Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
File: KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft (raw, json)
Hash identifier: LZDD2M0zl13P+6ssKzlACVsbJ5SzSGRSKahH/e7UFJ0=
Subject key identifier: DD:A5:0C:9A:31:58:95:70:A7:B5:E0:82:5B:B3:8A:57:42:32:F4:00
Authority key identifier: 2A:03:FC:C0:40:3C:C1:40:AC:17:CC:94:AB:F6:4B:A7:19:54:E7:FC
Certificate issuer: /CN=2a03fcc0403cc140ac17cc94abf64ba71954e7fc
Certificate serial: 0199FB7C827F3084C53B54441D3F73DD3871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
Manifest number: 67
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl (hash: +LtyiS6yYq0xCYR2c34s2CWWvaZ/2vJ95rreLOQ63wk=)
2: j8yR2SwKtsWVLSNz7q_UM4Rt1zM.roa (hash: SRAkp7Ly8eQqtuMXaM0/J+PtXueSbryqz6yBP5HCAks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:82:7f:30:84:c5:3b:54:44:1d:3f:73:dd:38:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a03fcc0403cc140ac17cc94abf64ba71954e7fc
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=dda50c9a31589570a7b5e0825bb38a574232f400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:81:54:c8:ac:5b:db:77:d6:95:1f:bd:03:
fa:89:c3:4e:f8:36:74:85:d7:67:8a:f8:20:73:e8:
40:fb:b7:d2:d9:60:33:fb:e1:6e:a4:73:ff:af:57:
c6:ea:56:f3:81:01:00:00:07:e0:e8:43:2d:ec:50:
b0:aa:53:52:e3:4d:f1:00:cc:ea:e3:8a:93:bd:ef:
f7:4e:b1:80:84:b2:a4:0e:0c:a0:bd:50:c4:4c:16:
1b:06:4b:f8:bb:b8:c9:6d:3d:e1:b3:a9:df:78:40:
06:de:9b:8e:b4:12:b3:02:92:9d:0e:3d:e9:d3:60:
d0:0f:17:96:13:61:a2:bf:84:7c:1b:28:1e:b7:b4:
8a:34:fb:e6:98:9d:f2:60:8c:9e:d7:e8:9f:99:fe:
e9:fe:b6:56:97:14:da:b4:f5:f5:c5:bd:f0:ea:35:
c7:ad:49:86:7e:53:e3:30:b1:86:e0:73:1d:c6:75:
2f:f0:43:8e:bf:d0:0e:aa:2c:cc:b2:5b:91:6e:4c:
08:ae:31:ad:75:85:a1:75:53:1d:03:c3:b0:9d:21:
74:00:77:36:58:99:54:9d:16:22:3f:40:d4:1b:41:
ad:77:b2:6c:83:93:12:4a:e1:ea:53:a6:4a:76:1e:
eb:73:d0:d6:ad:5b:92:8f:04:a2:a7:93:c6:1d:b4:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A5:0C:9A:31:58:95:70:A7:B5:E0:82:5B:B3:8A:57:42:32:F4:00
X509v3 Authority Key Identifier:
keyid:2A:03:FC:C0:40:3C:C1:40:AC:17:CC:94:AB:F6:4B:A7:19:54:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c9:cd:89:7b:f1:ad:58:ea:67:be:7c:65:11:2a:eb:42:cf:
a3:d7:48:b3:37:86:1b:19:db:60:16:37:dd:86:02:9c:75:70:
ec:c2:a0:07:7e:05:e6:2e:3e:4a:b1:87:c2:f5:b2:86:df:0a:
95:f9:43:8e:1a:87:2b:b6:87:17:91:ca:b7:d0:68:f3:2a:15:
dd:0b:15:17:4d:44:71:48:99:35:1b:1c:96:d8:8c:f7:b6:97:
7a:77:66:8d:81:10:91:ce:ff:0b:71:63:c8:38:56:02:8c:22:
c9:29:07:28:9f:22:09:79:b3:1a:99:46:d4:38:8d:5d:e8:fe:
b7:02:c7:c7:d3:1a:ac:43:e8:c9:cd:50:69:aa:30:08:b9:cd:
dc:de:55:1c:a7:78:b8:55:01:53:19:94:a2:c0:26:58:e8:55:
eb:1e:8a:4a:e6:29:de:73:28:fb:35:a9:d0:c7:27:cb:13:6d:
35:68:b2:f0:4b:96:16:e6:29:d3:f6:93:f2:56:3d:e7:52:0f:
52:fe:e4:3f:92:ad:05:83:87:0b:6e:6b:d3:68:4c:ba:38:10:
a0:d8:86:ca:be:5e:f1:0c:ba:b0:c7:b3:57:c1:37:56:0d:56:
80:56:6d:87:ec:5d:ce:a8:07:f3:8e:2d:7f:d8:41:cf:7a:25:
26:cf:1e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:35 2025 by rpki-client