Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: uls65p0Kdl3XHC1OKZYXccM2zdK5RvBw2IEgf/xc6yE=
Subject key identifier: C3:5F:5D:70:4C:E9:29:4E:E9:84:83:14:A0:15:23:81:91:C5:FC:F3
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 0199FBEB56127CBCB4C89C2A7DB6161DB348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 0E6D
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: h8mZW9ZNan+24l0J4bAceKjlqLcI6hPwnzeK7DUgabE=)
2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=)
3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:56:12:7c:bc:b4:c8:9c:2a:7d:b6:16:1d:b3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=c35f5d704ce9294ee9848314a015238191c5fcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:3a:8d:49:13:38:eb:6b:da:44:42:d0:be:
d5:3f:ec:5e:5d:16:4c:ad:f3:1f:9f:7c:36:02:69:
d4:fe:67:8f:83:be:8d:56:04:0e:52:13:ea:68:38:
1d:c8:3b:bc:76:43:1b:03:4b:7f:9c:e9:e5:c2:c1:
e7:49:a1:f8:a8:79:09:6d:e9:5a:72:e0:c6:7c:87:
b0:5a:8a:6e:ca:de:5f:5a:db:60:f0:d3:44:a5:5a:
e2:3d:86:74:cb:37:47:6c:05:3f:f9:72:a3:b9:ba:
28:05:49:99:8b:1c:f7:eb:15:80:0c:b2:75:0b:8c:
d1:74:d3:d3:71:46:05:d1:30:df:c9:53:13:a9:09:
66:29:a9:65:d5:a9:f1:ba:2d:4b:da:be:c7:46:14:
d8:31:da:cf:86:28:ed:ad:1b:38:6c:eb:de:99:f9:
78:79:f3:eb:a5:1f:d0:e9:99:74:91:76:5c:c9:56:
60:c3:88:2e:6f:18:d8:2e:76:21:a3:e1:80:2a:ee:
be:91:4a:75:9b:75:ca:fd:8c:c4:07:7b:c6:95:32:
33:14:ec:f2:dc:19:1a:08:f4:14:ed:e7:ab:51:9b:
49:d0:ec:21:70:6b:80:f2:45:87:5a:b3:90:ea:de:
af:b0:f8:b0:16:5d:38:82:c5:38:e4:dc:ae:d4:a9:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5F:5D:70:4C:E9:29:4E:E9:84:83:14:A0:15:23:81:91:C5:FC:F3
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7b:ce:d9:24:6b:2c:6e:0e:b2:25:f8:01:e3:a5:a6:fd:0e:
86:03:d8:16:ee:8b:43:e4:f6:cc:f6:ef:41:bc:fe:2e:1f:c3:
9f:25:0f:a3:bf:e4:eb:c4:6a:03:fc:a8:b6:a3:58:ed:30:6d:
2b:85:ea:9a:d4:5e:6e:28:8b:27:2e:0e:be:85:d8:34:b3:67:
ea:08:83:7f:40:e8:27:7a:07:68:02:88:9f:cf:8a:22:c5:e3:
5c:88:d6:d8:69:3f:58:cc:7a:cd:b8:93:50:d1:17:9d:58:1f:
84:14:1c:a3:2f:49:e9:4b:b4:e0:c4:23:54:66:18:31:86:65:
7d:b5:99:c4:85:ce:01:3f:3d:9b:cc:d7:cc:3d:20:76:62:4f:
39:10:77:00:13:18:72:ba:4d:01:7d:35:3e:ba:c6:d8:83:88:
50:7d:27:a8:03:07:f5:fb:d1:76:f1:eb:82:0f:97:46:a1:d2:
90:55:e0:a9:9d:73:99:3b:84:dc:4e:7b:1b:df:09:90:ce:c7:
66:ba:be:83:61:a0:3b:8a:1b:8a:05:ff:de:5c:1d:93:d8:f8:
92:72:3e:6b:64:e8:10:54:56:c3:7b:57:57:10:69:1a:2e:e9:
fe:c6:99:18:c3:c9:f8:45:83:4e:8f:f0:2c:c6:89:a7:5c:08:
f8:a0:1e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:11 2025 by rpki-client