Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File: KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier: GnT6LPMOQfzXW8N+YITU9+iKMqCPoMjA9EMksV4Q5vo=
Subject key identifier: DB:2C:05:30:D7:5E:FD:4B:B1:36:92:15:9A:17:BB:B0:1E:C4:E8:1C
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 019A4EF4F6A5D8C6CDD528F7B714D9031694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:01:08 +0000
Manifest this update: Tue 04 Nov 2025 13:01:08 +0000
Manifest next update: Wed 05 Nov 2025 13:01:08 +0000
Files and hashes: 1: 8TWqg3TfqZs_5FrvevicA08_Me0.roa (hash: 4Z8rTsO/+irkApy694NCfCAKUJGTnN/zDl7bvRScmHU=)
2: E0LmXjQbMH-5PikYPEcuzzsWqGg.roa (hash: ptzM6Lx0G4exHD8wnG0yaiK9TLZgE439UHeYQgYNx5s=)
3: GKCHcnuOeAwv2OrVrhhlx1glPKg.roa (hash: lsZazQ3pOXhSWOPU2R2jWTWFqUlOxcs/A3f1wvZkH2U=)
4: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: iwJ9rA9VP7qaUJSIDZUAK8/c7JD1dOfsjh1osy7AqO8=)
5: wTbdYlsUFkp3d9dHZust_Lw_6AQ.roa (hash: OT9PLyVKPfe5qaWoveQ3/agGSLh/5l0V3Q2WNMZnLKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f6:a5:d8:c6:cd:d5:28:f7:b7:14:d9:03:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Nov 4 13:01:08 2025 GMT
Not After : Nov 5 13:01:08 2025 GMT
Subject: CN=db2c0530d75efd4bb13692159a17bbb01ec4e81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:9f:e4:35:75:aa:06:af:04:59:70:02:2c:
6f:e1:9d:64:41:1a:8c:89:0d:c2:50:26:ca:2d:7f:
82:61:04:78:cf:59:1d:16:ec:c2:f6:e3:48:61:02:
7a:71:5d:d9:83:20:b3:44:be:47:2d:7d:9e:82:65:
6f:24:f1:f9:82:a2:26:70:b8:62:33:0a:22:de:bc:
d6:fe:10:ab:48:94:b1:41:d2:ad:3a:43:8f:53:ae:
12:6c:60:27:d9:34:90:39:9b:07:6a:ff:5f:e3:d1:
39:80:6d:8f:ac:cc:56:e6:8a:0d:87:1f:39:e4:cc:
58:8c:b4:e6:4f:d4:86:99:31:6a:50:3c:d5:9b:cc:
7d:ae:c3:0f:ad:1b:a0:cd:46:4b:66:e3:19:e9:b0:
b6:dc:b9:7c:94:bb:0d:c5:12:81:68:f2:71:c9:39:
fa:83:a6:aa:a5:76:ee:03:21:59:f6:a7:54:89:cc:
54:62:cf:6a:ed:4b:0f:14:a9:3c:3d:41:99:03:7c:
82:9f:aa:5c:0a:20:eb:5a:ab:ec:ed:83:97:a0:e5:
41:d8:01:7b:77:cc:31:6f:53:33:f4:39:6a:93:eb:
87:9f:bd:df:da:9c:f3:13:e2:3e:23:10:bf:8f:26:
ae:49:86:62:56:27:96:b6:4b:eb:b7:ce:c6:f7:7d:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2C:05:30:D7:5E:FD:4B:B1:36:92:15:9A:17:BB:B0:1E:C4:E8:1C
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9c:e0:1d:f5:b4:4c:09:69:61:a8:8e:00:37:f9:68:e4:ac:
c1:36:43:0e:ce:ba:1a:8d:13:f7:d0:b6:01:af:9e:a7:73:ac:
6e:96:cd:35:72:c6:96:df:53:ed:72:72:94:fb:d3:68:59:6d:
fb:0e:fa:b5:64:65:3c:9f:fe:1a:61:8b:87:06:c3:f5:3b:05:
bf:55:87:ad:96:b3:7d:73:14:75:32:ea:b4:d7:54:52:11:8f:
5b:f5:fa:38:d7:0b:3e:47:d0:22:73:aa:ae:94:ce:d4:67:d9:
e0:9e:0f:0f:02:ae:4e:90:86:5f:f8:39:ec:f1:bc:95:22:93:
32:85:46:69:3b:0e:ae:3e:7d:08:a3:82:82:08:11:8e:34:0a:
f7:20:29:6c:26:2e:c2:ed:8c:12:b6:f1:0e:6f:a1:7e:ea:08:
b2:a3:7d:38:3c:b3:18:f2:7a:da:a4:e5:15:61:8f:1a:4c:c0:
e4:a8:86:4f:e3:20:5d:ee:b2:98:04:b4:ee:1c:fb:67:ed:88:
d8:8c:19:38:d5:0e:a7:54:6d:c1:42:6f:6d:71:fb:0b:ca:88:
fa:1a:f2:f7:c8:52:39:65:af:ec:6f:6d:1c:60:d6:93:62:63:
22:bd:12:d2:e5:2a:3a:aa:ee:3c:9f:32:7b:ac:38:28:56:2a:
20:1d:d9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:03 2025 by rpki-client