Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: cZHauJeaIMBN3g8EchZ2UCK4RBB/nPziGbgMMIXJze0=
Subject key identifier: B7:C4:EA:F7:6B:38:36:0D:93:A2:90:60:8D:56:43:C8:A5:CF:38:9A
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 0199FFFE82637AB16C6B6018C8FFEB9358C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0CE9
Signing time: Mon 20 Oct 2025 05:01:33 +0000
Manifest this update: Mon 20 Oct 2025 05:01:33 +0000
Manifest next update: Tue 21 Oct 2025 05:01:33 +0000
Files and hashes: 1: JQ4W3G2wBUo6PRPPv0dVzYu4y4w.roa (hash: JHM9O5mRc/9ugG6o1WcR1yYfnaT1Q2KD2tNJG5Hqsco=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: v6Ll7kQf+UsHRPOqMPbEdKOw3j+MuUfi/LIbEWsbQpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:82:63:7a:b1:6c:6b:60:18:c8:ff:eb:93:58:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Oct 20 05:01:33 2025 GMT
Not After : Oct 21 05:01:33 2025 GMT
Subject: CN=b7c4eaf76b38360d93a290608d5643c8a5cf389a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:8f:f7:cf:b5:56:72:21:0b:e4:7a:23:c1:
f6:c9:e1:f1:85:8b:5d:20:33:82:b0:35:b5:0a:14:
2d:b9:bd:70:21:06:68:35:c1:e2:29:f6:ae:d7:ce:
e5:0f:c9:ec:fb:ba:51:08:08:a8:20:07:5c:d5:5c:
0e:82:a1:8a:9d:20:31:50:3a:2b:92:a5:0e:27:37:
e4:d4:b8:c4:b7:83:d6:0c:bb:7e:3b:99:2f:bd:aa:
0b:d2:08:90:98:54:d6:b6:e2:cf:33:e9:51:10:af:
bc:fa:1a:42:ea:e3:01:db:ac:cc:0e:f2:84:4a:3d:
53:c9:99:f6:96:c6:e7:0b:9f:16:9d:2d:be:5a:3d:
c9:6e:31:65:9c:d0:e9:e8:e6:cb:3b:7c:1c:33:9a:
7e:c9:60:c2:7a:81:70:52:82:87:5c:9f:c9:bb:ac:
97:af:b8:b9:b9:f6:78:08:58:dc:ea:a2:d5:d2:95:
68:a9:dd:58:55:9b:1c:1c:47:af:95:2a:1c:08:ec:
e3:6d:3f:a3:de:cb:fe:bf:d5:2b:95:82:a9:fb:29:
5b:6b:d0:74:1c:c6:c9:31:9e:54:00:82:25:0a:a7:
74:ab:78:c4:de:26:2a:8c:6f:5b:18:c7:fb:c7:4b:
9a:b2:64:d5:02:e7:b6:70:54:1d:67:18:fe:70:ea:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C4:EA:F7:6B:38:36:0D:93:A2:90:60:8D:56:43:C8:A5:CF:38:9A
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3b:83:66:23:60:15:ed:90:97:32:99:80:a0:9c:f5:8c:56:
79:92:c8:1b:88:e3:11:c6:ca:f7:4f:f8:dc:9b:e3:9c:14:67:
f7:1e:cb:ce:0a:bd:65:74:8f:72:32:28:50:30:2c:20:28:af:
63:50:38:3f:4c:c3:d1:25:09:05:d2:3b:6c:8b:28:3a:f7:8a:
b3:42:04:79:33:2e:90:a5:7a:2b:22:b6:94:41:a4:8a:67:f2:
f1:11:b8:fc:f3:46:fd:64:6a:b8:0f:12:b0:09:5f:a8:f7:9a:
01:b8:c1:49:41:30:88:37:9a:1d:e8:41:8f:9f:2a:0c:b8:8d:
fa:dd:23:4b:8b:65:1e:ed:19:c2:aa:75:e1:58:df:42:c4:02:
6f:1f:4d:34:0e:11:9a:ed:22:81:6b:db:8c:6c:d5:0f:08:d2:
31:b2:1c:b5:34:73:8d:51:09:e3:cb:36:2b:83:4e:bf:10:ea:
21:ca:55:98:b7:81:6c:00:47:2a:aa:09:91:ec:7b:8d:3b:2a:
ca:c7:eb:16:bb:99:71:7c:dd:40:b6:3c:a9:8c:04:dd:34:d7:
09:b6:f1:f4:4c:0c:eb:05:87:d5:e2:31:c0:86:13:f4:e7:e5:
67:ce:ba:77:8a:5f:11:dd:ec:3b:b5:7b:02:23:47:62:29:60:
3d:40:04:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:38 2025 by rpki-client