Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File: KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier: MKjV0zcMc0pLn7rgzx9vVS6UL73uhkYCXPxLby/odnU=
Subject key identifier: C6:0C:38:6B:DA:84:E3:82:90:1E:F3:71:CF:0C:F4:63:80:77:FB:39
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 019A4D3CE163A536CE4884B17424575DCEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number: 16F2
Signing time: Tue 04 Nov 2025 05:00:26 +0000
Manifest this update: Tue 04 Nov 2025 05:00:26 +0000
Manifest next update: Wed 05 Nov 2025 05:00:26 +0000
Files and hashes: 1: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: 7akwRlJs1Q9z7tnxE3ZspGM6qAM1i3Dl817sctk50VE=)
2: piJhKM_we331Drsk15cixPVEH_I.roa (hash: NHNPopSWAyph5Bx3EeKPWL7ZkR7orplnRo1YXxckaSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e1:63:a5:36:ce:48:84:b1:74:24:57:5d:ce:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Nov 4 05:00:26 2025 GMT
Not After : Nov 5 05:00:26 2025 GMT
Subject: CN=c60c386bda84e382901ef371cf0cf4638077fb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:90:0c:fa:ff:34:d3:5b:07:a2:13:87:6b:
f7:82:5d:2c:4f:d5:12:d8:5e:57:69:5d:16:43:31:
1b:dd:60:e7:55:6a:81:b7:87:f0:fe:f9:e0:3d:ea:
51:90:18:1f:0c:90:e5:2f:b7:e3:eb:60:04:27:96:
b3:66:7a:52:86:94:4b:85:9d:c9:4e:d5:a0:b6:7e:
99:16:43:8e:4d:6d:fd:f5:56:68:c7:1c:8a:ca:dd:
0c:52:a1:9f:0e:c7:0b:99:1a:b9:b5:cd:01:4d:72:
4b:c8:65:2d:a7:d2:4d:cd:bb:3e:e7:f9:f9:9a:76:
91:57:fe:6f:75:b8:a3:43:77:48:e5:a1:ee:5a:12:
df:17:27:c2:02:91:00:6c:19:f5:fb:2f:84:7d:fb:
84:9b:7d:14:99:75:ad:a2:58:eb:d8:fd:65:17:55:
f1:96:f1:99:e5:a9:d8:39:0e:46:91:42:9c:e9:98:
f8:8d:07:a0:34:57:f8:12:11:34:da:cb:10:00:92:
a7:d1:b5:2f:d2:e5:65:55:0e:3b:53:4f:29:2a:c7:
42:89:86:9b:70:e1:eb:50:56:e2:23:14:54:33:36:
76:0b:85:4a:b9:f0:d6:e9:ca:84:74:43:3d:6e:8d:
6e:e4:b2:42:d5:57:64:a6:64:84:53:26:13:7b:cd:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0C:38:6B:DA:84:E3:82:90:1E:F3:71:CF:0C:F4:63:80:77:FB:39
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:43:c0:aa:ad:77:0b:b7:bc:e3:27:7c:75:b3:ae:0c:4a:e1:
8c:8b:7c:cb:65:05:5a:23:3d:7b:1e:27:82:bb:42:a3:22:ce:
74:14:22:34:5a:f3:e1:b0:2f:77:a8:80:bb:86:65:b2:fa:38:
c4:0f:15:ae:d8:2b:9f:ad:48:e1:30:45:dd:3d:b8:31:79:16:
dc:55:2a:14:e3:ca:b7:8a:8c:1f:b6:95:ac:84:0f:30:9e:8a:
e1:dc:7c:89:06:8d:e5:6c:4a:b3:31:28:ea:1a:58:e4:2b:7a:
5d:4b:fc:87:8f:43:36:42:0d:fc:a4:b6:49:11:4c:c4:ed:18:
33:15:1d:7c:ae:59:22:a0:2c:b7:80:81:9e:08:ca:67:2e:7e:
ec:ec:79:a7:a5:0e:8b:39:33:8c:30:03:c3:18:43:34:65:8d:
c7:d1:40:69:74:83:e2:28:13:f6:27:c2:06:6e:b0:13:da:83:
01:25:24:97:69:ae:e8:f9:6b:af:50:71:38:fd:7f:f6:74:9f:
7b:a0:84:eb:c4:b4:31:52:1f:3d:b2:53:6d:19:4a:d9:84:07:
56:bb:68:2c:cf:38:1b:84:99:0d:a1:63:73:58:dc:bf:8f:78:
1c:00:4c:c4:d9:a6:e2:1f:3c:c2:2b:9d:1b:ed:2f:4a:2c:b6:
2f:75:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:02 2025 by rpki-client