Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json)
Hash identifier: 6BlTdEUMCdQx/HS3IdAu4Qj/m1f8cfqjymW6X+JzUTo=
Subject key identifier: 79:4D:52:14:5D:A9:FD:69:E6:9C:0E:E0:91:9E:DA:02:D8:6B:19:84
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial: 019A1E0818DD22F5F8E42DCCA0EA72700501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
Manifest number: 0F55
Signing time: Sun 26 Oct 2025 01:00:38 +0000
Manifest this update: Sun 26 Oct 2025 01:00:38 +0000
Manifest next update: Mon 27 Oct 2025 01:00:38 +0000
Files and hashes: 1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: kyQT66SKfxpUpGfXloy9pwsVvrRXv3fiB7XRDnOiomA=)
2: UdEEZQE09FsGfYOWUhVww5xs81M.roa (hash: 6mSyURdhs/eGBTOXFJi0QulmUdFyZbb3K6nx0/FAyzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:08:18:dd:22:f5:f8:e4:2d:cc:a0:ea:72:70:05:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Validity
Not Before: Oct 26 01:00:38 2025 GMT
Not After : Oct 27 01:00:38 2025 GMT
Subject: CN=794d52145da9fd69e69c0ee0919eda02d86b1984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:da:2f:80:12:e9:fa:66:4b:1c:1c:61:5a:
1b:9b:f0:8e:d7:53:44:49:58:1c:0a:3c:c6:6a:33:
4c:b6:53:48:d7:f0:d8:3d:a2:25:e3:aa:5e:3d:17:
65:cf:d8:62:22:1f:34:13:0c:4b:cd:c6:95:b3:28:
d6:f3:64:e4:2a:59:b1:94:bd:ae:2a:26:ff:5d:6f:
d2:03:bc:81:16:24:08:85:0a:2c:6a:4d:26:99:72:
e5:88:69:60:a8:1b:cc:79:04:7d:20:9f:f4:d8:f4:
a1:19:c6:8c:6e:59:04:7b:a3:9d:18:f1:33:ce:4d:
19:de:21:64:71:8f:bc:dd:a4:d0:a3:09:40:8d:73:
4d:b2:66:0c:4a:6d:37:3b:66:68:42:2a:1a:77:9a:
b4:26:36:9f:86:9b:8b:c0:03:50:79:66:d9:2c:f8:
c9:c2:2f:e5:d3:a3:9a:e8:ca:43:69:31:46:f1:74:
9c:06:11:ab:24:4f:f3:42:6b:b9:83:05:5e:48:c2:
85:0c:6f:95:cd:ca:f7:f8:41:68:67:61:e5:33:bb:
d3:63:08:0c:f6:1f:5a:34:3a:f1:00:a0:07:03:e7:
75:66:5d:7c:c4:64:69:e8:90:64:2e:23:23:b6:2d:
02:48:a2:2d:6f:fd:65:f8:d4:ff:a7:a2:1e:ed:ea:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:52:14:5D:A9:FD:69:E6:9C:0E:E0:91:9E:DA:02:D8:6B:19:84
X509v3 Authority Key Identifier:
keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b1:db:6b:ae:2e:8f:9c:d3:1c:6c:9c:c8:af:27:23:09:88:
e0:1a:2a:8d:2b:56:f6:2e:bd:5b:ba:3d:c4:7a:22:a2:5b:e8:
9b:c0:b9:dc:48:77:bb:b7:d1:10:cb:f6:ed:89:6d:29:39:c4:
c7:cf:ee:8c:62:e7:ca:dd:de:a5:02:4c:1f:65:52:41:15:46:
f7:65:78:71:14:8b:83:10:4b:a0:bd:36:48:7a:a2:47:83:67:
9e:f4:59:8e:aa:e7:ee:4a:4d:7e:3f:0e:b7:b9:87:ce:f4:a0:
15:bf:dd:b4:ff:73:49:45:ef:cf:18:88:05:ea:94:f4:c2:ad:
36:ed:4f:e3:88:23:36:ac:d9:bc:ee:ef:28:a0:4c:d9:4e:94:
cf:1b:5c:31:e1:68:09:ea:7f:2c:37:4d:0b:12:88:3d:1f:fa:
28:f1:9c:12:be:f5:35:24:d3:38:5d:06:95:33:58:56:8b:b7:
ba:2c:d1:d5:63:40:8a:bd:e6:22:9c:b1:b9:c6:ad:9b:02:d9:
16:10:94:39:3d:9d:0c:fc:98:61:1f:de:c7:9b:2e:eb:43:cb:
fe:ac:54:25:8e:fc:06:89:fa:70:51:ae:01:c3:44:78:9c:8a:
58:8c:ce:6d:51:eb:ba:67:66:32:ca:78:15:df:70:91:fb:fd:
73:fd:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:18:46 2025 by rpki-client