Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: 6elVQ+pIJ15SVcRh2BfADAnM6whHXN5DYNPa5hFxg5o=
Subject key identifier: 92:13:F6:45:A0:33:D8:74:AD:BB:17:44:25:A5:34:91:9B:01:EF:94
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 019A270B55F235CF5F7E3F0891EA763599C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 19:00:45 +0000
Manifest this update: Mon 27 Oct 2025 19:00:45 +0000
Manifest next update: Tue 28 Oct 2025 19:00:45 +0000
Files and hashes: 1: 5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa (hash: yhJDGnf72pl9WyOFKwP7I927446gAZjcSsCI8qXComM=)
2: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: OzRpQ3lPFiQ4MJLjK5UUJbTPv7QoAv2hAfx4kz3RRlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0b:55:f2:35:cf:5f:7e:3f:08:91:ea:76:35:99:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Oct 27 19:00:45 2025 GMT
Not After : Oct 28 19:00:45 2025 GMT
Subject: CN=9213f645a033d874adbb174425a534919b01ef94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:20:e7:ce:94:09:03:a9:0a:1d:ee:9b:37:
7d:6e:59:d8:8e:f9:63:4d:9f:c9:e7:f7:a4:39:ac:
e6:01:dd:c9:49:6a:e9:33:61:5c:b5:cd:09:5d:b9:
dc:ed:3f:5e:a6:a2:ca:07:2e:65:a3:c7:e9:61:9f:
11:45:db:ef:1f:84:24:8e:0f:67:15:26:0c:8c:2a:
24:51:21:92:76:c1:08:16:1a:9b:e4:ce:5b:68:ca:
28:15:34:6d:be:d0:c2:e6:ff:11:0e:00:84:2f:af:
fa:33:4a:70:f2:37:b0:a6:3d:9b:f2:58:b2:87:6a:
ad:c5:82:4a:6c:c9:1f:21:1a:c7:17:d9:fe:e3:dc:
21:e0:2c:14:1f:2b:80:e6:2c:d0:80:5a:21:09:88:
19:9d:4d:be:a6:c3:8e:7f:b8:0f:42:13:6d:39:4c:
f3:60:dc:90:12:5a:49:9a:c6:a9:30:da:07:5b:ed:
6d:4e:bd:57:b4:ce:01:60:ee:76:a5:59:4d:c9:04:
d1:ff:71:21:8c:2d:41:4e:30:ec:82:77:30:04:3e:
49:9b:3e:3c:f9:ae:29:92:6a:3e:ef:a6:92:24:56:
f3:ba:18:6b:6a:aa:31:27:4f:a2:08:1d:90:a8:06:
bb:1a:33:5b:44:9c:2d:f7:0b:3c:88:8a:a9:ba:0e:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:13:F6:45:A0:33:D8:74:AD:BB:17:44:25:A5:34:91:9B:01:EF:94
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:01:a1:05:49:fd:5f:97:bd:e5:27:33:db:90:e7:42:64:d5:
4c:d2:31:7c:cc:9e:a2:cb:00:bf:7b:7c:94:f2:b7:46:6c:10:
2c:1f:e8:18:07:30:38:ec:1d:6b:37:b7:29:dd:a7:da:2f:e5:
d6:64:23:7f:8c:82:98:7f:0f:1b:c1:0d:db:3a:d5:03:52:cf:
bf:a6:09:32:e6:f2:fc:32:a2:2f:c8:ac:d8:90:22:4a:2d:4d:
a7:8b:69:62:b9:9a:4f:a4:ab:d3:1d:9a:2f:4d:2e:27:80:fe:
b3:24:21:39:af:c5:86:11:12:68:23:c2:c5:f7:f3:17:cf:1c:
ef:53:49:6b:bf:67:84:87:f2:94:4b:ef:98:2a:25:22:fc:76:
38:ae:9c:bb:70:35:54:0d:f3:7a:57:b1:87:8b:47:2f:80:c0:
fc:f7:2b:d7:49:6e:2f:c3:20:82:df:47:dc:86:87:a4:39:2e:
e6:5f:e7:67:02:41:b0:b9:c0:36:23:85:bf:3e:b2:63:03:d0:
36:c5:a9:07:cb:6d:63:4d:6b:b6:96:72:4b:b7:74:17:c9:d8:
9d:1e:4c:9c:89:e0:6d:98:f3:6a:fa:46:6f:8f:56:62:88:b0:
0e:b2:aa:95:e2:9c:29:af:e8:75:93:e9:1e:17:f3:91:c5:54:
9c:fd:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 03:41:25 2025 by rpki-client