Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier: qaPzHlGEXbi/tBrwEyM7HO+hH3FqzKmvDvpBX8PBZIc=
Subject key identifier: E9:53:47:D3:CC:5F:67:BF:19:6B:ED:D4:B1:BD:DC:85:92:BA:0B:9F
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 019A4E188D675F7E5243B543FF991F0ACBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number: 160A
Signing time: Tue 04 Nov 2025 09:00:23 +0000
Manifest this update: Tue 04 Nov 2025 09:00:23 +0000
Manifest next update: Wed 05 Nov 2025 09:00:23 +0000
Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: 4o+MywBygYxAtktTvD5asJztQnTArSRcwTXOMopLzpA=)
2: zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa (hash: xRdPuuQI3JcVUeXoif3h7qYjCY0yxLycmnxRLYfe7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8d:67:5f:7e:52:43:b5:43:ff:99:1f:0a:cb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Nov 4 09:00:23 2025 GMT
Not After : Nov 5 09:00:23 2025 GMT
Subject: CN=e95347d3cc5f67bf196bedd4b1bddc8592ba0b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:97:63:9a:7e:11:ff:ec:af:82:ca:ba:d3:
92:45:92:c4:3a:e3:6f:70:5e:ca:6b:8c:67:90:c5:
83:da:1c:68:0d:ab:e7:9d:7c:5d:93:ce:74:fa:71:
57:fc:5f:40:f9:c2:94:c8:7b:c0:0e:3c:65:8d:ec:
85:69:f1:8b:99:4b:4d:ef:9b:62:5f:af:4d:b9:8a:
26:10:4f:0b:f2:ee:1a:8b:3e:dc:a4:00:9a:a6:8d:
72:1f:cf:f7:0a:15:cf:0f:86:1d:85:fb:98:88:33:
37:27:0f:d7:9d:9b:04:64:0c:29:e7:24:cb:a8:3d:
55:e4:57:98:f9:17:e3:9c:d6:9c:d6:c2:08:e3:6c:
30:19:71:f6:a3:2c:1b:24:01:25:ed:9e:64:86:0d:
fe:e0:10:39:bc:ca:96:0e:3e:90:37:29:44:ad:09:
68:eb:ab:62:49:94:6a:52:c1:fc:31:08:17:42:9a:
ad:35:db:f8:14:b1:f0:10:e9:bf:bb:47:18:24:8b:
51:b4:03:d0:19:f2:29:d7:3d:3d:f8:4b:fc:94:23:
41:5c:83:4e:b7:f2:cc:0b:0e:66:e7:b9:76:39:d0:
33:72:61:10:65:e0:ec:16:5d:e9:83:22:54:c4:36:
b6:e9:b4:41:01:c9:9f:33:0f:6b:87:87:39:e5:b4:
13:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:53:47:D3:CC:5F:67:BF:19:6B:ED:D4:B1:BD:DC:85:92:BA:0B:9F
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:aa:8d:fb:81:b3:c2:44:86:c1:86:2f:e7:b8:c3:91:15:50:
e3:00:01:e3:8a:bf:30:1c:de:ed:9e:71:00:6f:02:0a:40:a0:
71:d2:b5:d1:26:57:15:d8:31:7d:18:e0:ac:99:2e:f7:ec:9c:
fe:19:4b:87:70:6c:6c:43:95:93:37:82:77:d9:57:08:5d:44:
8c:a1:2c:c3:26:ff:51:09:9d:76:b3:34:b4:fe:f4:06:a9:1b:
ad:5b:35:4a:f7:1a:10:67:43:99:1d:71:45:34:95:91:cd:00:
3c:3e:2e:80:45:6e:0e:e2:1a:9b:9e:84:ac:09:eb:cf:79:0d:
67:1c:86:32:18:05:f9:a3:9c:08:81:48:a7:4c:f3:a2:cd:e4:
92:64:2b:ef:23:23:a6:94:47:8e:7a:87:50:9c:ae:a4:e5:51:
f6:ac:c9:9f:07:2a:b0:34:5c:4e:d0:0f:0c:ce:c8:38:ec:19:
78:9c:5e:7a:cd:18:9b:a8:21:22:42:fd:c6:82:8e:3e:13:08:
50:4c:5c:5a:4b:dd:61:43:c5:8e:62:af:ac:bd:d7:9f:2b:86:
f5:d1:89:25:a8:91:0d:67:54:d1:dd:23:d8:64:15:11:80:b7:
89:91:24:da:53:be:ef:64:d3:de:ab:20:59:b4:7f:9b:fa:08:
f0:66:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:55 2025 by rpki-client