Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: 4ssJwbalvbOpkXcAZZalEWBrcq8jqouiLapuuxnNtuU=
Subject key identifier: 30:4B:97:7F:64:BD:DB:47:0F:9E:FF:A6:B2:9D:80:61:B7:DD:03:41
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 019A2AB10740B8202A4B9BD1888E75E2B49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0CF9
Signing time: Tue 28 Oct 2025 12:00:36 +0000
Manifest this update: Tue 28 Oct 2025 12:00:36 +0000
Manifest next update: Wed 29 Oct 2025 12:00:36 +0000
Files and hashes: 1: 25RJ6ZVs0Rq2vgAnn5qDuc50gBc.roa (hash: E2CGstsnfAcGk1lBYwpyCPeNPt0F4yT/sEC2c5F9t8o=)
2: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: uTU8uP0WMsT+KKfqFzS+eSu5lpX+oCgQ2rVQPHkDyP0=)
3: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (hash: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:07:40:b8:20:2a:4b:9b:d1:88:8e:75:e2:b4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Oct 28 12:00:36 2025 GMT
Not After : Oct 29 12:00:36 2025 GMT
Subject: CN=304b977f64bddb470f9effa6b29d8061b7dd0341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:82:8d:82:c5:81:07:2f:d1:b6:93:8c:23:
6b:65:6c:35:22:ac:f7:55:8f:3a:03:92:42:3c:b2:
cf:67:fc:c5:5e:8a:b9:eb:81:f2:b7:19:1b:72:3d:
88:0d:df:a1:27:ec:43:e5:18:a7:bf:c6:3d:fb:6d:
18:e4:e1:d1:79:df:6e:93:e2:99:b2:a5:0d:1e:1f:
3b:55:2a:18:e7:34:12:7f:6d:38:8d:d2:14:fa:1d:
d2:d5:45:2b:39:a7:22:4e:53:82:38:63:d4:f8:aa:
c0:18:0e:32:5b:15:ed:de:36:a2:28:e9:4d:48:85:
b6:ab:ad:8c:02:7c:02:f7:81:07:88:7f:65:23:24:
ea:0f:50:4f:34:fa:84:68:4e:e5:fd:98:69:24:96:
79:34:87:63:a4:85:f5:5b:88:7d:c8:bd:39:b3:43:
cd:f8:76:c5:d6:66:76:e8:f3:cf:c8:c6:0a:f2:8f:
bd:53:60:ad:8f:47:4c:f8:82:26:eb:fb:5b:68:27:
0a:d1:e9:66:11:31:fb:d5:79:bc:a7:0f:71:d2:a2:
11:b9:e2:11:d1:09:79:31:bf:17:39:f6:95:d5:28:
d6:34:23:b4:6f:57:aa:02:ee:1e:4e:ea:ab:d9:75:
24:1e:31:e3:55:b6:76:a8:21:94:6e:18:be:86:7f:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4B:97:7F:64:BD:DB:47:0F:9E:FF:A6:B2:9D:80:61:B7:DD:03:41
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:2d:e9:14:75:f1:cc:a8:94:7b:20:22:c7:f8:a7:81:5a:f3:
30:0e:71:b0:8d:8c:4e:8d:4c:d1:6d:d8:36:b8:a8:b9:52:b0:
73:4c:79:71:a5:04:11:d9:0a:8f:54:93:d4:23:76:b6:fd:82:
c5:4a:2f:77:bb:ad:9d:49:00:6c:fb:48:50:b4:d3:fa:f6:a7:
b1:7b:0e:5c:19:b3:55:0c:68:69:a6:00:6a:33:bf:7b:5d:c4:
a6:13:f0:da:e3:7d:61:e6:c3:c6:ac:c0:af:30:b2:28:99:d8:
67:47:75:4b:ac:f8:d1:fa:80:ae:0a:54:68:aa:73:fe:f7:c7:
b9:03:d2:1d:ec:38:12:fa:12:5a:c2:72:7a:20:46:d3:67:00:
77:aa:0d:ff:33:5b:4a:3b:4b:66:5e:e5:5e:55:d8:9c:aa:67:
ff:d6:3d:ba:cd:19:32:c8:3b:28:f4:3b:4d:e9:2e:81:7f:3c:
91:5b:d0:53:91:27:0d:5a:cd:1f:63:2b:2e:4d:a4:bd:5a:f0:
bb:e4:09:67:a6:1e:1f:a4:40:a1:26:9a:94:30:f4:87:63:fb:
d2:3a:05:d2:bb:f2:64:e8:cd:07:83:bf:4b:e8:78:2d:e7:10:
5a:fc:19:86:97:0a:c7:ff:ed:ec:c2:b6:8f:ca:5d:cb:1f:f9:
08:21:6e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:43:58 2025 by rpki-client