Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: yh2OG+EvTMdknQXkqyV+BEoUZzROekKBXpP+SHMTmM0=
Subject key identifier: EA:A2:31:44:62:F0:98:52:8A:1A:34:8E:F5:41:B4:89:49:D3:A6:36
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 019A25F868918CF2E1C5886293BC013D2DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 1003
Signing time: Mon 27 Oct 2025 14:00:27 +0000
Manifest this update: Mon 27 Oct 2025 14:00:27 +0000
Manifest next update: Tue 28 Oct 2025 14:00:27 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: 7rdvPBig6PPo591Ded34NA7clPXuTSChBWKHSoWktp0=)
2: UZvnE-CaTB9qoHVdVXMgB-LiNEM.roa (hash: Ycg6B0Rffq0DfziTHdPyE76c/wB4R/dWXA7Fjbacvbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:68:91:8c:f2:e1:c5:88:62:93:bc:01:3d:2d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Oct 27 14:00:27 2025 GMT
Not After : Oct 28 14:00:27 2025 GMT
Subject: CN=eaa2314462f098528a1a348ef541b48949d3a636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:ff:ce:72:ea:b4:c7:94:64:9f:38:63:73:
4c:47:d5:c3:27:f9:da:ae:9d:89:ef:4e:9c:02:1d:
54:a9:23:cb:7b:bf:1f:17:6a:be:49:d7:f5:29:f0:
e6:56:5e:2b:8c:08:62:0d:55:1e:c5:47:3d:4f:55:
59:5c:0c:aa:79:5a:b2:f4:95:8d:82:8a:24:5a:3f:
22:aa:d7:3e:a5:dc:58:48:00:7c:ce:12:4f:ff:73:
08:34:46:8c:1a:9a:d5:f4:8a:82:1a:79:b7:64:a1:
fc:ba:20:95:b3:cd:1a:5b:96:fd:2d:18:76:76:59:
9c:f6:bc:89:20:97:53:c6:0b:c1:78:b0:9e:69:44:
c8:ab:6b:fa:85:12:ee:e0:25:bb:d8:b0:d2:e8:61:
f6:22:e4:7c:2c:7c:79:82:fc:ae:5a:c5:d3:af:82:
78:04:39:6b:10:b6:d2:d5:51:77:72:d1:c7:28:d5:
ab:74:0f:a9:46:ee:c5:9d:70:3b:88:7f:f1:28:c6:
28:bb:6c:00:89:d9:d6:96:62:50:71:aa:24:cd:76:
ec:0f:56:0a:b3:a3:f2:c0:f6:cc:83:49:4b:6a:76:
fe:ce:17:44:67:4c:d7:57:7d:6c:36:03:a1:49:7c:
ac:b5:89:e3:5a:e4:fc:ed:0d:2c:8b:ea:2e:fe:90:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A2:31:44:62:F0:98:52:8A:1A:34:8E:F5:41:B4:89:49:D3:A6:36
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:03:21:80:f8:e2:74:54:36:2c:6c:3e:12:49:57:54:51:4a:
54:a8:af:eb:7e:98:07:5a:29:ba:d4:4e:c0:77:c6:65:c8:ca:
97:43:05:04:6e:27:4b:cc:da:a5:47:36:e5:43:88:4b:55:d4:
19:27:55:2e:5a:ec:aa:b2:fd:b7:96:e5:76:cc:01:68:f2:06:
6b:6c:bd:54:45:d8:51:5e:7a:7a:ce:d4:ac:94:89:63:ed:6c:
11:c8:8f:ec:48:f5:8d:47:41:11:b6:ad:53:b9:29:9d:b0:82:
e8:95:5b:b0:46:52:a8:70:6c:cb:50:f0:17:4f:e2:09:e9:b1:
45:65:2e:ef:e9:42:85:68:a9:51:2d:e8:17:42:b7:29:f1:af:
7f:b2:c0:7f:8f:75:c7:8e:77:17:1c:c9:e7:a2:65:b8:f2:a9:
d9:96:c5:00:29:5a:29:7e:2c:f4:71:6f:91:ba:2f:72:00:cd:
32:37:4a:78:d5:bd:ac:e5:c4:0c:10:4d:ed:cd:d5:7a:7a:bd:
e1:95:5d:94:3d:1d:30:ed:c6:8d:8e:ed:34:fb:82:f3:49:90:
6d:c9:f8:50:2d:de:35:e2:77:4e:d1:a5:0a:55:0c:5a:57:f3:
95:f5:46:7e:42:23:8a:da:96:6f:94:08:c0:21:49:b2:d5:f5:
24:e0:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:00:38 2025 by rpki-client