Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File: kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier: 9QDsIvtHL7oU04yAXl5zUDtA5hL8h46d0mBUpCxmC50=
Subject key identifier: 84:58:D2:08:A2:A8:41:D2:B6:A0:71:A4:5E:76:86:C9:46:4A:DF:BB
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 019A18E2086E9903E3259ACF5B35F08A0BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number: 15CF
Signing time: Sat 25 Oct 2025 01:00:57 +0000
Manifest this update: Sat 25 Oct 2025 01:00:57 +0000
Manifest next update: Sun 26 Oct 2025 01:00:57 +0000
Files and hashes: 1: 64T0ThntK_T_XpMgojpC9XD428A.roa (hash: IOm91WRA7m29s//pvbAOHwECZ0iF5k9Wr7VRSaUENC8=)
2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: txnPnfL6ZJpY8hmmxglJQdAzyVjQ+2KV6YszvdajQ+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e2:08:6e:99:03:e3:25:9a:cf:5b:35:f0:8a:0b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Oct 25 01:00:57 2025 GMT
Not After : Oct 26 01:00:57 2025 GMT
Subject: CN=8458d208a2a841d2b6a071a45e7686c9464adfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:4f:f1:9b:51:a2:ca:b7:f8:ee:8a:7b:a2:
cb:06:28:3e:ab:f9:f9:7a:8a:16:8a:15:a5:f2:74:
f9:ed:40:33:46:3e:40:c9:cf:8f:14:a5:e7:f6:01:
ec:49:97:d6:97:fe:05:73:fc:9b:a6:28:20:19:9f:
18:c5:ab:c0:a9:22:f1:51:b4:97:71:2e:b7:1c:ce:
c3:53:45:ac:0b:6f:51:00:e0:b0:a4:fa:5e:25:3e:
c8:ad:b7:18:d4:b4:30:d4:92:d9:1e:d2:01:6e:92:
04:a8:b9:8a:5d:13:6c:e6:4a:8e:02:02:2d:62:4e:
1e:ff:5f:61:cd:d6:e2:bb:44:7d:04:67:e9:b3:ae:
08:0b:ea:24:52:e1:76:3b:e6:20:f2:87:2c:12:cc:
7c:51:90:9c:6d:37:d8:b4:93:9a:a4:e7:b4:19:12:
8a:f1:cb:7b:77:8a:b0:ad:90:17:ba:47:5c:47:b6:
80:8f:a6:27:ea:43:c7:ea:98:ff:78:9c:ce:62:76:
e2:a3:7c:60:77:de:36:7f:6c:92:de:26:47:db:8d:
18:7b:ba:32:3c:22:39:f1:f3:76:1d:13:f2:40:92:
8e:aa:66:05:a0:e8:7c:c7:33:f3:9e:f6:2a:da:9d:
99:33:e5:4b:fb:23:85:22:95:ff:25:c1:20:c6:6b:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:58:D2:08:A2:A8:41:D2:B6:A0:71:A4:5E:76:86:C9:46:4A:DF:BB
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8c:9a:a8:62:3b:37:d2:da:cb:77:89:fc:09:c3:50:ba:54:
e7:b9:d4:2e:f0:6c:c1:c3:eb:c3:c0:6b:c1:92:3d:a3:7d:7e:
e2:25:46:87:78:59:06:1e:ba:e3:44:89:49:cc:1f:f8:9e:37:
37:36:79:dd:39:97:ad:18:ba:87:b1:15:b5:a8:9d:52:be:a1:
6f:95:b4:59:f6:e8:54:76:63:e5:97:80:b6:69:7a:b3:a8:94:
8c:df:b7:5d:c1:3c:f3:af:ab:6a:68:04:cc:33:2b:8c:dd:82:
74:81:a5:74:0f:74:ba:ba:9b:6b:8d:bb:af:82:09:93:8c:41:
7e:6b:15:d1:c8:cc:61:2b:d5:4d:56:58:cd:6a:9e:cf:67:f0:
f4:bd:26:32:8b:87:48:34:7e:f7:de:90:a5:1b:13:37:13:68:
25:38:94:29:4e:95:c6:51:35:43:8c:4a:c6:28:71:b2:88:0a:
f1:33:79:9b:25:50:e3:ed:92:67:70:9a:03:5a:9e:68:e0:a2:
1a:19:29:69:43:2e:52:70:3d:15:55:3f:dd:c2:4e:60:49:24:
a4:76:e5:42:cc:23:f7:a7:a1:39:b6:f5:91:74:0e:6b:d0:90:
84:db:39:d8:b4:38:8d:af:b3:b2:fc:bf:dc:3d:eb:33:dd:19:
48:d8:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 05:59:07 2025 by rpki-client