Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
File: KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json)
Hash identifier: S6mtzwmPYe7z8LWf/XYqBLzEo5+ujAAvvMo1N2Rwxgg=
Subject key identifier: AB:10:1F:B7:DD:88:60:0E:E4:AB:5C:00:1A:DD:75:D7:1B:DE:64:CB
Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2
Certificate serial: 019A722621CA97598AAE2125515A46F9E60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: EdTyc-f6MbzKNflZEVb0lTRcFng.roa (hash: LosjQRA+dA0QESjdH00I3Sd8eYNzb4MjK8b7Xcsie8w=)
2: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: vkq05fuktvOirekA4t8c+iI7lp5/k0on43RnLGFGuQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:21:ca:97:59:8a:ae:21:25:51:5a:46:f9:e6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=ab101fb7dd88600ee4ab5c001add75d71bde64cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:7f:29:5a:f1:bd:99:38:e0:d0:35:14:17:
86:5c:f4:f4:6e:19:0d:4f:7e:35:f5:35:b8:66:e9:
dc:71:b8:af:54:a6:87:17:e2:d6:fc:f5:44:8e:95:
90:dc:bb:6e:c7:b0:06:8a:9f:c4:78:77:60:80:75:
d9:31:d2:4e:91:4e:5f:34:15:ea:a2:98:11:96:de:
99:e0:6b:3b:29:fe:64:df:b7:ea:84:83:da:9b:d5:
67:17:3f:07:db:ad:81:3b:bf:85:ab:8c:99:68:48:
c8:11:49:26:5e:bf:1c:e8:41:fb:43:c8:e0:ed:74:
69:e6:e7:b7:ff:f3:11:c7:cd:58:f7:59:ac:72:1a:
8a:7c:ab:2f:3a:5c:30:e7:17:a5:33:97:ec:5b:c5:
15:a5:ed:a6:e6:02:e1:e2:cd:68:22:33:41:8c:5c:
c7:d0:ac:3b:48:5e:6e:b9:bd:fa:2d:e9:05:c4:cb:
dd:c9:fb:ba:eb:41:93:93:49:9b:97:dd:4a:82:76:
31:d8:61:e7:54:fd:16:4c:e1:24:1e:47:1c:64:a5:
ba:dd:c1:dc:66:6f:2a:37:02:97:52:6d:57:8e:48:
83:2f:17:76:0b:45:75:ba:b6:77:3d:85:21:fe:2d:
ea:09:fb:c4:d7:74:7b:83:dd:23:d6:69:33:04:27:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:10:1F:B7:DD:88:60:0E:E4:AB:5C:00:1A:DD:75:D7:1B:DE:64:CB
X509v3 Authority Key Identifier:
keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:69:53:c3:83:14:e7:d5:d5:80:52:4d:a2:2c:0a:ac:d1:df:
8d:60:9f:7b:47:7d:be:f0:67:ac:92:16:3d:42:48:27:91:c1:
7d:75:d9:10:e4:d3:ff:76:82:5b:96:e0:e4:83:45:6b:03:65:
55:64:c5:5e:23:87:25:f0:32:a6:41:70:09:d5:ed:66:a5:1d:
97:0e:c2:00:87:8b:03:e6:55:e4:17:9c:26:fd:2a:a8:c8:a5:
de:8c:15:d2:d4:46:c8:cb:14:56:28:a1:59:47:15:53:f6:f3:
70:7a:a3:2a:b4:c9:f4:53:26:64:06:e6:66:5e:5c:91:65:30:
92:c8:fa:ce:d5:e3:2a:c7:a2:75:29:84:46:8e:50:97:32:8d:
a0:71:5d:1f:65:5b:62:34:3c:4b:82:e9:f1:6d:d8:24:0a:99:
0c:21:c3:2d:ed:27:5a:66:86:39:d9:81:55:e9:96:5d:cd:33:
12:59:9f:c1:68:e4:54:9d:b9:99:f0:3a:82:60:64:f1:77:41:
17:85:ad:24:ac:bd:20:01:0c:4d:a3:68:f4:18:94:9a:d5:0b:
35:59:dd:ae:38:16:f3:46:75:4c:8d:1f:2e:1a:8a:04:c3:ab:
f3:9d:a7:42:e1:76:b2:36:21:12:44:ba:07:a4:9a:48:11:cc:
08:6a:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:32 2025 by rpki-client