Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: 8lwGU1eLVqhfRtgHE+biMJRbnZhZQWSiIXJnXMp0+y0=
Subject key identifier: C6:D7:F2:9B:AB:EF:5D:5F:25:91:12:D2:44:88:74:3E:06:09:D8:AB
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019A26D41F59041FC88B11069CF60A6EC617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0B87
Signing time: Mon 27 Oct 2025 18:00:27 +0000
Manifest this update: Mon 27 Oct 2025 18:00:27 +0000
Manifest next update: Tue 28 Oct 2025 18:00:27 +0000
Files and hashes: 1: XFrF4ZD8RKmENGKuXlNfyh9_oV8.roa (hash: Syc9HmjiF/DkUOhl4IVh1oQ9jwD6L7ptWtUgxSy9ut8=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: wdDrRAHdCYkwjoBJaYGyii+90V0bRcxqXIZDEw0fZag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:1f:59:04:1f:c8:8b:11:06:9c:f6:0a:6e:c6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Oct 27 18:00:27 2025 GMT
Not After : Oct 28 18:00:27 2025 GMT
Subject: CN=c6d7f29babef5d5f259112d24488743e0609d8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2a:18:f0:9f:c9:87:28:1a:4c:c8:bc:89:84:
3a:05:42:30:56:95:69:66:7d:c9:90:51:41:09:63:
5f:59:ee:0b:fc:79:bf:7d:cc:36:5f:75:8e:f0:b7:
86:73:bb:4e:2c:3b:b8:6b:63:3a:b6:51:37:fc:b5:
d3:c0:92:5e:27:21:46:48:6c:ed:09:47:6c:cb:d7:
45:3f:fa:3d:9a:41:56:70:87:8c:bb:0a:9d:0c:22:
a7:82:e1:ee:4b:82:ca:86:08:17:93:af:22:b5:f0:
91:a3:7f:02:68:0a:5c:11:a4:e8:fd:a4:70:36:c1:
59:d3:ab:13:fa:fe:88:36:7f:81:d0:98:b8:3f:60:
d4:92:0a:06:54:86:32:9c:12:87:22:6c:7b:d1:85:
e1:fa:9c:d1:e8:d8:13:af:81:1a:e0:bb:e8:44:16:
1d:43:34:08:23:6b:90:d7:40:7d:af:28:b5:ea:72:
25:a6:22:2d:08:0f:f4:ae:f5:a8:6d:6f:ad:c3:71:
87:37:f4:87:79:18:cf:79:f2:21:85:b7:21:10:55:
96:6a:62:ef:f3:9f:14:c0:b2:16:2e:51:eb:91:bd:
11:96:64:e7:3d:0d:c6:8b:09:a3:56:74:83:eb:73:
03:c5:29:70:d5:43:3a:62:76:fe:df:7c:fd:e0:4d:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D7:F2:9B:AB:EF:5D:5F:25:91:12:D2:44:88:74:3E:06:09:D8:AB
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:bd:cb:1b:e5:9b:98:00:74:4e:cd:10:ca:80:d1:71:31:3c:
53:90:dc:7f:b4:01:e2:85:1e:90:94:2a:38:34:04:ad:42:ee:
5e:4f:8a:e2:92:0d:2c:77:f8:8e:72:e2:47:91:03:c9:95:b2:
95:26:1d:e7:b0:f0:fb:fe:79:c7:ba:56:f8:0b:0a:b2:7f:61:
7b:9a:e3:66:e8:26:20:9b:c1:ad:87:75:d9:d9:4d:aa:d7:cd:
83:83:e7:c4:66:1d:df:4b:8c:a6:7e:6a:f7:a8:ac:03:4b:9d:
a7:32:75:e9:4c:09:5b:95:49:04:5d:c1:75:a3:d6:0b:ba:07:
e4:cd:fc:8a:f3:ae:ae:1a:e6:a0:12:85:8e:ba:15:5f:12:39:
87:be:8e:78:1e:57:19:d5:5e:62:b1:3a:f6:f9:dd:a6:f6:da:
59:fd:a3:b2:75:60:f9:7c:d3:78:56:2f:e3:47:d6:6f:a8:d6:
9f:a7:3c:6b:f2:64:78:e1:2e:ed:70:b8:f7:64:04:6e:f9:d4:
a7:b1:47:2d:ae:d5:2d:05:74:40:ca:4f:b9:74:8b:1a:4f:ae:
48:55:d6:95:2a:ee:12:2a:93:ef:83:53:12:4b:f1:7c:0e:85:
a2:ea:ad:a0:ca:35:9c:1e:ba:ad:a4:54:99:e7:e0:9f:51:4d:
e1:2e:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:43:52 2025 by rpki-client