Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File: kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier: zPkYVP9/7lE7aqGTcKp3OOb+JgID5LMuGsUCyQQVK24=
Subject key identifier: 87:9A:CC:A3:0B:C5:FE:76:15:BA:D5:8D:96:DB:E1:52:09:77:07:2B
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 019A28C30996845323FF3E135A1B4854BE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number: 1707
Signing time: Tue 28 Oct 2025 03:01:01 +0000
Manifest this update: Tue 28 Oct 2025 03:01:01 +0000
Manifest next update: Wed 29 Oct 2025 03:01:01 +0000
Files and hashes: 1: L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa (hash: 7USsx/75CcWYYXOpIrJthPZ+SLbNDigaF6/K5IzHy04=)
2: L3xdjIH2zy7v5Cj6gtkLDE8Ij7M.roa (hash: Q+o3qtQDOHZiPtx1qsjKwH4+/xbmKCsf4LWPeNV0Toc=)
3: Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa (hash: iefxuR6cCSeQuUVD7gHNM5oNj3aGdVfsEjg121b/nwY=)
4: YbdTZXXJ_bhou-ns1MRKdw7L4Hs.roa (hash: Yu99aBSHIFLARWNtpLmDu4XobT/yupAF1F7TMAyI2tE=)
5: Z82XkiOXgkgyHP_qUTQtV9ipAQI.roa (hash: Pcm+DnawQak47wg3O3tVgdWOq8t4gYDBeT6sBFXXJVE=)
6: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: 3N1I6ETNx7Y/Vsyj9sIF/7dBq8EGSVcrXfYVHbIEdmo=)
7: xzAOimHDia6u9KEZ2lcYuzbmUh8.roa (hash: twU3Zu+3OA4eLfmXFSTTDjCKPfrJ6o8S1Q+yF0JIdC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c3:09:96:84:53:23:ff:3e:13:5a:1b:48:54:be:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Oct 28 03:01:01 2025 GMT
Not After : Oct 29 03:01:01 2025 GMT
Subject: CN=879acca30bc5fe7615bad58d96dbe1520977072b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:d5:e6:7c:30:99:48:cd:40:b7:89:82:ab:
83:a2:66:36:8d:d9:26:28:1a:1f:66:bf:44:28:30:
bd:0d:62:b2:0e:23:e1:f2:d6:2f:93:b2:08:10:46:
d4:54:ee:1d:c8:86:89:0b:4d:ac:42:f8:01:9d:af:
74:14:8a:ae:5d:f4:5f:41:db:6f:d0:d2:f2:49:08:
54:74:62:33:73:f2:e5:76:e5:0b:37:57:8a:ee:d9:
36:55:9b:fe:2e:95:95:27:89:5f:e6:f8:b1:e8:ac:
53:8e:e7:89:49:36:65:d8:59:09:36:e3:17:fc:c7:
12:b5:60:6c:f5:4c:0f:8f:3d:46:38:04:43:2a:fb:
82:b3:46:65:0d:cf:42:c8:26:e4:bf:e1:24:ca:1a:
60:b5:ad:99:2c:41:1d:61:65:fa:14:be:68:16:2c:
e0:d2:35:26:19:80:7b:6f:3d:c4:77:b4:11:bc:f2:
dd:ac:5a:ae:df:5f:be:ce:34:e4:79:3b:4a:ad:cb:
80:7b:de:68:ba:32:0e:dc:04:ca:89:06:3a:bc:7b:
38:b5:8b:2f:39:96:bd:eb:32:f3:0a:57:9d:5e:3a:
c3:10:6c:78:9c:7d:d1:1f:65:bc:68:bb:db:77:f7:
39:4d:b8:39:23:67:90:01:37:56:4c:2b:c1:bf:c8:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9A:CC:A3:0B:C5:FE:76:15:BA:D5:8D:96:DB:E1:52:09:77:07:2B
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b0:9b:79:c4:48:8b:c8:a1:a7:ca:8c:1a:2d:b0:f1:84:61:
af:54:97:41:49:ef:46:45:e4:87:2a:2b:a5:1a:37:eb:36:0b:
a0:8d:78:e2:30:8e:6b:3a:e8:21:c5:3f:56:aa:61:14:50:9b:
19:0c:6a:15:33:11:68:31:74:0f:f5:8f:d1:24:c7:2c:91:71:
3d:b4:9c:58:94:ff:5b:54:62:0e:30:d8:ed:be:b7:5a:d5:61:
7c:bc:07:62:0e:04:01:cc:ec:4b:ed:70:b8:27:5a:c3:1d:38:
74:f1:06:dc:ee:9f:23:e4:7a:2f:7a:01:28:5e:7f:2d:c9:e3:
33:6e:cd:96:ad:21:5d:7d:9e:c3:7c:fb:c1:7c:d4:d5:13:3c:
c6:71:ad:a5:bb:de:b5:fb:08:f5:7f:a4:7e:a8:b1:93:bb:2a:
94:cf:3a:1c:6b:eb:da:95:8e:7c:93:e8:ff:36:3c:ee:4b:18:
d3:6f:83:12:82:ec:4c:96:be:9d:87:98:21:18:af:b2:5e:53:
33:7c:f9:13:b8:3d:51:a5:72:d7:d9:95:6a:03:03:df:3c:79:
18:2d:86:21:a9:d3:a8:10:00:0d:3e:92:27:f7:b4:cd:94:20:
2e:41:5a:dd:28:6c:a5:a8:c2:03:a1:56:b0:9f:c4:84:65:95:
ce:07:4c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:52:37 2025 by rpki-client