Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
File: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft (raw, json)
Hash identifier: 8AdvQJN7+K4MrVZPI4iXPXVAQ1J3WKeh9DbHIn+HXAs=
Subject key identifier: 93:ED:39:47:6C:11:A5:6F:2C:B5:D4:A4:DE:03:B3:69:EE:04:96:46
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 0199FBEB4494EDDDE80345A5C3B118615984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
Manifest number: 0B81
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: Gxa8ZTehusQ__zJKE-EIDPUx7f0.roa (hash: D3bg8s9LSpHww0XiOamb2fTNkB0scUvbSEDIBYdOll4=)
2: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl (hash: JusPYKSbUvbIAs03nfT6SlEglfHn4MSbdO7Ya2rDqO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:44:94:ed:dd:e8:03:45:a5:c3:b1:18:61:59:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=93ed39476c11a56f2cb5d4a4de03b369ee049646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:79:99:c9:39:4e:d8:18:e7:fc:1f:b7:b9:
d4:ce:c8:b0:05:99:26:e5:ad:1a:93:ef:0d:db:e0:
ee:eb:43:ea:db:f2:60:41:b6:f7:3d:68:13:e2:a3:
5c:c7:9d:2a:a8:55:e7:a3:cd:f2:da:e3:85:4d:bf:
ca:94:23:c8:a0:19:d8:0b:b3:97:6c:a1:e3:3f:c0:
44:b0:b9:c8:81:b7:10:46:59:88:b9:8f:83:44:d3:
c2:cb:30:87:e8:c1:cd:29:3c:ec:69:cb:8b:57:1d:
07:9c:31:4c:7f:ee:6b:06:3d:9c:9b:25:7d:10:07:
53:db:a8:ed:fc:b9:8b:a5:00:c0:7f:ce:1e:32:92:
c5:4a:a2:e5:af:51:ce:86:3a:f8:52:a1:8a:be:d2:
35:5c:3e:ea:fa:5c:86:85:e9:59:6b:a6:40:8a:a3:
30:37:5d:6d:f7:e2:44:63:77:d0:af:2e:d4:4d:a5:
e0:48:e7:ef:3d:3a:1f:48:9a:69:9b:02:c7:7a:62:
85:8b:55:4b:0a:67:43:f6:89:39:55:85:a8:10:92:
94:18:7b:44:1d:04:df:26:c2:97:8e:7a:2c:a8:32:
d6:27:17:53:49:0a:7e:89:2e:db:d8:ba:e1:5b:06:
cc:c1:f4:cc:a1:4d:9b:04:40:38:a4:0b:90:50:99:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:ED:39:47:6C:11:A5:6F:2C:B5:D4:A4:DE:03:B3:69:EE:04:96:46
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:59:15:28:c5:3f:9a:18:21:63:76:3e:bb:bd:d6:99:c5:7c:
7c:85:ce:55:9a:2c:4c:8e:40:40:dc:42:05:15:1e:1f:1e:27:
27:9f:3f:27:b5:fd:47:64:f2:6d:82:d6:0b:10:a9:b9:04:9a:
18:71:a2:e6:b8:96:00:c2:43:1e:3c:85:a4:91:12:04:25:05:
38:05:06:25:da:7e:71:98:47:66:d5:db:4a:49:ad:fe:4a:81:
02:13:26:24:21:48:92:fd:24:4a:26:9a:7f:65:d8:92:3f:97:
6f:b9:4c:45:6d:e1:41:a3:14:0c:11:e6:41:4f:ef:aa:a3:9c:
b8:d4:09:f3:c4:78:62:0b:22:d6:8b:d0:36:60:e1:ba:d0:74:
09:ac:32:45:cc:f6:24:ac:66:dd:87:36:3d:a9:69:d7:e0:a1:
59:6b:28:45:80:a3:9e:bd:97:17:37:0b:27:53:83:ce:d0:ba:
8c:e8:b6:a1:3d:ea:03:4f:14:d6:3f:b0:83:64:ef:bf:ca:54:
52:c2:09:f8:a3:db:e4:f8:f9:ed:5f:dd:cc:7b:eb:ea:67:57:
23:0a:8e:58:c1:06:0c:c7:8f:72:5e:dc:d4:3a:8e:ae:c3:62:
a9:44:5e:2d:e9:05:39:ae:c4:39:1e:28:d5:16:10:98:53:9e:
83:62:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:07 2025 by rpki-client