Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: yUtpQq9trHlr7EjPaQuZVPn4hOINLOie5Y6HXJmVXDw=
Subject key identifier: EF:10:1E:D2:6E:D9:9E:61:37:04:4A:32:8D:65:A1:A4:7F:E6:A0:62
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019A51F55651FF2208989054CCB43D9A87EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 10F5
Signing time: Wed 05 Nov 2025 03:00:24 +0000
Manifest this update: Wed 05 Nov 2025 03:00:24 +0000
Manifest next update: Thu 06 Nov 2025 03:00:24 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: KyKP9QdLjEC4UfVoukhh4Ooz8diw2X7FgDAMrZVXfRs=)
2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:56:51:ff:22:08:98:90:54:cc:b4:3d:9a:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Nov 5 03:00:24 2025 GMT
Not After : Nov 6 03:00:24 2025 GMT
Subject: CN=ef101ed26ed99e6137044a328d65a1a47fe6a062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:2a:47:d3:f7:f0:d3:07:11:85:be:a6:29:
4d:42:6c:cf:ea:39:34:b0:4d:f2:0b:75:25:01:a7:
a2:f8:1b:e5:ff:79:4c:6c:b8:4c:5a:9e:db:59:0b:
30:94:3a:2d:13:69:eb:22:76:47:13:95:07:7f:f1:
4e:b4:d7:9b:43:2e:04:8e:cd:19:2b:52:92:73:72:
ea:30:df:cd:a2:93:ea:b5:49:cf:74:8d:e0:06:ff:
7d:5f:3b:91:8d:74:b9:c8:25:9b:41:df:9b:d4:07:
70:c8:ba:36:05:c1:4d:d0:45:f6:33:a9:6d:ed:02:
5a:10:03:45:1e:8c:0c:8e:03:81:0f:70:e8:26:90:
de:a4:26:cd:9d:d3:e2:97:71:b4:ff:75:17:6c:dc:
26:9b:92:98:30:9e:4b:3b:ac:cd:c2:57:da:6a:2e:
62:e5:fb:ad:7f:d0:4f:f3:1e:8a:8d:9f:95:48:e0:
93:c3:f0:dc:67:35:37:ee:28:07:cd:63:a8:99:4a:
dc:3c:1d:1a:21:2f:40:c3:4f:92:dc:21:74:65:92:
1f:d1:8f:cf:5e:aa:ea:ad:ed:39:e8:4e:e2:c1:db:
bd:8b:8b:cd:c1:e4:a9:c4:a7:64:de:31:d3:ec:6c:
51:2f:4f:0f:f6:41:0a:94:f3:b0:36:32:5b:17:41:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:10:1E:D2:6E:D9:9E:61:37:04:4A:32:8D:65:A1:A4:7F:E6:A0:62
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c6:3f:76:28:26:1e:67:e7:7c:ef:4f:a4:7a:48:9c:67:db:
1c:77:14:c0:e6:f7:1e:d9:de:29:2e:08:5f:13:e5:2e:0c:0f:
c5:a6:71:10:68:34:7b:7c:a5:91:92:b4:ab:d3:ff:f2:33:48:
e3:3a:aa:f9:1b:8c:a7:08:90:7c:cb:e1:0c:cc:a3:f6:f9:2d:
98:b8:23:07:4f:f5:12:70:db:f7:4f:ed:18:fd:53:98:64:b5:
ad:18:16:18:7a:91:a4:ba:c3:72:48:46:16:67:7a:f4:ae:82:
b1:3d:ff:73:aa:74:92:eb:2a:9f:f7:07:24:20:38:ca:f9:5b:
3a:dc:ef:a4:44:b7:05:74:26:3e:2d:9e:9b:2d:09:67:ea:38:
dd:e3:30:19:db:e0:73:89:88:09:21:c0:30:e0:c4:68:68:ab:
34:48:ab:42:c0:f6:82:b7:18:d2:97:c9:1a:85:8c:9e:7a:f0:
8c:d6:40:80:77:20:7f:57:17:ca:60:25:53:a2:bd:68:45:ed:
7c:3b:d9:e2:f2:97:ec:12:74:f5:44:6d:2b:41:40:a9:39:5b:
64:e8:fe:6e:d6:b9:c8:04:1c:bf:b2:10:e4:9a:0a:83:b7:c4:
7e:76:1b:93:f7:39:67:ea:d2:c1:2b:f0:90:a9:b8:97:e9:39:
91:11:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:44:33 2025 by rpki-client