Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: AcF1IINCtHhBmzUsIeyaRT4Mbz0tjBDJ//QVFszDaxE=
Subject key identifier: FB:DF:4D:F5:3A:BC:D5:34:F6:5F:10:5F:84:AC:51:3D:D2:DC:5A:D2
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 019A4EF41397B25F4F31433AB6A6817D310F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 1578
Signing time: Tue 04 Nov 2025 13:00:09 +0000
Manifest this update: Tue 04 Nov 2025 13:00:09 +0000
Manifest next update: Wed 05 Nov 2025 13:00:09 +0000
Files and hashes: 1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=)
2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=)
3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=)
4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=)
5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: vS8ljeffPHHTkIWM1fR/A8vsQHk6sbFHe6Ah3YoV3+0=)
6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=)
7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=)
8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:13:97:b2:5f:4f:31:43:3a:b6:a6:81:7d:31:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Nov 4 13:00:09 2025 GMT
Not After : Nov 5 13:00:09 2025 GMT
Subject: CN=fbdf4df53abcd534f65f105f84ac513dd2dc5ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:c0:95:9a:9d:e8:37:17:8a:d2:4a:f6:25:
ab:d3:09:ef:8a:59:3c:81:58:87:2f:0a:bd:4c:d7:
19:04:e0:f5:4c:e9:e6:db:6b:5a:2a:22:30:fb:64:
53:10:55:9d:e8:dd:df:05:a0:43:9e:fb:ed:41:ac:
27:5a:4d:6c:12:a6:46:50:6f:8f:78:42:c3:bf:c8:
40:85:d1:f2:9c:d8:70:f8:99:42:05:8f:ea:55:e0:
95:c0:7a:48:d6:7a:73:9d:93:9a:e6:da:5d:58:97:
d0:61:4e:ea:53:ed:b8:35:88:a2:f1:91:57:f8:74:
0a:45:a6:44:5e:19:8b:12:ba:c2:30:32:39:3e:65:
09:66:ad:93:a5:af:ea:b5:e1:33:5e:5e:3e:39:eb:
3f:c8:ea:d8:b8:9d:7a:6b:71:a9:bf:13:f0:bf:dc:
5f:41:47:da:2d:15:77:97:74:0c:a5:eb:16:64:2f:
ac:a8:81:42:1c:73:13:23:47:2e:cb:6e:16:81:72:
a3:6f:08:36:2e:49:06:13:64:6c:01:54:84:69:6c:
2b:19:08:b7:32:8d:69:7d:1b:9d:51:38:69:83:71:
21:c7:74:1d:2f:04:9d:04:11:14:a5:26:3e:d9:e5:
5e:0f:17:18:6d:0d:f0:11:9a:3d:df:3e:0e:7c:62:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DF:4D:F5:3A:BC:D5:34:F6:5F:10:5F:84:AC:51:3D:D2:DC:5A:D2
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:11:37:97:69:ea:08:b1:9c:2a:05:62:58:d8:8d:c0:02:06:
1a:c6:ce:2a:17:ef:65:a8:2e:76:bd:61:aa:53:60:7c:28:90:
19:62:d2:dd:12:66:f8:33:bb:6a:7b:c5:37:b0:d0:bc:4b:63:
10:73:c0:37:23:c3:a1:65:a3:b9:54:9f:72:1d:1a:bf:70:5d:
20:a2:8f:d6:db:64:36:7e:40:95:ee:1b:34:bd:80:33:d8:38:
88:7f:14:5a:51:3f:80:45:7f:29:1c:c9:aa:61:14:da:78:29:
2e:4c:61:59:8b:4b:26:d5:21:a0:d5:ae:af:ad:ae:a0:91:72:
7b:19:cf:43:5c:a0:be:55:57:d0:4e:55:ef:c8:f3:a3:aa:10:
12:7b:3c:c5:44:c6:be:fc:95:a4:10:02:c3:bc:f4:d9:33:6a:
44:b2:4d:96:49:c6:ea:c1:85:db:e0:4c:e0:aa:f7:bc:ed:a1:
6a:48:dd:62:06:31:fe:be:f6:a0:c7:46:4b:2a:10:90:e9:62:
80:25:d1:e6:1b:95:36:8c:c2:0f:a9:da:06:50:fc:e1:ec:51:
df:48:59:9c:0c:f9:fb:23:77:98:08:b0:61:38:3e:42:5a:c1:
2a:87:fd:cd:ad:9a:14:a9:06:68:dd:6e:d9:ec:17:29:88:76:
e8:2c:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:49 2025 by rpki-client