Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
File: KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft (raw, json)
Hash identifier: mAtVkW5LsBCQzn4+LmB2rk6MOr+R4NW639UngyBQwfc=
Subject key identifier: 99:61:3F:52:3B:1E:9E:57:58:D7:C7:45:CB:6B:F2:24:B8:60:78:6F
Authority key identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
Certificate issuer: /CN=2860f15d278379483aaa0613cbf592e72cc81e48
Certificate serial: 0199FC8F2E6D05ACB921754D255BE795A935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
Manifest number: 09FF
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl (hash: ewBQWT5+eVECMjjocOaaGH4RKwZ6MXy46DWtkg4XrzQ=)
2: vDGDX2wIiExO6AcsphzPX7w0rD8.roa (hash: 6H+fcKSw03UJYZabhwRmpHlYumXXGe9flqc+/pdyWXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2e:6d:05:ac:b9:21:75:4d:25:5b:e7:95:a9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2860f15d278379483aaa0613cbf592e72cc81e48
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=99613f523b1e9e5758d7c745cb6bf224b860786f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:10:01:0a:8b:63:9e:95:fe:24:b6:f0:08:
5d:64:2b:b1:35:f4:36:a7:5b:f6:ec:37:a3:15:76:
09:2f:7d:99:0d:07:4f:18:0d:68:71:35:94:93:9b:
47:4f:34:9c:9f:2d:09:10:b5:cd:95:1f:c1:24:69:
b6:c1:c5:84:9b:80:2a:b2:5a:77:0a:bd:bc:4d:a9:
8b:65:06:14:63:ea:ff:d0:d0:4f:86:bc:d4:6b:1d:
d9:5b:8b:54:e3:c0:e3:e6:72:f9:2d:26:0c:72:25:
84:a9:d5:30:d9:21:d9:06:a0:45:51:44:04:3b:07:
05:83:bf:e8:e0:95:1d:83:82:10:7a:36:af:fb:92:
af:ec:fa:7b:eb:57:04:82:83:41:8f:90:1c:6b:ff:
c1:56:70:05:4d:f6:f0:81:7e:ca:d1:99:44:2c:b9:
aa:ca:36:4e:12:ce:0d:15:e7:69:cd:26:f8:60:77:
dc:2f:40:c7:a2:00:cf:0a:69:3a:72:5f:ea:3a:df:
09:7c:c3:9c:d5:3b:37:0b:14:c7:29:3a:a5:eb:4b:
c6:2e:52:a9:74:eb:35:cb:7a:f5:e5:a1:87:44:af:
d9:f4:c0:42:63:0d:47:82:3a:36:b1:88:08:8a:87:
2c:53:ce:ed:c8:76:b1:2d:70:6a:f6:00:c9:a6:72:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:61:3F:52:3B:1E:9E:57:58:D7:C7:45:CB:6B:F2:24:B8:60:78:6F
X509v3 Authority Key Identifier:
keyid:28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:19:c2:57:b4:c8:36:ae:b0:55:50:7e:eb:76:e3:e3:ec:be:
83:ed:88:69:d6:b0:2b:96:6e:c4:9c:72:ec:21:68:7d:2f:c7:
80:09:a6:bc:0d:ab:f1:b0:61:aa:41:fe:a2:60:df:52:cd:c7:
0d:fc:a8:cc:c4:7e:91:a5:23:a9:fb:34:43:55:6b:4b:da:f5:
af:84:ed:d8:dc:87:28:35:fa:ae:9f:2c:e6:86:2f:c0:58:f0:
fa:3c:27:66:a9:fe:0c:02:0d:ec:3c:72:31:9f:0c:bf:b4:79:
e8:a4:84:b0:82:bc:5a:39:23:ab:24:dc:fc:b3:ee:3a:cd:75:
cd:9e:6b:e2:bc:77:b1:e5:ab:74:6e:9f:f2:a5:14:ca:86:c5:
6d:fa:29:3f:d3:a4:c6:d5:ae:77:fb:c5:2e:db:79:18:b6:5b:
c6:41:a8:6a:6c:4c:c9:f5:44:24:0b:ac:90:d4:96:e2:5d:be:
59:dd:e7:9c:c5:7b:17:f6:35:45:02:3e:1e:df:58:2f:e5:ab:
a7:62:a4:49:9e:c3:c4:35:ab:0f:e9:a9:4f:66:19:47:17:7e:
d1:b5:3b:42:2f:28:f1:42:ef:98:42:bb:5e:b9:85:79:20:40:
c8:32:95:39:f3:0f:43:7d:97:ae:c2:06:f7:de:03:29:41:ae:
f2:81:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:21 2025 by rpki-client