Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: QKlls4qDZ/2LD7cYSFMJMIwaME/YLdt9iLjXjWlNPYc=
Subject key identifier: 67:1B:D6:97:C4:CD:DD:F4:11:D4:B4:AF:81:04:31:04:0E:83:C2:3B
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 0199FC8F2A8DBD12BC46F31899CD77B53463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: CpGBxRPNn9mP6zp7n++QqpT0oB04Z2YrxkcPq2gxJZg=)
2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2a:8d:bd:12:bc:46:f3:18:99:cd:77:b5:34:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=671bd697c4cdddf411d4b4af810431040e83c23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:f6:55:f5:2c:a6:18:84:44:96:e9:e9:7a:
c9:c8:09:f7:88:f7:d2:45:74:54:ff:5c:4e:d1:34:
9a:ba:df:32:70:94:9f:5c:21:ce:84:10:ff:37:c7:
35:bd:ee:b8:7c:52:a0:5e:14:31:b6:b3:64:f2:a8:
da:88:99:98:13:cf:08:44:8b:8d:b7:f4:f1:89:98:
e7:93:2b:56:c5:61:4f:05:ed:94:3b:fd:f2:15:1b:
31:22:4b:5a:76:a2:40:5e:32:62:fe:ee:69:da:dd:
c9:de:f4:f1:a8:0e:67:a9:e8:9d:56:a5:57:b5:6d:
78:7f:1f:ce:30:31:5a:66:a6:4a:31:44:1e:88:68:
f1:a3:ef:fd:e0:6a:07:65:9e:0b:40:8a:0f:27:fb:
74:13:29:69:c9:2f:f2:d7:7f:06:e9:79:4e:da:e0:
c4:f2:36:c0:81:6b:b8:78:88:66:5f:a8:59:56:6a:
ba:60:a0:64:5d:9e:9b:0a:df:fe:92:31:be:33:a3:
da:ed:8d:4d:4f:d6:f5:32:cc:8c:25:f9:db:15:75:
7a:21:a8:6d:0a:a2:8c:81:a6:0d:20:62:bd:d5:1e:
57:64:ee:78:d4:d5:d7:4b:a4:7e:9f:93:1b:f8:b9:
46:18:76:29:b6:0b:9a:24:a4:a1:c6:ba:8d:ea:0f:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:D6:97:C4:CD:DD:F4:11:D4:B4:AF:81:04:31:04:0E:83:C2:3B
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:27:5d:0a:c9:62:c3:e2:7d:f5:bb:c9:58:26:04:5f:41:39:
22:5c:2f:49:d7:cf:6b:70:37:fc:dd:33:c4:c0:e6:2f:1a:0b:
06:ce:d2:0f:a5:96:02:e7:e6:3c:87:3d:44:37:f1:68:f2:09:
67:d1:57:73:a6:e5:4f:90:e1:0a:21:32:ef:e7:57:81:58:d1:
68:22:c0:6d:52:21:95:57:81:6e:75:f6:dc:cf:cd:f5:75:92:
5b:78:cd:c7:f7:ed:0f:49:66:f9:c7:fa:f9:26:83:74:c4:93:
3a:50:bd:c4:77:9a:56:a5:59:60:48:aa:cb:db:a8:2b:19:69:
fc:39:52:2d:2c:df:05:e1:97:70:74:ac:6c:e7:54:ce:3e:10:
16:ab:7e:4c:3d:d2:46:d5:85:e4:50:e3:a2:58:72:43:a4:88:
3d:71:ac:f8:b0:7a:d8:f7:bf:08:b9:dc:59:19:95:8e:f6:b5:
43:af:a4:04:92:08:e8:6b:e3:cd:5a:75:ad:e1:71:99:ab:45:
8b:68:62:8e:21:ae:28:0b:22:47:18:47:78:87:e2:fe:74:35:
2a:31:6f:ba:58:73:5f:28:6f:41:30:65:97:b7:e1:b8:06:e1:
3b:b4:09:be:27:56:ab:9d:14:6c:ad:e0:2d:1d:82:2f:0a:a0:
6b:86:99:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:09 2025 by rpki-client