Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File: KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier: MTV6UCk+rdeZwZVJ8m8kHDdpF4UKZe/cG2gbTBFzdug=
Subject key identifier: 39:2A:B8:8D:2F:4A:50:5D:51:33:97:90:D4:76:84:FE:DC:23:62:4A
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 019A4F62AE1BEC9B1F2119B0AB230DB7A6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number: 0F3D
Signing time: Tue 04 Nov 2025 15:00:58 +0000
Manifest this update: Tue 04 Nov 2025 15:00:58 +0000
Manifest next update: Wed 05 Nov 2025 15:00:58 +0000
Files and hashes: 1: 2OE08r0HVaPkUyQCfPYa18KfRVg.roa (hash: oPUY4tycdurJmN4YFVOJW3ptRzFs9QL2EBmNw0lcLg8=)
2: 4tkEYNCSDVFSV4yN09tQS4H9ll0.roa (hash: DFOMcjMeVbK8Ftp6RD/k3U9BGqgzFs3va65G0d6TnJU=)
3: 8L44IrkkvnWwO7YzdGP90TGDjSg.roa (hash: CEFaAsOLSJVrCdoCjPllcGxEqTE9RA4Tw9wSIQ0mmME=)
4: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: G3SFKgtveqNvR36/CD0Fg8oBvxsINL5UcKnF8CTg50s=)
5: szTswhDYGFZLNq2gmPhOGNU3JHY.roa (hash: mz4tdadkMvHnGNpBkk3KejTx0a499gLsvzCSSSwliEU=)
6: tG9g7Co1XH6U8tZyoXMC-RjzpsI.roa (hash: f5hLHvCO22cXuPn8MfVWI6zy/RfS3YcwLYdVmDvuy/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ae:1b:ec:9b:1f:21:19:b0:ab:23:0d:b7:a6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Nov 4 15:00:58 2025 GMT
Not After : Nov 5 15:00:58 2025 GMT
Subject: CN=392ab88d2f4a505d51339790d47684fedc23624a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:eb:4e:af:8f:64:d0:d3:dc:44:ab:0c:c9:
4a:c1:6e:00:18:93:21:9f:b0:6a:c0:da:2d:5b:e2:
38:ea:32:e0:36:ee:36:6e:46:6a:28:6e:dc:d0:6b:
d4:1b:85:e5:d4:94:5a:36:0b:a5:8e:09:70:d9:c5:
d1:bc:71:13:77:57:ea:4d:8c:9d:08:36:6e:9e:8c:
a5:82:a9:f4:9c:73:9c:11:22:6a:be:0a:03:b7:f2:
44:fb:5a:c3:80:11:7e:8a:95:1c:52:ee:c9:23:7d:
ea:3e:a3:4b:7d:b9:2e:5a:bd:aa:e5:e5:ad:99:bc:
98:e8:c0:1c:e8:bb:cc:ef:d7:4d:d7:ca:1c:c5:3e:
4d:30:e9:de:b2:6e:3e:3d:47:76:9a:ef:82:a9:5e:
0b:e7:8f:0a:60:79:47:70:3c:bb:f4:21:f7:80:3d:
1b:51:e3:66:50:df:8e:e0:42:25:db:76:4f:75:59:
0f:b9:61:5e:a7:17:80:ee:24:81:aa:f1:30:c9:b8:
50:8b:f0:58:94:9c:33:c2:5b:a5:82:49:c3:cb:b6:
78:b7:7c:81:e4:69:df:66:ce:77:74:30:88:99:0b:
f7:97:db:6b:c1:2c:b8:0d:f4:d7:09:0b:0c:19:13:
6e:b4:c9:4a:81:7f:fa:ae:7f:01:e8:df:8d:7d:7d:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2A:B8:8D:2F:4A:50:5D:51:33:97:90:D4:76:84:FE:DC:23:62:4A
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:aa:67:45:f3:de:4a:2f:d2:b1:ba:20:d5:73:44:11:d7:12:
20:37:f3:a8:b3:40:67:16:83:4e:a6:e8:93:28:cb:f2:f3:51:
70:13:19:62:48:fe:9e:97:d4:1b:8b:92:e0:a8:67:cc:c3:19:
92:fe:5b:83:56:13:0b:cb:23:c1:96:15:a4:9c:bd:5e:28:b5:
df:d0:b5:b8:38:25:69:7e:a8:aa:b8:56:78:08:fc:6b:e9:82:
ec:b9:2f:2f:66:ea:ca:cb:8f:81:57:92:1e:5d:8a:67:79:1b:
24:a1:2b:f9:e6:45:d9:99:dd:7c:34:6b:be:d2:81:ab:61:b8:
a9:67:52:fc:53:50:d1:86:35:bc:6d:04:0d:91:f9:33:d9:57:
9b:d2:77:96:8a:4e:32:51:24:fc:8b:00:53:8b:8c:e1:77:82:
03:7c:c3:a0:a4:4b:cd:bc:d4:52:f1:8a:37:27:ce:f2:4d:35:
e4:df:5d:ee:d0:7f:59:1f:23:8b:25:98:82:ea:d4:39:f5:92:
4e:b0:7f:e0:79:86:3a:a1:19:7b:2a:ae:64:8c:92:84:a1:1c:
f5:9d:32:df:c3:ba:12:3c:14:68:76:a9:5d:62:59:75:90:65:
83:f3:dc:04:1a:53:b1:57:73:12:80:98:f6:88:97:16:e6:42:
3c:24:9c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:45:20 2025 by rpki-client