Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
File: KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft (raw, json)
Hash identifier: p+scvbghXOniPOSls2LxjTxHO/5r1NhXCvuqR13+SXQ=
Subject key identifier: B3:ED:CD:44:8A:78:EE:59:BE:E6:E2:DD:FB:B6:98:7B:F7:BC:48:C5
Authority key identifier: 28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
Certificate issuer: /CN=28693b0056de87d84baccdd805d0365fac60f67c
Certificate serial: 0199FB0EE4D44DCA5054B761AA4576F3D959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
Manifest number: 0322
Signing time: Sun 19 Oct 2025 06:01:21 +0000
Manifest this update: Sun 19 Oct 2025 06:01:21 +0000
Manifest next update: Mon 20 Oct 2025 06:01:21 +0000
Files and hashes: 1: KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl (hash: Jya8azMR4RaRAwfDQZr204Ss/NCRIOX9PRXsSpYu1wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e4:d4:4d:ca:50:54:b7:61:aa:45:76:f3:d9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28693b0056de87d84baccdd805d0365fac60f67c
Validity
Not Before: Oct 19 06:01:21 2025 GMT
Not After : Oct 20 06:01:21 2025 GMT
Subject: CN=b3edcd448a78ee59bee6e2ddfbb6987bf7bc48c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:79:ea:ee:b4:79:19:0f:11:ba:d2:c9:1a:9a:
e8:6d:56:93:90:31:a2:ea:ac:bd:31:59:22:86:80:
5f:19:e6:8e:88:ee:b2:08:8e:5c:03:7e:e0:c5:e7:
b6:12:b0:f7:33:8b:fb:0e:b8:29:92:4b:e0:47:77:
ac:0d:73:1b:e0:f5:8a:dc:a9:4d:52:4a:9b:21:39:
37:fc:c3:7f:5f:17:e0:31:7c:6f:b3:a1:17:81:b1:
2f:72:69:d3:23:c9:da:fd:7d:bb:fd:27:ae:f4:2a:
06:e0:57:9d:4d:cd:6f:68:7a:f7:28:93:aa:aa:ba:
14:03:89:79:92:3c:c3:ab:09:dc:23:16:9d:e3:92:
5e:3f:c8:f1:f0:a8:65:8a:f6:75:0e:6f:1d:fe:f8:
4d:65:e3:fb:f4:03:3e:1a:ec:db:e2:be:84:a7:cf:
9f:e1:79:c1:1b:75:ca:71:4e:e8:b8:f5:ed:1f:c1:
61:92:49:10:fa:73:0e:74:68:a9:c0:12:d0:27:c5:
52:7f:e7:bd:d5:32:76:d1:4d:b0:64:66:50:62:ef:
45:24:ab:39:a9:c4:50:2a:af:28:38:4c:5e:00:b1:
52:81:0c:0e:9a:c8:0d:c9:be:49:35:fb:cd:a0:6a:
5a:a6:05:c0:e9:c8:9c:e8:81:1e:b3:b1:db:ad:34:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:ED:CD:44:8A:78:EE:59:BE:E6:E2:DD:FB:B6:98:7B:F7:BC:48:C5
X509v3 Authority Key Identifier:
keyid:28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3c:37:cf:cf:9e:a8:d1:d9:fd:20:72:38:10:ce:36:3d:94:
7c:c6:bf:20:52:cc:9c:cc:2e:6c:91:57:8b:5f:dc:36:a6:06:
0c:60:02:4a:01:84:ad:46:00:d2:28:70:09:20:7d:43:fd:08:
9c:db:e8:5e:13:a8:b5:08:d0:ff:0c:4a:72:80:bc:32:11:32:
bc:38:13:04:c5:7f:db:0d:bc:63:66:60:fd:81:bb:08:e4:b9:
6d:f8:e3:d5:a5:ae:98:13:c7:c1:71:a0:7d:1d:60:aa:dc:55:
a1:2b:ce:e1:54:a7:98:5f:10:04:54:4b:e0:c7:d0:cb:28:b3:
45:72:ff:9f:61:56:6e:44:45:29:70:32:70:a9:07:90:22:50:
60:69:3b:5a:fe:0e:a0:4f:cc:a5:99:7d:8d:ff:97:02:ec:ab:
8f:52:8d:55:33:a9:2f:a8:dc:9e:e2:90:ac:91:0d:62:07:f0:
c0:53:3f:bb:3f:11:9e:f4:c9:1f:89:fd:3a:03:53:0e:cf:55:
c5:35:73:7f:f4:c9:c9:bb:e0:8b:76:1c:d2:9a:ae:82:05:67:
cc:88:28:06:a7:57:a9:e6:f8:f6:d4:9a:2f:ab:14:b3:2c:3a:
f9:9c:8f:b2:a4:b1:02:fc:fa:12:40:ae:aa:46:37:52:36:57:
88:a2:88:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:42 2025 by rpki-client