:AA:B4:25:92:ED:98:08:F6:E0:C8
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:19:20:ba:97:5d:e8:7d:4f:4c:31:c5:ae:d9:51:03:c0:58:
16:92:48:32:0e:af:8a:c9:2b:32:06:82:01:0e:ff:6a:4f:91:
ce:89:fc:f0:39:e5:0a:16:da:c0:61:44:4f:02:cb:aa:0f:96:
cb:33:09:06:16:ad:b7:86:ac:ef:d1:30:ae:5c:b9:5b:49:d8:
de:b9:3b:94:cc:03:8c:89:4d:23:f6:58:1b:28:28:35:9c:bf:
b3:b2:ab:ab:68:9f:60:75:fa:4c:48:08:5a:18:fa:e9:33:9d:
46:d2:92:13:37:af:9d:9b:e4:58:c5:e5:61:17:8d:57:21:92:
e3:06:9c:da:db:f5:fc:a8:6f:15:77:99:32:4f:90:30:f0:85:
52:da:c7:77:e8:86:e7:aa:a8:f9:f7:73:9a:49:e4:2b:2c:70:
be:14:03:e3:25:66:93:3c:ea:4d:93:95:f2:55:1f:9d:19:4b:
6f:62:3a:9a:43:d7:7f:01:9f:a6:b1:c8:b9:04:c0:56:29:a7:
a7:bc:5b:5a:02:13:59:58:94:e6:a7:71:2c:a9:52:fe:85:1d:
d4:f2:02:3c:c0:d7:2d:3d:d8:10:a9:ad:a6:a2:fb:94:98:f7:
d5:ff:3b:cc:84:6a:d7:cd:fb:13:ec:46:af:9a:e7:c2:90:c2:
46:7e:0a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:50:06 2025 by rpki-client