Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: FrjEnlsxLpNjDmrnRsle0WMIYaY3kOp8M7Ip+5rO+kg=
Subject key identifier: 7F:77:B5:4C:A6:14:B1:71:F4:60:29:A5:DB:4E:38:32:59:33:51:D6
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 0199FE7DB52D45108421314331E12356F0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 0734
Signing time: Sun 19 Oct 2025 22:01:15 +0000
Manifest this update: Sun 19 Oct 2025 22:01:15 +0000
Manifest next update: Mon 20 Oct 2025 22:01:15 +0000
Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: +zA0eQzndNfeHD1GfpfptLEnq3itmR6YpVtHJ/sUF/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:b5:2d:45:10:84:21:31:43:31:e1:23:56:f0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Oct 19 22:01:15 2025 GMT
Not After : Oct 20 22:01:15 2025 GMT
Subject: CN=7f77b54ca614b171f46029a5db4e3832593351d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:21:3b:7b:25:0c:28:53:2a:f1:a4:c0:95:4c:
65:53:ca:8d:b6:1b:ee:66:1a:d7:f0:79:24:f2:65:
cf:d4:bd:9d:f8:b8:22:a8:f1:e7:d3:6d:1b:57:73:
97:13:cc:85:af:99:3f:c8:d0:f2:42:4e:d4:dc:90:
45:50:d3:16:ac:fb:67:d0:eb:4a:be:0d:2a:01:ce:
78:17:54:8e:dc:63:c2:a1:7a:92:ad:cb:1c:08:07:
b4:76:d2:52:b8:6a:5e:ab:0e:cf:c0:a5:62:26:6f:
0a:61:f7:bc:02:93:76:f0:0c:60:6f:eb:35:0c:de:
9e:01:4c:09:06:3b:e9:c7:dc:05:ee:fd:db:aa:e0:
3f:9b:d7:4f:c9:3e:9c:ac:90:26:26:f0:ac:14:ea:
67:96:d7:f4:dd:09:62:76:d8:4b:52:a4:87:37:cd:
23:05:a5:a6:b7:8b:3d:34:11:de:cb:ab:8c:fd:ed:
9a:9b:6b:80:09:01:bc:fc:5e:7c:ba:3b:44:5f:a7:
30:0e:1c:a2:f8:95:75:95:4b:04:52:18:9d:59:75:
a6:42:26:bb:15:0e:4b:f9:a6:db:f1:a1:3d:dc:82:
a1:28:10:18:68:00:dd:15:d5:1b:85:ca:80:ff:73:
19:dc:b4:c4:08:da:f6:f1:c6:dd:7b:3c:20:2c:8c:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:77:B5:4C:A6:14:B1:71:F4:60:29:A5:DB:4E:38:32:59:33:51:D6
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8f:de:64:a0:b5:4f:89:8b:f4:42:73:3c:82:38:15:61:a7:
94:20:5e:94:92:65:b8:3d:be:78:16:10:92:95:1d:0d:e0:5e:
ad:d0:a8:c0:c3:94:1f:eb:b4:15:20:cc:ac:f0:f6:78:e3:94:
ea:1d:a7:d1:8e:ba:f9:d4:33:e5:62:97:84:50:33:25:06:f4:
f3:1b:92:cd:e7:2d:53:ce:c0:3c:bd:a4:b2:d6:db:c3:98:35:
80:68:63:14:cb:18:1b:ea:a2:63:11:a9:9e:05:ca:01:1e:d0:
b3:ba:25:ba:71:99:8a:10:5b:5e:e2:fb:56:de:44:5c:6b:4b:
e5:bc:17:46:b4:d0:f3:d2:d4:a2:ef:ce:34:de:4c:77:83:35:
4e:de:3e:92:55:9e:05:18:3e:3e:31:98:47:33:32:c5:61:d6:
bc:10:69:78:be:94:24:0f:4d:79:ee:b3:89:6b:fb:41:c0:b8:
2a:21:d6:7e:31:1f:16:5e:9d:86:56:18:0a:00:48:19:6f:a6:
43:31:bc:b6:f2:64:53:c6:c8:36:a4:bd:f6:1d:42:60:fd:f6:
07:91:7b:14:80:09:9e:6f:88:23:4b:9f:54:11:a6:6b:04:88:
a8:f9:49:6d:56:ef:d4:2d:36:36:6c:8d:bf:f0:d4:c2:2f:9d:
54:3a:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:12 2025 by rpki-client