Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: IwDhNXp67S8V1XT4R5z1SnCoyLJ1I08T7HjKWZRv5q8=
Subject key identifier: 6D:17:0A:00:7C:61:76:AC:6A:62:07:E7:FB:91:BE:B4:65:9F:F5:B9
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019A2B1F1C0200795F233C3D21F4D0E1FED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0B5F
Signing time: Tue 28 Oct 2025 14:00:50 +0000
Manifest this update: Tue 28 Oct 2025 14:00:50 +0000
Manifest next update: Wed 29 Oct 2025 14:00:50 +0000
Files and hashes: 1: 4Dd_oz2TtpOXQBrGavmGYMPXNlw.roa (hash: lEaJsZdsULkNE5Gu41TR5VUrs6XkOuSkB/MqNMbSRqE=)
2: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (hash: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=)
3: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (hash: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: SWdxXAMHrzwpRCJ6BlAo5wCI9MVSOF72wswvnAxQrpM=)
5: azXA0zek1r4GjxGORUc5CbVhlro.roa (hash: dBG8mL0HT6A6TrmZTX65GYmNTUtlNHr3mHgXq8jXk/c=)
6: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (hash: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=)
7: o9r3uR2f73He5KEKu4BwYPFzrZs.roa (hash: di2c5UqcUyXblOdBvGL8kM199QqPxFbroxHSs6c/vq8=)
8: qF7Yer0u7ziOGGwDeljcv2iin4k.roa (hash: ahTinSaOPP9oVbrP+xhco0U3iDA/GD0BuDeaOSksTIc=)
9: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (hash: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1f:1c:02:00:79:5f:23:3c:3d:21:f4:d0:e1:fe:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Oct 28 14:00:50 2025 GMT
Not After : Oct 29 14:00:50 2025 GMT
Subject: CN=6d170a007c6176ac6a6207e7fb91beb4659ff5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:ad:63:24:49:7c:55:91:df:14:cf:c0:6e:
fb:d1:b6:1d:e1:93:92:ff:fe:0e:ac:52:3e:e5:1a:
3d:fc:c7:f4:e3:4a:c9:d1:b4:4e:29:ea:50:4d:28:
34:f4:fa:d9:db:2e:af:97:61:1b:0c:0b:c4:35:88:
20:87:bc:f5:0d:3e:b1:c6:3d:62:72:f8:81:15:a4:
f7:ba:6e:9c:d5:84:3a:f9:e1:c0:12:61:39:09:c3:
10:e6:65:3f:dd:81:43:55:e7:aa:81:d5:16:c0:1e:
64:66:d9:d4:1e:52:3c:18:6d:a0:c9:fc:f4:dd:f6:
10:a4:09:49:1c:01:f1:61:4c:fb:04:16:03:6e:b8:
99:44:12:95:06:33:cc:51:31:e5:e3:79:30:4d:0b:
7d:dc:3b:08:d7:c7:33:0e:51:59:b6:2d:1b:93:f6:
46:9d:27:87:f3:65:05:f0:11:89:ba:8a:22:c9:35:
ef:dd:46:ee:b5:66:e6:cb:e7:a4:ce:1f:e6:b9:cb:
05:e4:71:3d:c1:6e:e9:f4:c7:d6:18:c6:01:29:ca:
01:6d:3b:92:9b:ec:23:23:8b:c1:76:e5:1d:ba:13:
e2:53:94:22:e1:28:6c:99:aa:0e:27:4c:33:03:75:
1b:1e:62:b9:d7:7b:5c:c5:95:22:ea:23:40:c2:89:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:17:0A:00:7C:61:76:AC:6A:62:07:E7:FB:91:BE:B4:65:9F:F5:B9
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:53:59:7e:de:f2:66:85:01:95:8f:1a:46:50:98:3c:06:95:
68:db:6e:43:87:79:e9:60:2c:94:1a:b3:9e:05:a2:0a:c7:e1:
76:73:6c:2a:e7:b3:0a:10:b9:3f:27:07:e7:ca:f4:8e:90:ee:
28:13:32:19:96:36:f8:96:45:3f:b8:48:90:22:c6:70:e0:fb:
e8:0d:ff:49:b9:2e:43:f5:d2:4e:63:9c:9b:15:64:87:1d:9d:
97:43:63:56:9f:e2:14:44:6c:a5:76:5c:ed:d5:65:f6:ba:8e:
c5:41:b8:08:b7:55:69:84:4e:ea:73:20:bc:a5:09:9a:e9:a1:
61:f9:17:e7:f5:42:e4:93:ae:fb:27:19:85:27:14:5e:19:4f:
3e:21:c0:da:f8:59:bb:c1:63:af:38:9b:8b:34:5c:41:e1:1f:
51:e4:f1:0a:6d:d0:4f:36:08:fa:d6:37:2d:1e:ed:02:19:8b:
02:74:26:26:ab:65:5e:46:ec:7c:dc:cd:53:0f:a9:e6:29:36:
b5:95:4e:9a:67:2f:2b:4e:62:e2:1b:76:df:2f:97:87:1d:d9:
0b:af:e0:85:48:b0:b7:bc:eb:03:0f:2b:e0:8b:91:7b:f9:d7:
03:c1:4a:f1:fd:f4:84:1e:93:70:d4:8a:60:c2:ad:8f:e7:17:
af:2e:e7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:39:42 2025 by rpki-client