Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier: pffZIDsuIkHZayW8YP1kSe0vfwK+waMPnNj26iKC9Xg=
Subject key identifier: 63:B3:B0:9D:9E:A2:79:59:3E:26:D5:4C:02:38:D6:F2:91:53:63:FD
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 0199FC590D02F0E738C65C9C7201144456DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number: 1665
Signing time: Sun 19 Oct 2025 12:01:58 +0000
Manifest this update: Sun 19 Oct 2025 12:01:58 +0000
Manifest next update: Mon 20 Oct 2025 12:01:58 +0000
Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: 7eXbQ0Lqgyy1DFwatdB9nTysGbs9LpNbFdtoroEzYAA=)
2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0d:02:f0:e7:38:c6:5c:9c:72:01:14:44:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: Oct 19 12:01:58 2025 GMT
Not After : Oct 20 12:01:58 2025 GMT
Subject: CN=63b3b09d9ea279593e26d54c0238d6f2915363fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:84:a2:9c:79:3c:f8:59:d0:61:2a:5a:7d:
39:2d:43:08:29:dc:14:27:c2:c6:a0:a2:23:e5:81:
12:00:6c:3e:b9:20:fd:6f:08:44:9e:39:8b:45:82:
35:bc:7e:19:c5:f5:82:d9:c3:7d:7a:c8:53:de:fe:
53:cb:5b:91:19:4f:55:8c:b3:81:a2:88:1a:cb:47:
5d:fa:69:11:7c:ce:46:08:1b:3c:77:dd:16:64:a5:
56:a4:f2:8a:cd:54:c7:af:92:23:53:78:41:d8:13:
c5:8c:25:e8:25:b7:aa:27:81:8b:3d:bb:ab:31:48:
e6:2d:26:4c:7c:31:4b:02:17:1a:67:f6:3c:4d:b9:
99:1f:97:8c:2e:2d:c4:e3:37:f4:98:0a:2f:cb:7f:
11:3e:59:d0:cb:59:19:2f:b6:cc:d8:62:42:7e:d5:
76:a6:8d:80:1c:64:b8:65:f4:de:56:96:e3:e8:c1:
3d:76:c4:e5:c9:42:fa:8a:98:fa:ad:35:3b:8c:43:
b7:06:a4:ba:de:ab:fb:eb:09:15:a7:96:54:3d:0c:
76:d5:92:7b:3a:9e:66:7b:ff:4d:71:ae:b3:71:5f:
f1:3a:c8:39:d4:3f:66:0a:95:6b:40:d3:87:fe:eb:
c4:5e:20:78:b8:d1:82:ec:98:df:aa:5e:60:5d:f2:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B3:B0:9D:9E:A2:79:59:3E:26:D5:4C:02:38:D6:F2:91:53:63:FD
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b0:73:10:97:65:35:6e:94:db:c5:56:4e:61:ca:97:e9:82:
37:b9:1e:33:ac:7c:4d:9e:a6:ea:dc:93:70:42:c3:f2:1a:6f:
dd:37:06:bd:f1:41:21:bb:c9:4f:13:cd:23:cc:d3:58:76:76:
d7:40:34:e5:58:95:eb:ca:0a:22:29:50:51:ec:f8:92:b0:81:
0c:bb:79:b9:c5:09:72:c6:ed:b5:27:45:b2:cb:58:79:57:52:
aa:b0:3b:f2:76:b8:f4:55:c5:18:01:b8:7f:29:c2:af:e8:75:
fa:f3:f2:94:c6:36:75:ba:8e:4b:2a:a0:4b:19:07:2c:af:79:
ec:12:73:84:1a:5b:c1:f1:b0:b5:b2:ae:04:77:f6:e0:90:9f:
ce:ed:3f:8c:d7:f5:09:aa:05:ea:ab:f3:3e:b6:f1:4a:f9:12:
37:a9:d5:38:54:69:6a:c7:0d:52:fe:ae:2d:f0:10:8b:fb:26:
ba:04:9a:11:32:58:ab:94:db:9e:e3:a8:a1:2f:40:b1:a5:0b:
82:47:1e:36:c9:f4:c7:76:1c:ec:5c:79:64:c9:24:ce:0e:07:
09:88:20:ce:78:b7:72:69:bf:51:d0:6d:c6:6c:a8:06:2a:12:
56:31:ce:ac:8f:18:c1:1b:8e:7f:54:0a:a4:a2:65:ec:fd:fe:
7f:59:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:39 2025 by rpki-client