Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: uDNdnDjU4kX7YNjFxL5svrjrV6RKXHbFbm5rOXEOzxM=
Subject key identifier: EA:FF:BA:B6:18:08:96:19:B8:C3:7D:51:D4:1B:E5:55:7F:64:81:62
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 0199FD33DF1870CA52D08D3BF02EACAC2C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0AE2
Signing time: Sun 19 Oct 2025 16:00:59 +0000
Manifest this update: Sun 19 Oct 2025 16:00:59 +0000
Manifest next update: Mon 20 Oct 2025 16:00:59 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: saHs+K9FMTp726ZVEjS70diA2lQjHrWUgm6gS4HvgEI=)
2: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (hash: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:df:18:70:ca:52:d0:8d:3b:f0:2e:ac:ac:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Oct 19 16:00:59 2025 GMT
Not After : Oct 20 16:00:59 2025 GMT
Subject: CN=eaffbab618089619b8c37d51d41be5557f648162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:63:89:41:5c:55:c9:4d:63:cf:e5:72:19:
9b:89:0e:64:4a:3d:55:0e:a7:e8:64:57:4f:88:2d:
ac:b3:09:ad:76:b9:95:41:e7:fe:4e:c7:35:a2:6d:
84:58:de:f7:f0:75:1d:52:95:76:1e:7a:ac:ce:96:
a5:7e:ff:cd:17:14:c1:4b:af:75:27:26:64:a1:0c:
03:3d:26:40:e6:53:81:a9:d9:e3:e2:3e:e8:8e:3c:
29:75:55:b1:5b:7d:89:3d:2a:0a:40:74:53:62:4e:
dd:80:8e:5f:1e:af:2f:f8:bc:05:89:1b:61:d2:c7:
39:2c:fb:5d:0e:58:2e:74:c1:5b:9a:f8:c4:6a:82:
da:83:2a:05:60:09:e6:d6:2a:24:eb:b0:14:ab:52:
16:63:9d:24:9e:1c:12:9f:35:1a:92:8c:d2:82:dc:
59:7c:b3:da:4e:32:fb:3a:32:f7:7d:dd:66:01:be:
23:4d:b2:11:65:6c:11:f3:2b:9e:99:48:ab:68:72:
c9:8a:11:18:c9:2a:45:7b:64:40:5c:d2:df:6f:b7:
45:fb:23:21:4c:bb:25:bf:7c:ca:cf:3a:6b:c7:a1:
53:7f:19:51:a5:ce:9c:c3:12:21:6c:da:71:87:d0:
52:84:55:10:e7:fb:2b:3d:2b:a4:50:d2:f2:5a:f3:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FF:BA:B6:18:08:96:19:B8:C3:7D:51:D4:1B:E5:55:7F:64:81:62
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7f:7a:08:ca:ec:03:86:5d:eb:52:81:43:ed:a7:a9:09:4a:
47:7f:ab:69:ed:c8:bd:2d:10:d5:ae:e8:8c:14:09:c8:af:0f:
72:9f:e7:78:75:c3:01:35:38:3f:50:02:78:eb:09:eb:2c:55:
c0:80:e4:1f:3a:a1:95:12:c9:0e:eb:85:c6:70:09:07:6a:bb:
52:9d:05:71:6b:57:2f:02:3c:7a:fe:e2:c9:c9:db:39:96:34:
73:24:c6:fc:a6:85:ad:16:5c:3c:74:b6:87:34:48:7d:aa:a4:
48:50:b7:bf:37:7b:54:ad:6c:0d:7b:de:62:ed:79:13:77:02:
7c:98:fb:d8:87:d7:65:67:7e:9a:69:f3:c6:de:60:55:d2:eb:
78:04:1c:68:2e:0b:2a:c1:67:a4:4f:c0:c2:cf:e2:26:4a:2b:
dd:b0:15:78:ec:a6:ac:c1:b1:02:76:96:93:61:ca:b8:a3:5a:
34:8b:ec:bd:79:f2:ac:c9:f5:1d:ff:bb:a4:85:0c:86:77:5d:
ed:76:ad:16:b0:f0:09:3f:10:51:f3:d1:ce:33:1c:85:59:2b:
ee:b8:c4:6a:03:ca:73:16:4e:6f:89:72:b2:56:49:2d:d8:a6:
01:52:7f:31:3a:b6:dc:99:04:90:56:3b:2d:8a:00:1c:15:e9:
28:a4:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:35 2025 by rpki-client