Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: gNfeUkC/PHm+Q1AUPp0VbroABbRjz+Olg7KHFUwKu2M=
Subject key identifier: 0C:F9:4A:D4:DE:18:3F:42:42:07:15:7A:8D:D7:C9:A0:C5:03:9A:67
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 019A258AC326938738BACDCC1B82C20592F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 12:00:42 +0000
Manifest this update: Mon 27 Oct 2025 12:00:42 +0000
Manifest next update: Tue 28 Oct 2025 12:00:42 +0000
Files and hashes: 1: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (hash: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: DYBI1BrlVkGfMVPf5JC5gNx0yDDM0MnYyLqTLDxQdVM=)
3: NA2ltT3Sfb3V_iisdx5vwEvFMeE.roa (hash: vazWrh+R+LWtlS3ZJjQYp6mVJnmrGyyhkAQ7rsXsUf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:c3:26:93:87:38:ba:cd:cc:1b:82:c2:05:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Oct 27 12:00:42 2025 GMT
Not After : Oct 28 12:00:42 2025 GMT
Subject: CN=0cf94ad4de183f424207157a8dd7c9a0c5039a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:0a:3b:12:6c:c2:e5:7d:dd:52:1a:8f:60:
6e:7f:b6:d9:71:53:f9:2b:92:93:ff:d7:a3:a1:7e:
98:46:8c:47:79:df:54:7e:b8:cd:33:24:16:fa:ad:
d0:ed:1f:2e:36:5c:c1:f4:13:32:27:57:bc:ba:54:
dd:4c:39:9d:c7:3a:b7:1f:94:34:fe:8d:1c:d8:84:
87:68:ae:e2:22:04:4d:9b:dd:15:78:56:d2:2c:b3:
b0:39:18:22:f4:54:bf:2c:1d:93:5f:95:1f:a2:8f:
4f:24:cf:cb:8b:20:bf:7f:d8:55:fc:13:cb:b5:c5:
fd:4f:6a:2e:49:5e:4d:f8:b4:88:96:b3:2c:61:bf:
d8:85:e7:91:e0:61:6c:87:3d:cd:b7:39:42:00:b3:
17:d7:5e:c1:79:63:1a:b2:78:8c:f4:9a:a2:c5:c8:
d6:4e:5e:85:69:59:8c:65:25:0d:9a:53:70:4f:09:
7f:ea:ab:b3:88:c3:3e:2d:f7:54:f2:81:2d:93:fd:
c2:16:47:82:43:f0:a0:ec:eb:91:be:60:97:ff:da:
d5:12:59:0f:d7:7b:db:62:47:49:52:66:10:54:54:
33:04:84:80:88:1e:d7:38:36:89:fd:18:94:4a:30:
db:c4:29:19:fa:b8:46:9d:76:e0:ed:6a:e8:58:59:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F9:4A:D4:DE:18:3F:42:42:07:15:7A:8D:D7:C9:A0:C5:03:9A:67
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a0:d3:3e:72:dd:23:f2:e2:59:8e:42:ce:b1:f6:5d:78:3a:
a6:54:c3:1e:41:5c:eb:bf:8f:be:26:48:49:f3:3c:30:91:86:
35:11:89:39:fd:d0:fa:a4:45:ea:c1:0c:e3:43:d6:40:80:40:
ac:1f:34:98:36:c6:aa:64:11:66:62:88:7a:a7:98:ed:bb:2c:
92:8e:7b:d0:ca:df:47:66:0b:6e:ab:5a:ac:09:ca:fd:df:4f:
41:13:3b:63:de:c4:2e:d5:1c:0d:63:2b:37:00:f0:b4:0c:6e:
34:9c:47:f1:bb:71:18:5c:75:64:bc:6d:dd:1f:3b:2e:15:79:
55:74:9c:89:4b:ae:45:50:d1:5a:2f:60:e5:0d:c8:4f:09:12:
e5:f9:5b:ba:dc:86:9a:7e:2a:e6:63:e5:54:81:b5:7c:b7:ef:
3e:ad:06:9f:97:2e:0e:35:d4:6e:f0:6b:0c:12:b4:c3:29:b9:
22:61:13:96:73:b3:16:61:e3:f6:9f:cb:36:e6:f2:72:1a:4b:
a2:43:fc:b2:19:83:d8:79:bd:f5:aa:36:c9:83:b3:11:74:59:
8f:e9:14:7a:1c:66:9e:01:27:f4:34:df:54:23:a7:5a:5b:9c:
5b:e8:73:2a:34:3d:94:d3:53:ac:86:d1:61:7c:02:eb:d0:28:
05:49:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:22:34 2025 by rpki-client