Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
File: KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json)
Hash identifier: 812CAhtaA5+RQqQVERY3iD15rBmz2P74j4B2O7e9ets=
Subject key identifier: AE:76:B1:82:46:91:02:1C:71:BF:98:26:1A:FC:E0:54:4D:0F:FF:80
Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Certificate serial: 019A54C0F2362AE0405D99B61264896D7C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
Manifest number: 098D
Signing time: Wed 05 Nov 2025 16:02:02 +0000
Manifest this update: Wed 05 Nov 2025 16:02:02 +0000
Manifest next update: Thu 06 Nov 2025 16:02:02 +0000
Files and hashes: 1: Ep5Q_paEMkoQ8JMNVQev_VtcdmY.roa (hash: Bu1EiGDnBTDp8uoDAPAoyCI9ib5FJjnia2bO4NVERCs=)
2: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: mlshFtgnN7DM72Vdihm5SseEZ59uuOCGnnTBjWlGCUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:f2:36:2a:e0:40:5d:99:b6:12:64:89:6d:7c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Validity
Not Before: Nov 5 16:02:02 2025 GMT
Not After : Nov 6 16:02:02 2025 GMT
Subject: CN=ae76b1824691021c71bf98261afce0544d0fff80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:27:c3:8a:eb:f1:ef:19:5e:ab:79:bd:71:
57:57:7e:d8:62:06:bf:df:9b:0f:ac:85:f9:b6:c0:
cc:d4:20:22:6f:1f:ea:8f:37:98:0d:0f:ba:11:5c:
b6:ae:a9:f0:ea:0c:73:b3:da:18:ef:fa:2b:ef:6c:
07:ad:dc:f0:a6:f8:83:6e:07:03:70:66:4e:6a:e0:
2a:5f:db:8e:c8:eb:fc:c3:56:44:a2:48:2f:50:f4:
b6:5d:17:4b:fe:ba:41:7b:ae:a6:da:14:32:cd:b9:
dd:f6:bc:17:49:66:2f:7d:1d:c6:54:7e:c0:26:c5:
0f:eb:3b:68:d1:c6:1d:6c:02:44:7d:23:0d:44:14:
79:6d:6a:da:77:25:c9:48:74:ec:2a:d2:36:92:9e:
df:1c:a1:5a:7f:eb:63:be:37:2e:6a:3e:e6:21:1f:
9c:ca:67:76:ff:1e:46:4b:2a:bd:ef:c2:ec:0b:7b:
57:04:f1:0b:1a:13:23:f8:0b:35:59:f3:81:4e:e2:
f3:8a:1e:30:f0:51:8d:f1:89:80:df:08:a6:92:92:
be:7d:02:36:46:6d:4b:00:82:f3:0b:d6:77:57:e9:
89:04:7f:c0:07:84:ec:0c:5c:26:35:da:f2:cc:b7:
75:ee:9d:3f:93:18:15:94:cd:0e:84:e2:7b:5b:5d:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:76:B1:82:46:91:02:1C:71:BF:98:26:1A:FC:E0:54:4D:0F:FF:80
X509v3 Authority Key Identifier:
keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:66:06:5c:de:34:f1:6c:53:fe:31:5d:fa:5f:e4:5b:78:23:
52:4f:68:25:b9:d3:b6:08:6f:f3:4f:59:8e:f6:18:9f:e9:47:
41:e9:3d:6a:81:9d:02:e6:de:ff:ab:8e:21:e6:1a:29:8a:2d:
fa:6e:a6:f5:47:9e:89:e8:88:59:5b:10:16:12:e9:22:e7:ad:
14:15:17:23:fe:fc:dd:b7:30:0b:14:18:d8:e1:db:50:e8:c9:
23:44:a4:28:a5:65:69:fb:2c:52:9f:24:33:1a:52:82:d2:ea:
de:bc:61:c8:38:ab:23:31:f9:2a:35:f3:73:47:9e:10:3f:11:
46:9e:9b:f8:95:15:43:0d:e0:2a:d8:a7:2e:2f:4a:04:6c:c6:
f3:8d:c8:79:f4:1c:8e:52:04:db:5c:d2:75:12:44:c5:ff:de:
75:fb:64:62:57:53:5a:c1:eb:9f:61:e4:5d:99:f9:b6:ef:ad:
e2:64:9c:f1:e8:08:cc:76:8c:93:1e:98:1c:68:0e:36:57:70:
66:80:53:e0:70:87:25:d4:fb:0d:e7:e1:5a:6d:74:d9:43:47:
b2:c9:46:d4:c0:75:dc:0f:67:d4:45:e4:37:92:6f:9f:87:70:
74:63:27:7e:c7:3f:ca:cf:24:16:6e:6d:98:2f:e0:ea:4e:49:
b0:93:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:39 2025 by rpki-client