Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json)
Hash identifier: jIY4xPNVyTW6u21M8+WXSfdMMw2L+CTyUWCxnt7KpAU=
Subject key identifier: F3:42:04:C7:9D:79:8C:55:2D:04:9E:36:43:2C:95:DF:BA:B3:0E:8A
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 019A71EE9803352C36B885599D7EC2C6143F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:00:53 +0000
Manifest this update: Tue 11 Nov 2025 08:00:53 +0000
Manifest next update: Wed 12 Nov 2025 08:00:53 +0000
Files and hashes: 1: JA1Qmok16UVDdfZh6XKyNHXDBms.roa (hash: R2I0tDS2SffmNY3pvYLLZlvv4NZOrPOW0QqVh2PyubA=)
2: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: 3d+ixb2YPtAC2rUxPzjwdFBdkoFxRVpSuVBNDlLk2MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:98:03:35:2c:36:b8:85:59:9d:7e:c2:c6:14:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Nov 11 08:00:53 2025 GMT
Not After : Nov 12 08:00:53 2025 GMT
Subject: CN=f34204c79d798c552d049e36432c95dfbab30e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:9f:33:a2:b5:f4:fc:a3:87:80:47:85:e9:
c5:cb:5d:39:41:8d:03:e9:b7:6d:75:34:af:3b:6f:
a3:ac:08:e4:7c:50:7d:56:11:79:7f:05:6b:b8:28:
9c:cd:46:38:65:cf:7c:ed:5a:16:58:6e:9c:90:4d:
b7:fc:50:23:05:78:47:fc:58:14:fa:97:05:62:dc:
73:b2:ce:8e:5d:6e:ab:00:7b:6d:45:ac:7b:20:68:
62:0a:40:41:c3:04:c6:30:8a:67:b4:dd:b6:a2:e7:
78:4c:32:41:73:0f:ab:b6:08:16:98:d2:a6:c0:08:
d3:4e:01:7c:e8:5a:9b:ee:a3:e3:2d:81:6a:74:27:
80:91:de:e2:6f:50:95:a8:57:85:3d:5d:e7:fd:3e:
dc:68:20:e8:33:70:07:d3:73:a6:81:2e:dc:a4:a9:
ad:f7:ee:c2:e8:80:fc:8e:e6:fa:29:22:11:a2:e8:
93:3b:3b:10:b2:d3:f6:96:3b:a7:db:31:3a:6e:c7:
5e:6f:51:d2:30:ce:0e:7b:30:93:b3:44:69:9e:2c:
2a:f6:12:ea:76:ca:00:32:ff:51:c9:6e:a7:b6:7d:
00:c5:83:4f:ba:41:1d:af:3d:a1:41:e9:48:a1:6b:
b4:e6:8f:12:bb:2b:6c:35:70:05:78:42:08:30:c3:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:42:04:C7:9D:79:8C:55:2D:04:9E:36:43:2C:95:DF:BA:B3:0E:8A
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:31:bf:8e:c1:e0:a9:0f:be:be:52:5c:5a:de:7b:09:59:d3:
78:10:da:33:ad:2c:31:5a:55:05:7b:8f:60:1b:41:e3:74:5a:
63:78:39:36:ac:60:45:3a:64:65:22:ca:1f:0a:40:b6:51:70:
92:01:4f:7c:c0:f6:7a:5e:f4:6d:c9:c9:ba:dd:f2:77:67:18:
6e:3b:39:95:85:78:52:65:a3:ff:0b:87:9d:5d:db:56:ea:af:
45:8a:cb:a5:b3:1b:f4:f0:ac:7c:cf:3b:1a:e0:40:61:55:68:
2d:6d:b7:de:1f:dc:43:7c:18:e2:7a:eb:18:3c:ea:db:e6:e4:
3e:35:85:a3:41:6f:bc:2f:56:90:9c:6e:ca:9c:9b:08:ed:03:
44:1e:63:92:19:4b:0a:ae:12:f2:63:09:68:2f:00:bf:be:9b:
7c:72:4c:ef:e1:47:52:7a:4c:08:c7:92:25:6a:a0:e8:0a:ca:
d5:40:e4:4f:d2:7e:65:69:94:4d:3a:fb:ab:5a:17:74:ae:1d:
cc:d2:c5:11:b2:62:c8:63:59:4f:f0:60:c7:6d:75:61:8d:e0:
8a:de:50:a7:3e:46:ee:96:09:5b:bf:55:24:de:ca:79:92:ce:
95:c0:ce:89:f5:35:2e:f2:92:06:ff:b8:28:3f:e5:a3:04:44:
16:17:2b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:52 2025 by rpki-client