Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier: mBeLuEBkeyqXGEn5SywXwa3sNaQFsbEnUanMTZ9Mvfc=
Subject key identifier: CD:4D:EB:FD:59:1C:22:FC:DF:A6:A2:BF:E8:96:38:C6:28:1F:24:03
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 019A198661B1B231596A9127BF9BB8E5BBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number: 0891
Signing time: Sat 25 Oct 2025 04:00:28 +0000
Manifest this update: Sat 25 Oct 2025 04:00:28 +0000
Manifest next update: Sun 26 Oct 2025 04:00:28 +0000
Files and hashes: 1: EI7dYlJh6LhMXB8o9nb3T4Z5aSU.roa (hash: MmSw3Gp5lTTxkK0eiPx+eF3FQfljG+ipyig54PF6DUw=)
2: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: wN4av9oz53in+1D7kCCmyp0PN0W491hUPfBSRLEA75k=)
3: RnDsNDAUOmfocBcXgLTcHPDDhKQ.roa (hash: yyfreslJl3l+RdMxXIwzsT6k7E7HMN8jhFZGTbEdlJI=)
4: Y8zzieez_mdBu3g9ytJW3F1qtcM.roa (hash: IBQYnJmIJpRbjM/GjJNvEs/gT4e0NBRUv4AwTGSAB8I=)
5: _eEka1D2F9svheD7_1S50A6jg0c.roa (hash: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=)
6: jTf4hu8p-YdeMkBcAMreST3RURY.roa (hash: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=)
7: qV0bi1f4xUUogQC2jTvfOlCFNsY.roa (hash: JeZIDT/pHiJyZCYpNCof5wbSJ0INX3sJ+QZbs083uM0=)
8: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (hash: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=)
9: ueIl5HLpFqn43HBQc7-Q4ZVn06k.roa (hash: fzhg7jHCYT5oIQ824HH1vwjcqcxosVhT8YpZmbw8K50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:86:61:b1:b2:31:59:6a:91:27:bf:9b:b8:e5:bb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Oct 25 04:00:28 2025 GMT
Not After : Oct 26 04:00:28 2025 GMT
Subject: CN=cd4debfd591c22fcdfa6a2bfe89638c6281f2403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:81:d0:28:57:c4:94:ca:df:15:ca:17:10:
2d:a6:fd:32:fb:68:82:87:da:58:f0:d5:04:17:cc:
a4:24:01:22:5f:9c:d1:fb:a1:00:c3:ab:3a:c2:6a:
86:5e:f8:9b:fe:35:dc:36:63:bc:d9:3b:d3:2b:85:
f1:8b:cf:ba:0d:89:8c:a8:96:03:58:11:39:4d:a4:
c6:35:3c:e7:cb:5b:a8:07:97:b3:f2:f9:3c:00:d5:
d2:32:d3:35:c5:7d:10:12:8c:21:03:29:66:21:86:
62:17:f4:60:bf:11:9a:99:9f:ef:dc:66:e0:82:64:
cf:1b:a7:18:f7:c0:b8:48:28:19:06:25:b1:5a:42:
3f:f2:3c:c2:91:af:e2:67:59:4b:65:4e:a4:09:97:
0c:12:9d:ca:cb:29:32:87:ba:4d:fc:3c:af:2d:97:
55:53:64:b7:62:11:ec:9e:af:73:00:21:7d:9f:d8:
e8:44:37:d6:ef:97:fc:f5:2c:6f:1e:42:44:6b:b8:
8e:08:96:12:ef:70:f3:84:b3:68:55:e0:ba:d9:33:
45:f4:3e:fd:68:2f:f6:d0:fc:b9:97:62:c1:91:0a:
cd:04:af:9c:02:1d:30:86:6d:84:f2:c3:0a:54:d9:
bd:a6:45:4a:53:b4:2a:02:14:11:49:b1:40:85:46:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4D:EB:FD:59:1C:22:FC:DF:A6:A2:BF:E8:96:38:C6:28:1F:24:03
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:59:bd:da:a7:ab:54:df:07:5d:52:d8:4a:a8:5a:3d:3a:2a:
02:2d:cf:04:30:1a:9a:3e:a9:30:ef:b9:fc:6d:18:2a:14:31:
a4:5d:25:af:25:b8:ad:5e:ab:09:43:71:45:33:d3:1e:e9:36:
84:fb:08:73:15:8c:b1:3d:a6:ff:45:5b:d2:a5:1d:b3:10:92:
30:ac:e8:3c:74:89:8d:7e:e4:36:6d:d6:83:7f:dd:8c:db:0f:
95:6a:b5:06:c2:5d:d6:e1:4d:b8:40:34:d4:78:90:9f:a9:6c:
06:88:39:1e:ca:47:b8:25:36:b9:a4:75:09:4b:18:7d:90:b9:
2d:63:eb:25:5c:75:be:35:07:9b:da:a9:a6:9d:e0:fc:1b:91:
fb:c9:69:19:3f:85:e5:b3:8f:03:50:61:a2:55:4e:96:e1:e0:
4e:ac:5c:ae:d3:d6:72:5e:6b:41:7f:db:ce:81:f8:b9:6c:95:
a2:bf:ce:e4:4e:e3:03:64:4e:fa:38:76:c5:3a:66:a2:38:bc:
43:15:57:5b:3a:9c:6a:d3:a5:d2:41:69:55:7d:1e:65:2c:a9:
4b:3a:61:b5:65:36:87:56:71:30:0a:3f:6d:47:79:fc:ea:4f:
80:f2:d1:ce:f0:9f:ed:73:5c:a2:f8:1d:70:31:a0:22:16:db:
4a:9e:22:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:32:18 2025 by rpki-client