Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
File: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft (raw, json)
Hash identifier: nx8dMWKzw3PamsUtc7oc5WaU9dQirp1u0S1MfndrHK8=
Subject key identifier: 55:18:17:D4:19:30:12:9C:12:3C:15:C1:C2:3C:F8:5E:55:32:BC:54
Authority key identifier: 29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
Certificate issuer: /CN=29d59e889f99aefdde5e949fe8079d337b57f447
Certificate serial: 019A0035E292F15150C6F8BB6CA7446264DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
Manifest number: 12D2
Signing time: Mon 20 Oct 2025 06:02:02 +0000
Manifest this update: Mon 20 Oct 2025 06:02:02 +0000
Manifest next update: Tue 21 Oct 2025 06:02:02 +0000
Files and hashes: 1: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl (hash: ESD8VT004ZusHUnaChBFfsV0rlllVNL82Dt4QxKveVM=)
2: if3bRvhywq0-AQAvqAMvn9zf2xA.roa (hash: e1PwQotXLXaCqhVV0IcDbX0I5jTk19F7wuKZ3aHr5MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:e2:92:f1:51:50:c6:f8:bb:6c:a7:44:62:64:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d59e889f99aefdde5e949fe8079d337b57f447
Validity
Not Before: Oct 20 06:02:02 2025 GMT
Not After : Oct 21 06:02:02 2025 GMT
Subject: CN=551817d41930129c123c15c1c23cf85e5532bc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:86:f4:64:ca:e4:9c:57:34:02:c6:c9:60:
fe:75:cf:ee:87:2c:da:07:19:cf:25:1a:13:b9:f1:
b2:2f:82:27:ea:c9:51:98:a2:ee:90:f5:56:06:c9:
3a:c4:11:25:90:f9:dd:04:ea:e9:b5:63:b5:d4:0d:
25:78:07:5a:9d:d4:3e:bc:d2:24:72:58:ee:e6:aa:
9d:17:a7:61:1c:4f:31:46:d0:f3:a4:8f:37:c0:30:
d6:0d:2e:4e:05:07:8a:34:96:a3:45:57:10:13:28:
c8:01:c5:aa:1f:6e:64:fb:c5:fa:67:c1:a2:f7:5f:
1e:ec:37:dd:e4:e7:0e:43:be:7e:50:af:91:67:b4:
f9:42:ea:48:57:d3:0f:43:2b:57:3a:2a:44:94:f1:
76:a6:8b:3d:83:97:b9:e6:45:29:5c:46:13:3a:ae:
58:07:97:81:0c:cf:8d:60:35:f7:17:86:f0:3c:2b:
04:d6:03:7e:3c:7f:f4:c4:d5:a4:b5:b9:40:52:ed:
d0:a8:62:8e:31:db:c6:5d:af:a4:a0:3d:12:ba:10:
4a:58:60:d9:00:18:1f:b8:02:39:ec:82:62:3c:0c:
76:be:0a:ac:db:f0:b9:9b:cd:ab:d8:f1:18:f4:89:
f9:f1:a9:13:b1:10:7e:31:6c:82:47:f8:12:ad:ff:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:17:D4:19:30:12:9C:12:3C:15:C1:C2:3C:F8:5E:55:32:BC:54
X509v3 Authority Key Identifier:
keyid:29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:08:5e:c8:1b:94:71:b2:d5:03:38:6b:7a:40:dc:a9:93:20:
96:c2:63:b1:f7:70:55:e9:96:89:9d:6e:e1:53:3e:14:ad:e8:
7e:d2:09:49:47:08:e9:19:6f:a2:d0:67:4e:3d:e2:51:df:b5:
cf:84:d1:8d:84:7d:d5:e0:58:47:46:37:ec:63:7d:48:a5:64:
af:35:b7:ac:3e:ed:7f:ba:82:b6:ce:93:66:e3:57:a5:03:ec:
3c:4a:2a:85:ef:e5:a5:5d:c6:70:c5:1a:41:cc:73:dd:b8:f3:
19:9c:2d:1a:ee:9c:5e:c9:64:ff:e7:4d:23:90:21:d7:c8:0d:
84:a9:66:e2:b2:15:7d:94:34:95:b3:2e:29:04:22:23:d7:0a:
56:59:29:ef:eb:58:6c:5c:d3:12:cc:08:34:ac:58:ae:1f:dd:
57:99:cf:20:f2:9d:20:21:19:90:53:d7:b4:82:52:d5:18:27:
c8:a3:85:81:4d:d7:0d:fe:cb:18:96:7f:7d:d0:ab:fa:4c:2f:
ef:72:09:6d:db:c6:af:25:d5:33:f8:78:03:a1:75:01:d6:37:
c9:6a:38:d3:ae:d7:1d:72:f5:ac:3d:1d:68:03:39:f3:f0:51:
26:bc:7d:21:55:b7:99:67:63:e6:fc:6f:9f:80:d5:bf:0e:04:
0c:bc:b4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:36 2025 by rpki-client