Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: rp9ZLkqZIgVQtr3dfcIfFKdg9JfpMDeUvNQRkbKp52Y=
Subject key identifier: 14:74:C9:E8:E8:61:8B:06:C9:3B:CF:15:91:A4:31:F0:91:09:E9:B7
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 019A4D3CFA72D51F92D24E81AF2CE7E0E980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0D41
Signing time: Tue 04 Nov 2025 05:00:33 +0000
Manifest this update: Tue 04 Nov 2025 05:00:33 +0000
Manifest next update: Wed 05 Nov 2025 05:00:33 +0000
Files and hashes: 1: 8nLoMcIcsiOT94ggaJIYQQl2oRM.roa (hash: qT9FeEnewJoNeBMjY4zbOI1Gsyx72sYu0a6uEXjvmkY=)
2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: IyhwDTRTxq1zAPJgFpbPU3gl56eEd+urpt35Kt6KfmY=)
3: vT6MkqafH5VOMm1ZMgN21UjQYFs.roa (hash: dIHvBtvVugb4PHXdIHdFzDigve4LKcNg9oX/bIFSdDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:fa:72:d5:1f:92:d2:4e:81:af:2c:e7:e0:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Nov 4 05:00:33 2025 GMT
Not After : Nov 5 05:00:33 2025 GMT
Subject: CN=1474c9e8e8618b06c93bcf1591a431f09109e9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:2f:f7:92:e8:2d:5d:8a:cb:42:65:19:fd:
30:b1:c5:27:26:1b:4d:c8:ec:4a:42:a5:1a:8b:45:
56:ae:d1:ca:be:26:4d:d8:5f:70:52:1b:49:77:82:
ed:c9:51:0f:78:f7:53:61:17:a2:83:a7:73:a0:60:
3e:6d:5d:60:a0:79:79:d8:b8:95:28:93:2f:95:35:
ae:59:84:6d:37:5f:a1:05:72:b4:70:53:5d:5f:f6:
3e:11:43:53:42:91:99:f6:97:db:05:11:ae:e1:91:
18:5a:36:d4:9c:35:59:60:44:94:c3:e6:be:43:e6:
fc:74:58:97:79:a6:7f:7e:e4:d4:31:10:32:ca:9d:
2b:37:63:7c:cc:bf:c3:fe:29:90:61:b0:06:68:ab:
7d:78:ca:ed:7a:c5:8b:31:f4:74:98:a6:8c:1e:2d:
9b:56:02:ae:6b:ac:ef:db:01:da:2e:39:37:69:5a:
d9:6e:41:04:b4:e7:dc:b4:fa:6f:e7:72:f3:d1:5d:
75:f4:bd:04:6b:6c:e7:a8:07:db:10:4e:de:9f:1d:
96:4a:64:7f:ea:99:f6:86:24:f1:db:da:ae:2d:22:
b1:fb:bb:4e:37:60:67:d8:e7:da:5a:5c:f6:62:63:
74:d6:04:fa:34:59:48:b8:50:ce:7e:17:57:be:f5:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:74:C9:E8:E8:61:8B:06:C9:3B:CF:15:91:A4:31:F0:91:09:E9:B7
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:00:a6:2f:98:e0:c7:29:3a:5d:93:ad:dc:c2:4c:46:9b:08:
af:47:5a:6d:30:b8:a9:f1:1b:53:52:fa:f9:58:52:b7:85:67:
47:48:43:67:3f:f4:a9:e1:6b:9e:fd:f9:3d:8b:37:bb:1d:c5:
46:cf:8d:59:da:4a:c8:05:95:f6:a8:ef:1d:44:2c:ae:06:16:
ea:9e:d5:3a:83:a1:7d:a9:73:af:68:50:63:12:44:fe:1f:4f:
aa:16:c0:85:58:2e:de:91:18:69:b0:38:8c:60:35:29:43:63:
fd:26:9f:5e:6b:85:08:74:9c:8b:14:cb:c6:97:29:84:b2:c8:
75:40:5c:dc:83:d7:87:df:bc:40:6b:bd:e4:56:b9:e6:26:6d:
9a:9c:be:fd:29:89:91:70:14:90:3a:53:3b:a5:8d:04:b2:ad:
d2:f9:12:58:a3:27:43:e1:05:44:5a:27:d0:36:76:ae:40:a0:
86:05:92:70:9f:23:1e:ce:1e:ee:51:c4:34:86:61:ff:29:e0:
f7:93:15:e0:da:4c:38:0b:76:2d:38:b7:4c:ea:55:2c:88:88:
c4:92:e3:86:39:cb:68:ba:e4:77:c3:75:f4:bb:b9:dc:20:b6:
96:85:4f:84:30:01:4e:a5:6b:50:a0:98:57:d9:92:7b:1a:65:
ed:73:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:00 2025 by rpki-client