Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
File: KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json)
Hash identifier: iTeWotKLp66N5Elpf/16nKQWpjg7koTjKZ3uBvVPhlI=
Subject key identifier: 42:C1:2A:8A:B8:5E:5C:23:17:83:3E:67:FC:3F:A3:BE:F1:DA:59:59
Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Certificate serial: 019A725CB1EAE4FD1E761680C8B8590132C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
Manifest number: 0ECB
Signing time: Tue 11 Nov 2025 10:01:08 +0000
Manifest this update: Tue 11 Nov 2025 10:01:08 +0000
Manifest next update: Wed 12 Nov 2025 10:01:08 +0000
Files and hashes: 1: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: uGT2rQJGe56GVZpAys0bLVUhVZgXyFH8L4RYA4fnXFc=)
2: bEf44I_katxftzRhRoOcb5k7xJw.roa (hash: B4D2C0R7a4GwUSt6VcyTIkYPBhevJsFHyCCfjO/vPIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b1:ea:e4:fd:1e:76:16:80:c8:b8:59:01:32:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Validity
Not Before: Nov 11 10:01:08 2025 GMT
Not After : Nov 12 10:01:08 2025 GMT
Subject: CN=42c12a8ab85e5c2317833e67fc3fa3bef1da5959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:62:87:e6:c7:34:77:c0:b4:91:9f:f1:e3:
f8:48:b4:6a:a7:89:c0:da:0e:59:b1:83:23:29:91:
ea:1a:84:09:4a:10:f1:9b:ac:b2:8f:5c:fb:b2:e9:
1a:aa:00:b8:11:8b:50:b4:75:cc:ce:38:d0:2c:f6:
9d:00:1a:e3:ec:81:5b:fc:07:76:38:6f:a3:b4:e7:
cb:44:a4:ae:ec:b5:82:c4:f5:1d:de:39:8a:bb:81:
db:81:1b:d0:2f:03:ec:f1:42:83:68:bc:6b:0f:b2:
21:da:6b:06:e2:22:3b:46:a5:d8:cf:3b:05:00:19:
56:e5:7d:53:aa:88:c4:b9:a7:80:c7:d3:99:88:85:
18:50:cf:62:ca:58:1e:6d:30:16:d0:cb:fe:a2:7c:
8b:97:85:2c:55:dd:db:9e:7f:9b:3a:d2:55:91:1c:
33:58:79:97:ba:cc:19:3b:6e:22:5d:60:22:e7:8c:
96:39:81:dc:0c:fa:3e:bf:ee:c9:c7:3d:65:75:55:
91:f1:8b:92:cf:f4:aa:bc:f5:ce:6a:b1:1d:97:df:
3b:89:11:0c:db:58:aa:6a:ca:99:09:e8:33:c2:a8:
59:34:bb:14:55:79:0a:75:3e:d0:27:1d:85:68:62:
2f:1e:c9:33:36:d4:c5:94:16:87:b2:d5:9c:99:0e:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C1:2A:8A:B8:5E:5C:23:17:83:3E:67:FC:3F:A3:BE:F1:DA:59:59
X509v3 Authority Key Identifier:
keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:42:e2:4c:5a:3e:af:a5:76:c9:db:cd:5e:63:5f:ba:1d:c5:
94:e4:0e:90:16:f3:37:d9:e6:a3:4b:10:24:7a:02:4a:98:e9:
db:01:63:73:bd:45:03:cc:2f:0b:7a:21:96:26:ff:fc:7f:66:
f1:93:50:c3:0f:ff:08:c7:20:d4:8d:55:bc:46:37:e1:bf:bb:
7a:54:d4:ef:1d:43:e2:0d:a7:66:f7:2e:79:50:ce:aa:00:ae:
44:42:f5:3d:93:3e:d2:15:0e:aa:1c:f2:c0:99:94:67:74:ca:
47:dc:4f:27:8f:4f:d5:3e:01:10:93:b7:69:bc:6c:37:a1:37:
2c:f2:40:c1:fc:af:73:3d:fc:35:2d:fb:f5:8a:47:d4:fb:75:
8e:7e:65:b3:a1:3e:30:6b:d1:15:3d:80:68:d7:dd:14:7d:aa:
36:ce:d9:c3:6a:e5:a4:9a:47:40:e8:a1:0d:6e:a4:6a:50:ad:
e3:0b:3a:ac:29:4f:5e:e8:87:7f:bb:c9:56:33:46:c3:19:1c:
98:51:97:af:6a:5b:f5:8b:11:43:e4:fe:65:d9:f1:4c:02:2d:
c6:f0:99:42:53:bd:4a:71:c0:36:fd:33:5e:fb:c3:14:c0:b1:
16:51:c7:76:7b:89:08:9d:26:ed:a5:7c:1a:4a:2f:77:60:65:
92:d3:9f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:07:29 2025 by rpki-client