Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: UThnI3JmCv4UJLuUpWasvDGMd0RvrYCi1yCJ7eo+i5o=
Subject key identifier: 6A:C6:24:D1:A1:CE:52:62:9E:DF:F8:E5:53:B2:78:97:53:BD:44:C5
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 019A0110CD53916A243EAD709DF7594092FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 0AC4
Signing time: Mon 20 Oct 2025 10:01:09 +0000
Manifest this update: Mon 20 Oct 2025 10:01:09 +0000
Manifest next update: Tue 21 Oct 2025 10:01:09 +0000
Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: 2jcZhsl0/nNeU4+5108/plV56IUdr3naRA0OOdK5AnU=)
2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:cd:53:91:6a:24:3e:ad:70:9d:f7:59:40:92:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Oct 20 10:01:09 2025 GMT
Not After : Oct 21 10:01:09 2025 GMT
Subject: CN=6ac624d1a1ce52629edff8e553b2789753bd44c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:cc:1e:68:2b:29:c8:0d:f6:c9:30:48:67:
6e:8d:03:03:b8:82:f7:45:fa:cb:f3:2e:c5:32:19:
de:34:b5:09:3f:7b:0d:35:0b:77:f1:f4:d6:28:4d:
f1:a4:cc:c4:9b:b6:b6:93:d4:6e:dd:1e:86:2f:71:
4d:15:f5:d1:69:c5:f9:bf:7b:b7:83:3e:9d:73:80:
ce:21:59:50:69:18:9c:1c:c6:8b:05:77:f8:6b:c8:
97:2b:62:ee:35:f9:b9:9a:6a:e4:a9:e4:f8:b4:e8:
5c:e2:82:25:c1:ef:b8:59:fd:ff:ef:98:49:55:db:
41:bd:57:46:48:36:00:10:3d:c0:55:f9:ef:88:e2:
0b:65:3e:a9:a6:70:7d:fb:c1:f6:9a:af:57:16:a0:
ee:31:52:cf:81:04:28:83:1c:47:6c:8d:4a:fc:49:
00:97:90:f0:3d:42:f3:9f:f1:7c:94:d7:8a:bd:21:
b1:3c:e2:d5:c0:b5:75:1c:f9:c2:26:b2:a7:c1:79:
17:af:d2:55:25:7c:24:6d:2f:f8:77:6f:f7:c2:89:
4d:b3:a8:63:ed:63:80:53:f4:93:de:10:ce:65:9a:
08:3d:3e:92:59:2f:89:4f:64:ec:47:6a:11:ac:4c:
1a:2a:45:a1:5a:70:af:f6:e5:ab:64:04:9f:89:75:
99:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C6:24:D1:A1:CE:52:62:9E:DF:F8:E5:53:B2:78:97:53:BD:44:C5
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:21:ba:28:23:53:41:fd:9d:09:12:43:89:bf:69:17:69:74:
36:2d:06:51:43:6f:c7:7d:85:bb:19:99:df:02:1a:ca:da:e9:
3a:bd:d7:b2:a7:58:18:2c:f8:50:b5:39:53:6e:74:e8:44:90:
ce:ec:3a:a3:e2:90:bf:c5:ed:d8:fc:1e:13:a4:14:bb:b6:5e:
ba:7d:a2:8f:66:20:9d:f5:13:2e:b0:08:1b:46:fc:68:b9:c4:
0b:44:41:02:48:16:88:eb:88:c9:48:7e:44:0b:f1:05:2d:6b:
de:f3:51:c4:27:6d:4a:0b:eb:68:0b:42:72:67:c8:fc:79:43:
57:22:4c:17:ce:85:d8:92:d4:ec:b1:8e:67:ea:72:b2:73:b3:
ca:de:02:3c:d8:ab:54:e2:64:8d:5b:b6:48:6f:42:c2:40:cf:
79:fd:ee:11:1a:2b:be:5b:ba:7a:f0:08:5b:31:67:4b:c2:0b:
3a:0c:02:55:4f:ac:28:2e:a3:67:8c:fe:a7:e6:36:17:6c:6c:
6a:1a:dd:cd:29:64:5e:ca:d9:46:1f:11:ec:66:81:69:82:3e:
d3:13:98:5a:85:98:e5:66:fb:fe:08:c9:54:36:cd:c7:90:30:
7f:e5:bd:09:3e:bb:9b:75:e4:d5:ab:0b:38:b7:7b:a5:d5:14:
63:c8:a7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:32 2025 by rpki-client