Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File: kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier: 2kVUZjywBNut/cyG0QwIik187lHb++pgcPTGnL8wzmI=
Subject key identifier: 15:0B:FB:72:FB:65:92:5F:71:6E:50:FC:D1:A2:0C:49:B7:F3:A6:E5
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 019A03A3D16130B61C712D97FAF482E605EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number: 16ED
Signing time: Mon 20 Oct 2025 22:00:58 +0000
Manifest this update: Mon 20 Oct 2025 22:00:58 +0000
Manifest next update: Tue 21 Oct 2025 22:00:58 +0000
Files and hashes: 1: 6UpEJlRsXOn9vaGmBJWrZdfalwA.roa (hash: HSwxSSz5lFpaFRsJuAqgaQ8EsTFkTI/T+FmwfdtjYaA=)
2: 9tPvRIgWOFQGF5ALiDiBtpjalf0.roa (hash: CNi9LKlhqfclz9Oir048bs7o3/W9+fUSyftDkxngReE=)
3: JvOQdUjkCtx4pMZ63YDUDSKRif8.roa (hash: lpSKgZ5ZudI2jyQ9YWWPgdYiIoklrO/1U/orK0nz9yw=)
4: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: lWaO7Q3ku12Hqz3bnZuKUHEgaDfiOmhC/DmV9PJ1Gyk=)
5: lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa (hash: OVK0az1AcO1NBXsdKgGXvtFiE3weIknB+sCCAuqYuGw=)
6: xXN1JERl6SmTU8LGAK6YjCsE_8g.roa (hash: UJ/2eCVna1OAdfj1e6cD3/kAVB2y1kYmD/HxfsrIilw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:d1:61:30:b6:1c:71:2d:97:fa:f4:82:e6:05:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Oct 20 22:00:58 2025 GMT
Not After : Oct 21 22:00:58 2025 GMT
Subject: CN=150bfb72fb65925f716e50fcd1a20c49b7f3a6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4c:6b:f5:8d:b5:02:c7:d9:16:2a:eb:41:34:
bf:1e:bf:aa:24:da:18:bf:24:b6:2b:a7:7e:22:ef:
b3:11:d9:66:d8:27:3a:4d:29:33:f6:17:5d:59:e1:
f0:0f:08:4b:69:53:f4:10:7d:72:1e:3d:b1:3a:1a:
eb:7c:7a:2c:23:83:e8:c2:c5:95:4e:f2:02:8a:c9:
13:a8:db:23:cf:90:17:d1:bb:3c:2b:70:ef:d3:55:
00:59:b2:ca:3e:15:58:0d:7e:8e:58:d1:69:06:84:
b6:4d:d3:09:82:51:d8:46:63:2b:0f:10:66:e2:3c:
82:d8:b6:95:82:f1:8d:77:50:a0:49:4d:00:c2:2c:
77:40:86:0d:df:66:83:eb:2f:59:b5:f0:61:62:f7:
91:25:4f:ee:cf:72:8a:40:c6:f3:e7:34:b5:7b:a3:
05:25:34:8a:dc:d3:17:ff:2b:bb:85:77:af:6d:9b:
a5:29:ae:e6:51:82:70:97:01:e5:4c:9c:c8:fc:5a:
73:bd:e7:3b:68:10:ce:8f:f4:41:a4:5b:7b:d3:1a:
c2:10:bc:df:a0:0b:5f:10:95:5e:6a:64:e4:26:c7:
41:5e:1d:b9:eb:e8:ef:30:12:c2:23:3c:b4:c7:03:
bd:bb:ee:f4:f4:86:69:5d:89:06:99:f1:75:14:ce:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0B:FB:72:FB:65:92:5F:71:6E:50:FC:D1:A2:0C:49:B7:F3:A6:E5
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:93:50:6a:c8:2d:84:26:50:ac:e5:b4:42:5f:dd:e3:dd:ba:
09:a5:ff:89:c2:0c:46:a6:fa:f2:b4:65:de:b7:06:f0:46:c3:
45:4f:1d:5b:96:c3:27:a2:ec:30:45:63:61:d4:72:44:12:57:
d2:36:82:6e:09:aa:be:c1:14:c2:31:25:c5:76:1a:de:f9:b6:
98:56:f3:5c:b9:10:7c:7d:79:9e:03:7f:3f:33:8e:5c:eb:ab:
52:5c:47:30:a1:fc:26:ad:ee:c6:6f:47:5b:83:fe:c0:38:95:
7b:9a:5b:f9:cf:b1:9b:ef:bc:af:22:3e:f9:1f:59:da:90:d0:
07:59:01:5a:ba:43:a6:dd:2e:74:35:fd:9a:55:2f:1b:71:bb:
75:97:55:6d:9e:8e:c6:a8:c7:b9:90:c4:cf:be:6b:a0:7b:9a:
78:38:40:28:77:2c:99:0e:60:9d:5e:8a:5e:ab:e6:e6:ea:97:
5e:99:d6:45:7f:7c:1c:78:51:c5:28:7a:7c:52:8c:34:05:de:
56:fe:ba:0c:48:18:28:8b:f0:48:e9:a4:3f:c9:8a:7d:a3:fb:
e9:41:e6:d5:cd:10:6f:21:27:1d:c3:58:2d:0e:81:fb:14:88:
27:e5:ac:62:49:05:75:50:42:54:ea:c9:b8:2d:7b:7b:e3:99:
79:5f:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:34:46 2025 by rpki-client