Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
File: KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json)
Hash identifier: /gXs+8Sdxm0Dke3JJbKUj2+ynBFyqj7gFck80SJv/RM=
Subject key identifier: 7C:93:9D:84:71:4C:B4:99:33:F4:02:0C:D8:AA:D4:AF:01:7D:73:4D
Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
Certificate issuer: /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Certificate serial: 0199FFC72F32F63DA9C8854EB96BF9CA5B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 04:01:07 +0000
Manifest this update: Mon 20 Oct 2025 04:01:07 +0000
Manifest next update: Tue 21 Oct 2025 04:01:07 +0000
Files and hashes: 1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: OX8UQ9PL5kTsRKEOoSlrG2ensVxzZBGF0hDHIP72ni8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:2f:32:f6:3d:a9:c8:85:4e:b9:6b:f9:ca:5b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Validity
Not Before: Oct 20 04:01:07 2025 GMT
Not After : Oct 21 04:01:07 2025 GMT
Subject: CN=7c939d84714cb49933f4020cd8aad4af017d734d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:53:79:bb:ab:a2:a0:9e:0b:06:0c:8b:df:
df:86:d8:67:ab:0f:f9:02:b6:50:23:ae:c7:d4:d8:
f6:3b:32:d3:83:00:fa:32:e5:6b:a3:d4:62:42:c7:
6b:aa:dc:16:20:24:fd:cf:ff:71:83:bf:aa:56:a6:
7a:f3:d5:99:b7:61:87:72:cb:82:2f:1c:b3:ef:76:
52:c4:f0:97:6c:60:46:32:06:5b:22:4a:61:96:ff:
0e:4b:01:ec:ac:fa:ba:30:1a:06:c9:01:a3:b5:44:
5b:d1:9e:6c:c1:54:d9:b2:e3:94:bf:1b:66:cb:57:
9a:49:3a:67:41:f9:63:48:2b:df:1c:58:b5:91:cc:
40:6c:49:c1:39:9c:00:3f:e0:95:dc:51:0c:56:f8:
b4:53:0d:e6:5a:65:90:83:f7:d5:49:36:37:b9:92:
a6:12:e2:87:c7:88:bc:00:07:b6:99:32:24:2e:81:
9a:7f:7f:01:c5:2c:c7:d4:1d:67:48:7f:5c:ec:10:
4a:ae:0b:1b:e5:34:ba:03:56:a9:1f:09:82:6e:d1:
e6:a9:fa:c7:03:cc:c0:f8:e9:50:49:77:e4:95:19:
85:96:cc:a6:24:36:a6:45:86:99:e1:5b:df:b0:5e:
03:8c:a5:43:cc:ad:7c:85:f7:fe:2c:4d:b8:65:03:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:93:9D:84:71:4C:B4:99:33:F4:02:0C:D8:AA:D4:AF:01:7D:73:4D
X509v3 Authority Key Identifier:
keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:12:0e:b1:79:f5:29:87:d2:f9:b5:3f:c7:25:18:a3:1d:05:
31:58:bb:1f:1e:18:f6:70:11:0d:65:a4:f4:a2:9c:d5:34:34:
17:09:0a:04:96:95:e1:2f:41:d5:08:cb:4e:4f:d2:61:ec:aa:
a7:d0:33:ad:fa:36:55:26:df:08:25:a2:3a:f9:fe:5d:ac:78:
8d:0e:dc:24:69:6f:d6:f3:93:4d:07:16:b4:02:03:be:3f:75:
b0:f1:00:40:c6:ff:fb:d0:69:1c:e5:84:08:1f:1f:13:f5:65:
ad:37:2b:95:85:93:83:c1:9f:8a:ed:86:00:f5:8c:c8:dc:8d:
ee:78:27:3e:03:59:26:6d:46:49:9b:ff:1c:5e:cc:7c:d3:35:
54:45:d3:e2:b3:47:92:8d:b3:9e:d0:15:d0:89:27:fd:24:9d:
cd:c8:18:c1:e2:0f:cf:9a:a0:3e:1a:c3:14:30:1f:ab:0a:bc:
4d:a0:90:32:4f:95:ff:58:1e:d6:db:14:6e:0d:0e:8d:c7:5e:
30:5c:dd:ce:16:68:04:dd:1b:07:6e:e2:a4:cb:8d:4a:63:65:
de:40:e5:e5:e9:ad:52:fc:c1:05:da:6a:a9:34:0f:77:9e:3f:
34:7b:71:38:9f:a8:c8:da:69:10:da:e1:89:74:9f:3d:50:34:
fe:41:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:14 2025 by rpki-client