Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
File: KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft (raw, json)
Hash identifier: f9RmJhvWfyxL/W4CFUP9ojRZEQ7Y42Uk6MIakbS96fw=
Subject key identifier: BD:0A:DF:B1:3B:4D:2D:A4:22:A5:DE:5E:98:02:9F:CA:F6:D2:B3:DC
Authority key identifier: 29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
Certificate issuer: /CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Certificate serial: 0199FCFD92B77A3F52070202DD825D3B3BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl (hash: x7S1SUczQosfE3AgD7vKC5U3HQocMDRTmsFlUqrnJJo=)
2: hIS7p8oBVfka5-8RFV0HubayIdE.roa (hash: F5TIegvY+JSm5ZTBtrT5T05mvONHoneGNZ8NfzaAUc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:92:b7:7a:3f:52:07:02:02:dd:82:5d:3b:3b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=bd0adfb13b4d2da422a5de5e98029fcaf6d2b3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:75:9d:e3:d9:84:fa:6b:16:51:e6:d5:b9:
96:3b:b8:92:a1:55:f0:ad:67:b8:4b:85:81:aa:cc:
af:9f:12:c6:a8:70:8b:b0:1f:8d:57:51:56:49:c5:
44:87:f6:0b:7a:24:89:e9:6b:01:61:25:28:b8:24:
2b:d1:84:30:cd:29:3e:97:04:4a:e1:b3:e3:30:0e:
c0:3a:13:2d:b6:6f:73:f5:80:e0:28:7f:3c:bc:d3:
1e:67:26:69:3c:a2:1a:8c:fc:0c:88:db:cd:d8:e6:
bf:41:83:ae:ac:26:c5:4a:5e:0a:5f:9c:78:d1:b9:
ea:46:47:b6:7e:6a:b5:0e:b0:9d:e6:9e:b4:a3:39:
eb:40:77:35:41:e7:da:4f:dc:59:40:e2:c7:c2:91:
41:d7:99:87:10:1b:c0:53:47:48:d5:19:cb:43:85:
a0:6c:02:07:fe:01:15:52:db:fb:64:e8:f5:6f:72:
d3:dc:5e:6c:c0:d0:52:96:67:b3:a0:14:c4:55:6c:
c2:b5:18:78:84:19:ac:33:62:df:94:49:c9:89:3a:
98:15:5a:7a:b8:f7:12:36:af:1f:b3:a4:8e:de:74:
c3:d5:af:c3:7a:ee:35:45:ce:ee:97:80:59:09:0b:
40:04:b7:e7:94:c7:08:db:29:4f:e6:b3:76:fa:d7:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:DF:B1:3B:4D:2D:A4:22:A5:DE:5E:98:02:9F:CA:F6:D2:B3:DC
X509v3 Authority Key Identifier:
keyid:29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:60:ed:02:f8:f7:ee:ec:e2:e4:ab:fc:17:2b:c4:3d:42:29:
7e:c5:9e:fa:4e:d4:d8:8e:ae:c9:ef:aa:e6:b2:85:ee:b8:43:
67:65:ef:60:f5:01:51:bc:1f:d4:e7:93:5c:0b:ed:f4:8d:7c:
a0:bb:f3:8f:9e:88:c1:50:b2:53:33:be:ba:1a:ee:6c:e6:8d:
77:47:06:d5:90:1b:de:8b:1a:1e:3c:59:36:1d:c1:f9:b3:3b:
69:66:68:e6:7e:80:31:b5:a1:39:80:3c:56:1f:5b:02:44:b5:
73:bb:52:af:d2:72:c8:81:c6:f2:4a:22:03:7c:d9:76:c9:2c:
af:22:83:c1:ca:18:cd:e5:44:00:aa:e9:ea:ab:cb:25:dd:69:
5a:35:8f:7f:0b:65:e6:ce:1b:ee:d1:3f:38:c4:43:9d:62:a4:
29:4b:b9:15:30:da:2b:9a:30:41:64:72:24:ee:d2:27:a9:8d:
1a:48:ca:ea:fd:6d:7d:08:bc:9a:67:c7:9b:78:49:56:d3:2d:
9c:23:61:69:3e:89:6d:17:3f:2c:23:23:c0:a4:f8:f4:e0:f2:
71:2a:5b:98:d0:89:5b:bb:61:8f:6b:5f:b9:1c:88:00:6e:39:
fa:22:69:40:92:cc:51:fe:72:7d:85:13:e7:d2:28:f2:37:a3:
94:25:12:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:28 2025 by rpki-client