Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File: KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier: 5A5N8t5mKb34tcE+uUxSX6LhMU3ktwtjr8OFrFwHIK0=
Subject key identifier: 82:07:28:1A:11:BA:3D:77:AC:5B:9A:9E:08:88:3A:13:0A:69:70:DA
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer: /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial: 0199FD6B13323F29D0872DC33F1B7E3C1BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number: 06D5
Signing time: Sun 19 Oct 2025 17:01:16 +0000
Manifest this update: Sun 19 Oct 2025 17:01:16 +0000
Manifest next update: Mon 20 Oct 2025 17:01:16 +0000
Files and hashes: 1: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (hash: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=)
2: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: wkEYaOa88Y5NXGLR3rRxLgcFsnXdfjhUTXibP4OPuMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:13:32:3f:29:d0:87:2d:c3:3f:1b:7e:3c:1b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Validity
Not Before: Oct 19 17:01:16 2025 GMT
Not After : Oct 20 17:01:16 2025 GMT
Subject: CN=8207281a11ba3d77ac5b9a9e08883a130a6970da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:3b:05:84:09:81:0b:fc:6e:d1:f5:6f:b6:
6a:ef:5d:9c:fb:f0:1a:d3:c3:6f:88:2a:41:42:85:
8d:bd:ac:ef:80:0e:db:0c:45:56:73:1e:cc:dd:c0:
28:cc:7e:8f:0d:9d:de:cb:a4:e5:f6:7a:4d:c3:0f:
67:b1:0f:d2:1e:36:ed:0a:b8:c2:fc:62:92:dd:c0:
18:23:2e:8f:44:74:3c:ee:4c:9c:6c:e7:00:98:bf:
73:41:51:79:e8:e5:78:97:60:2e:cf:fb:03:ef:40:
37:27:b1:4e:9e:34:47:de:fc:f1:92:5a:52:4a:23:
84:90:4f:71:5a:33:58:ce:f0:d1:78:57:9a:36:7b:
a2:11:df:1c:2c:9a:87:70:54:4d:b6:bd:83:b9:b8:
dd:92:af:00:f1:de:40:c0:ca:ed:df:a0:6e:23:36:
41:be:c3:3a:73:1b:f7:6b:77:10:25:62:5a:b3:00:
5c:02:fb:92:a4:60:19:cf:9a:30:eb:7d:71:6c:34:
84:c4:e1:da:54:d5:15:84:79:a4:db:21:b1:5e:90:
53:b1:04:b7:b8:29:97:76:1f:1f:14:d7:95:1a:d6:
91:15:c8:00:9e:b6:e5:e6:98:fa:56:61:73:f7:82:
b9:fc:a2:09:21:3e:ac:f5:e5:17:f2:d3:20:1c:0b:
ba:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:07:28:1A:11:BA:3D:77:AC:5B:9A:9E:08:88:3A:13:0A:69:70:DA
X509v3 Authority Key Identifier:
keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:34:28:ec:ae:2b:ab:76:86:a9:01:b8:52:26:b0:79:05:15:
f5:b1:96:83:81:de:35:0d:68:1a:54:64:09:ea:35:61:66:96:
13:0e:71:61:1f:fb:42:6d:30:e2:ed:fe:ed:0a:ab:9a:63:fe:
54:06:00:f4:ee:6f:af:25:09:45:b0:af:26:02:2a:eb:41:be:
ee:3f:5f:1e:e5:21:31:8c:c1:d7:6d:69:41:bf:7c:d0:1b:c2:
1d:94:c1:f0:48:a5:20:c8:04:80:6a:f5:12:ad:70:20:58:95:
22:6f:ae:47:48:e7:1e:e9:79:95:0f:81:c1:be:ad:32:68:b0:
5c:9c:55:47:a0:b5:b9:9d:62:80:5b:a3:6a:73:3e:0d:2f:a7:
49:31:93:13:6a:3b:eb:e3:c1:d7:ff:3f:57:db:0e:da:6b:39:
7b:e2:29:d8:81:ab:a9:2c:eb:ca:09:e1:ee:c2:71:57:43:ed:
64:fc:3d:7e:60:34:b9:50:00:9a:df:59:a6:b3:ae:ec:21:b3:
73:0d:80:5f:10:6c:06:bd:4c:4c:4b:39:f3:8f:15:ce:df:1b:
d5:0c:ab:09:37:42:c0:60:c0:d6:9e:56:37:96:ca:33:d3:22:
ad:06:9a:18:80:8c:38:74:1e:3a:f7:0d:ba:c1:c0:6f:55:a2:
a6:2f:57:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:09 2025 by rpki-client