Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
File: KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft (raw, json)
Hash identifier: vgnui0UtYqrJ53ufpuVgG8MTN1RKT1cPx5Jd+ChJzaA=
Subject key identifier: 62:AF:EB:8D:E2:38:A1:D0:52:8A:AD:D5:9C:2F:ED:E4:20:FE:BA:D5
Authority key identifier: 2A:03:FC:C0:40:3C:C1:40:AC:17:CC:94:AB:F6:4B:A7:19:54:E7:FC
Certificate issuer: /CN=2a03fcc0403cc140ac17cc94abf64ba71954e7fc
Certificate serial: 019A7149EA0F0EDA6F50C295C201EE48E9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
Manifest number: A4
Signing time: Tue 11 Nov 2025 05:01:00 +0000
Manifest this update: Tue 11 Nov 2025 05:01:00 +0000
Manifest next update: Wed 12 Nov 2025 05:01:00 +0000
Files and hashes: 1: KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl (hash: 5WHd8BfgNnToLcpoMunDKLJmeCJa50HfgHxzMUiN0no=)
2: j8yR2SwKtsWVLSNz7q_UM4Rt1zM.roa (hash: SRAkp7Ly8eQqtuMXaM0/J+PtXueSbryqz6yBP5HCAks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ea:0f:0e:da:6f:50:c2:95:c2:01:ee:48:e9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a03fcc0403cc140ac17cc94abf64ba71954e7fc
Validity
Not Before: Nov 11 05:01:00 2025 GMT
Not After : Nov 12 05:01:00 2025 GMT
Subject: CN=62afeb8de238a1d0528aadd59c2fede420febad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:57:d6:54:20:6c:7b:2c:dd:e4:80:a7:ba:
a6:58:bf:a0:38:5f:94:ad:15:fc:a6:94:bd:1b:e2:
0a:fe:f4:7a:e9:e3:64:e8:8a:de:fe:c0:fd:d0:01:
a1:3a:cb:60:d9:39:98:51:50:77:83:de:fc:66:5b:
b7:c7:83:a6:a8:ef:d3:01:b6:33:b4:ae:1f:bc:bd:
a9:ea:16:fd:1e:3b:63:26:9a:e9:15:b1:78:54:3d:
80:4a:2c:00:f0:5e:ae:25:eb:80:26:95:c8:ce:81:
5b:03:08:33:b1:0b:f2:06:35:aa:af:be:45:db:43:
d4:fa:2c:46:35:47:ca:ef:dc:44:6c:02:6a:30:86:
bc:b2:cd:aa:5f:e3:b7:91:31:7b:2a:82:96:cf:8e:
5f:93:d5:42:49:c8:1d:04:8a:8c:58:35:ba:ba:bd:
7d:2b:b9:e7:3c:f0:47:48:84:05:d6:cf:aa:21:46:
e8:62:7c:4e:d6:fe:ea:b9:7b:dc:04:36:bd:18:65:
9a:60:a5:ac:fb:7a:40:62:c8:df:da:9c:e4:7c:f9:
65:38:14:27:99:cf:e8:ca:b9:1a:b1:7d:32:60:a9:
39:02:f9:dd:df:8b:a6:07:7e:fd:e7:e6:64:de:15:
27:39:f4:fc:b7:99:df:2f:00:73:f8:07:8d:8b:21:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AF:EB:8D:E2:38:A1:D0:52:8A:AD:D5:9C:2F:ED:E4:20:FE:BA:D5
X509v3 Authority Key Identifier:
keyid:2A:03:FC:C0:40:3C:C1:40:AC:17:CC:94:AB:F6:4B:A7:19:54:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f2:1f:cb:81:0d:3e:44:f6:96:31:eb:51:1d:9c:e0:85:a6:
bc:b1:57:fd:61:9c:e4:b9:ae:f3:2a:f7:ef:9a:c9:bb:48:54:
19:0f:da:81:08:e9:58:63:8f:cb:a9:4c:92:31:22:2e:8b:3b:
02:e7:c4:02:1e:3c:86:ea:3f:7f:19:3b:b5:58:99:a8:e0:63:
c7:8d:92:87:c2:a3:ec:c0:14:b8:4d:92:db:d7:3a:a7:6a:0a:
d2:c6:82:76:1c:f6:68:28:46:0d:8c:18:76:d5:c5:7a:df:cd:
f2:48:d4:41:08:a1:c7:75:9a:43:bd:2e:f9:eb:5c:e1:56:cb:
42:88:05:b1:e9:3e:c2:f0:88:00:28:e4:68:fe:4b:77:73:02:
8b:13:77:3b:2b:20:d4:f0:74:d7:81:70:6e:6e:93:83:ab:a7:
0a:d2:21:49:eb:24:19:e6:2b:22:3b:00:e5:13:e9:34:21:30:
f7:3e:fe:cf:17:42:83:2a:e9:f1:c0:2b:1d:0e:45:61:4c:32:
03:46:59:00:90:41:64:53:30:6a:e4:33:fc:97:0d:2f:06:cf:
c6:b4:19:b4:b2:c6:64:87:01:9d:81:4f:48:f4:3e:c0:48:17:
2c:f8:36:77:55:56:f6:c5:0a:56:19:29:2a:f5:f1:81:68:4b:
26:d6:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:04 2025 by rpki-client