Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier: 7xp56ezcS1IXcgT18eDQ8VvRG0qcp9c+MJgbAVNAXFI=
Subject key identifier: 0A:CF:23:56:69:6C:B5:2A:BF:35:47:5B:26:D7:70:E8:6D:70:89:60
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 019A4DAAC6069B648B4E2C372632D9B4BC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number: 08AC
Signing time: Tue 04 Nov 2025 07:00:28 +0000
Manifest this update: Tue 04 Nov 2025 07:00:28 +0000
Manifest next update: Wed 05 Nov 2025 07:00:28 +0000
Files and hashes: 1: EI7dYlJh6LhMXB8o9nb3T4Z5aSU.roa (hash: MmSw3Gp5lTTxkK0eiPx+eF3FQfljG+ipyig54PF6DUw=)
2: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: wwE35CayhjGsgocxedopzWTv3OAwr3TbyAqjGL0WuXw=)
3: RnDsNDAUOmfocBcXgLTcHPDDhKQ.roa (hash: yyfreslJl3l+RdMxXIwzsT6k7E7HMN8jhFZGTbEdlJI=)
4: Y8zzieez_mdBu3g9ytJW3F1qtcM.roa (hash: IBQYnJmIJpRbjM/GjJNvEs/gT4e0NBRUv4AwTGSAB8I=)
5: _eEka1D2F9svheD7_1S50A6jg0c.roa (hash: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=)
6: jTf4hu8p-YdeMkBcAMreST3RURY.roa (hash: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=)
7: qV0bi1f4xUUogQC2jTvfOlCFNsY.roa (hash: JeZIDT/pHiJyZCYpNCof5wbSJ0INX3sJ+QZbs083uM0=)
8: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (hash: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=)
9: ueIl5HLpFqn43HBQc7-Q4ZVn06k.roa (hash: fzhg7jHCYT5oIQ824HH1vwjcqcxosVhT8YpZmbw8K50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c6:06:9b:64:8b:4e:2c:37:26:32:d9:b4:bc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Nov 4 07:00:28 2025 GMT
Not After : Nov 5 07:00:28 2025 GMT
Subject: CN=0acf2356696cb52abf35475b26d770e86d708960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:bc:03:d7:6c:ed:df:2b:9a:0a:1d:76:a1:
e3:df:47:c3:82:0a:c4:35:b5:f5:1b:cb:7f:a3:99:
1a:76:4d:70:28:d0:4e:78:01:f6:13:e5:54:6c:b9:
ff:2b:6e:83:05:e9:9a:55:5f:b5:c1:32:41:f7:19:
93:9d:5c:cc:f8:76:11:fb:89:b6:2a:47:17:ef:81:
65:61:44:b6:38:a7:77:44:ca:11:f1:17:94:89:9e:
14:26:59:f5:54:be:f8:1d:d8:fa:0c:77:8b:da:40:
13:8c:27:f5:e4:fe:d6:34:e7:46:70:77:78:0f:a8:
c3:99:6b:9d:18:63:37:11:f5:e9:44:da:45:7b:0c:
c1:7a:4f:ed:50:c2:c9:cd:1a:92:46:d9:bc:c6:fb:
91:e5:b8:8e:73:c6:8e:f8:6b:69:e2:ef:9c:3a:69:
f0:b7:4f:37:b9:5c:2f:15:18:e6:a5:11:2f:35:93:
fa:ce:f6:69:f4:8b:ea:07:16:00:d3:50:c8:1b:5e:
8b:f1:7a:01:3c:85:a6:b8:64:cf:c1:2c:c5:f3:5d:
a1:c0:7b:2c:2e:f3:03:e1:ca:61:fa:aa:de:00:07:
fe:bd:d4:06:ee:ce:fc:07:3f:a6:e7:09:5e:ab:7d:
51:d8:6a:82:82:91:d9:89:60:bf:8e:6c:4d:92:96:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:23:56:69:6C:B5:2A:BF:35:47:5B:26:D7:70:E8:6D:70:89:60
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:15:50:a7:5c:e9:1b:d0:b6:c8:59:7a:2d:22:30:8b:28:8a:
8c:16:1b:52:90:89:e4:64:67:1f:ec:64:ae:b9:40:74:33:03:
be:cd:bb:fc:e3:29:8f:c5:94:be:9f:98:62:ef:56:ed:1a:c9:
eb:c8:58:a8:17:d7:ae:d4:ff:5c:41:7a:ae:fe:2c:77:12:37:
3a:4e:f2:7f:aa:b3:53:45:c0:98:25:00:f2:da:ff:31:ce:f9:
2b:ae:4f:18:06:72:2f:ac:34:b3:1a:6b:1c:14:f4:6d:a7:f2:
d2:04:44:5a:43:48:0d:47:51:af:49:51:ac:72:5c:70:57:57:
68:47:cf:17:0e:ca:85:f2:56:a0:54:5b:bf:8e:54:7c:7f:91:
71:b5:df:ad:3c:8b:c0:7d:01:ff:5f:5e:0e:00:31:b9:3d:f5:
03:ce:a5:14:70:76:0f:8d:f9:0e:55:94:24:f1:a0:3c:7a:9b:
15:ca:4c:08:d7:85:8e:5f:9a:df:c7:19:f7:c3:a2:c9:77:9f:
9c:da:6c:48:44:24:0d:3a:ea:65:fe:37:58:f9:29:d9:46:9f:
c7:81:8f:f6:c3:4e:3b:d0:1a:2f:62:3c:2d:b6:1d:8d:c2:15:
d1:24:a6:5a:87:d3:2b:ca:a6:16:d7:67:84:38:a7:0f:10:df:
48:6e:11:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:51 2025 by rpki-client