Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
File: KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json)
Hash identifier: SQ7c11sVPWky9GYobtqGRMbnnMmw+Bi/43VIzBCpOyM=
Subject key identifier: BD:B3:88:09:D8:7E:CD:A1:20:54:06:FC:43:C6:FB:DE:26:EA:14:4E
Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Certificate serial: 019A4F995DEB7A40E9F8012CB241CA12B75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
Manifest number: 0EB9
Signing time: Tue 04 Nov 2025 16:00:42 +0000
Manifest this update: Tue 04 Nov 2025 16:00:42 +0000
Manifest next update: Wed 05 Nov 2025 16:00:42 +0000
Files and hashes: 1: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: qrn7JUrykwGk0vJMQbMiSZsHAyV5EcWbaZ6JXz/Qsxg=)
2: bEf44I_katxftzRhRoOcb5k7xJw.roa (hash: B4D2C0R7a4GwUSt6VcyTIkYPBhevJsFHyCCfjO/vPIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:5d:eb:7a:40:e9:f8:01:2c:b2:41:ca:12:b7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Validity
Not Before: Nov 4 16:00:42 2025 GMT
Not After : Nov 5 16:00:42 2025 GMT
Subject: CN=bdb38809d87ecda1205406fc43c6fbde26ea144e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:dc:2e:ab:53:21:c2:20:84:fb:2f:10:9f:
df:8c:46:7b:0b:5e:f7:e3:78:55:13:14:f2:8e:91:
75:62:b6:c6:fc:d4:23:a3:1f:da:99:ff:87:e9:af:
b5:5b:5e:d6:95:35:98:2e:74:38:ce:ff:37:43:4a:
1a:df:1a:97:73:3b:c6:0e:eb:af:3c:58:a4:43:63:
f0:0f:eb:5a:5a:11:f2:1e:82:85:fa:8e:1a:73:ed:
23:2c:fb:e8:45:01:8e:8f:cd:a1:24:9e:bd:27:64:
ce:72:c0:1e:1d:9c:e1:d4:f4:73:7d:d1:bf:d2:07:
e4:f3:c0:31:95:9f:3a:fd:c0:c0:ff:05:18:be:50:
4a:a0:98:b6:0e:ca:14:9b:35:df:82:17:00:31:88:
7e:81:0f:31:7a:7f:1e:97:12:04:03:28:cf:20:56:
73:ea:71:25:d1:3a:63:43:e6:f8:cf:37:c6:7a:fa:
7f:73:39:64:0a:1f:52:55:d8:c1:93:cc:74:39:8f:
79:c9:dc:23:9f:cb:86:35:fc:13:f0:a7:a5:8e:df:
9c:16:49:3e:8f:18:a2:3c:ef:79:7a:d2:3f:a6:55:
80:db:08:1f:b4:4e:3f:8f:bb:52:75:0e:99:7b:a0:
5c:5d:d4:03:bf:f1:fe:75:2f:e4:98:1b:f6:fc:2d:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B3:88:09:D8:7E:CD:A1:20:54:06:FC:43:C6:FB:DE:26:EA:14:4E
X509v3 Authority Key Identifier:
keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:49:92:bf:cd:2f:38:e8:80:a1:7f:e2:e9:1c:e7:81:01:4a:
3b:46:fc:5e:5f:b9:ad:be:dc:b1:b2:57:3a:3c:cc:55:2b:d7:
af:ae:dd:e2:c6:eb:cd:77:c3:05:be:b5:f4:ee:fd:1f:98:32:
18:fd:ed:5a:b8:9d:eb:f6:ca:17:c8:75:3b:92:a0:2a:ba:2f:
08:ae:ac:79:66:62:c9:14:a4:ee:8d:f2:f1:9e:b0:44:cc:a2:
f2:3e:62:4b:bf:31:f3:02:24:92:bd:5d:74:9c:b5:82:30:f6:
e0:e4:30:e2:c9:e7:46:11:39:d2:4e:ce:aa:12:b6:ca:50:10:
d2:71:27:9e:b3:26:1f:b9:32:6e:f1:d0:21:d0:94:cb:a6:48:
38:b3:a7:47:54:d8:62:2f:d2:07:6a:e1:a5:ec:3d:0b:64:82:
4f:50:41:65:0a:d0:9b:ca:ab:e4:4c:b6:a2:2d:60:42:66:c6:
b0:a8:25:40:c3:6e:3f:22:3c:71:f4:2f:66:11:8e:72:5c:11:
27:61:d9:35:1b:a5:77:0a:ca:29:5f:ad:9e:68:ba:fd:7e:51:
9c:13:12:64:12:36:ab:89:f7:a3:82:70:d3:04:0c:44:a0:8c:
b6:da:be:63:ed:f4:b0:4e:3f:33:f6:03:07:f9:9e:36:10:1b:
da:65:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:05 2025 by rpki-client