Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
File: KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json)
Hash identifier: YSiCdA+tZ376f4iCWGi804v7nzbBQaKJvXnL+4QuTt4=
Subject key identifier: C3:89:99:ED:58:AA:32:B3:AD:82:97:F5:5B:D7:68:AB:D7:B6:40:B8
Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Certificate serial: 0199FC8F70F4BB4E91450A9F4E14372EAB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
Manifest number: 0504
Signing time: Sun 19 Oct 2025 13:01:22 +0000
Manifest this update: Sun 19 Oct 2025 13:01:22 +0000
Manifest next update: Mon 20 Oct 2025 13:01:22 +0000
Files and hashes: 1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: nsgFcrLkkjuxe1iaO+kJ5LEg83cZIk9GiRaozGZvUgk=)
2: lzjPjehPcPKbzhp_BORqJSFXL5w.roa (hash: o7m8VbYXK8WyV5y7PTGt6HIYSCCP18Dfj928jAcIW9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:70:f4:bb:4e:91:45:0a:9f:4e:14:37:2e:ab:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Validity
Not Before: Oct 19 13:01:22 2025 GMT
Not After : Oct 20 13:01:22 2025 GMT
Subject: CN=c38999ed58aa32b3ad8297f55bd768abd7b640b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:da:7a:ad:40:b9:59:9a:b9:90:d9:e9:09:
41:0f:72:3a:7d:70:e6:a8:60:fe:87:24:93:b2:e2:
62:53:ff:20:b8:4d:a8:f4:64:b4:5a:70:a9:7f:d0:
8a:2b:89:1e:00:8c:5f:61:eb:94:0b:6a:7e:f9:0e:
aa:0c:f6:98:6c:8b:36:08:40:7f:5c:5f:fb:71:0d:
12:1e:82:f7:2e:14:23:64:ea:2c:65:5f:d5:5f:57:
92:30:59:f6:df:1b:b1:f7:24:b3:63:56:2a:a8:c3:
c5:1c:98:97:42:7b:ec:42:64:e6:77:27:a1:7b:90:
a7:dd:07:2e:22:3e:8a:4a:35:95:ff:fb:aa:30:d0:
13:7e:b7:e9:b5:b3:d6:01:54:c3:a3:aa:eb:60:d9:
86:d9:66:a2:6f:d4:83:8e:11:88:6a:2e:a0:af:d3:
38:be:63:45:c3:fe:21:98:31:60:ba:2b:a4:fb:b3:
62:be:3c:4d:9f:4c:cb:ed:c5:9e:76:92:63:33:cf:
38:a9:23:59:01:47:54:cf:90:5d:f9:3a:39:b6:92:
10:33:71:70:b8:42:20:92:c8:1a:2b:45:2d:2c:fd:
b6:9d:90:09:ee:b8:3a:f5:6c:d0:ef:48:b7:27:e6:
3f:fa:13:66:56:af:3d:71:75:d1:d3:b6:c6:f2:b1:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:99:ED:58:AA:32:B3:AD:82:97:F5:5B:D7:68:AB:D7:B6:40:B8
X509v3 Authority Key Identifier:
keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:28:15:27:ce:92:4b:c2:7c:c9:86:10:75:93:c8:9e:60:a5:
29:45:cb:91:2c:eb:37:fb:b5:28:7b:c2:2f:01:00:cf:77:19:
ba:fd:9b:0e:5f:1b:2b:22:09:89:c7:7a:7b:80:fe:99:0f:c3:
b4:71:d8:b8:8a:8f:cf:4f:5b:24:e6:89:1b:3f:17:8f:78:6d:
f6:4d:7d:69:6f:b0:2b:d2:4d:a9:41:0e:4e:cf:6e:a7:ef:9b:
ff:d0:b8:00:91:54:bf:92:a4:ce:5c:9b:ea:70:54:a1:98:3b:
5a:f5:4d:cb:30:61:2c:16:cb:b9:79:67:af:ce:30:a4:9b:eb:
4d:c0:3e:38:37:ec:b6:9d:87:81:de:58:58:41:08:ac:44:26:
d8:8c:46:1e:10:c1:f5:8b:26:d9:58:b4:c9:94:7a:a5:b4:83:
05:9c:a9:68:fc:f9:52:31:ce:97:03:c3:13:5f:21:20:f3:ad:
64:62:0c:c9:9c:34:a0:0f:26:17:d0:cb:28:84:71:a2:ad:aa:
53:88:7c:7c:fc:3e:99:8e:9b:2c:b7:1f:f7:a5:28:e6:de:fc:
21:7c:bb:b4:5b:db:23:b9:c6:6b:e4:c1:ac:14:40:61:80:1d:
99:dc:36:b9:08:ae:86:4e:61:c6:4a:45:2a:a6:c2:14:7d:a4:
ff:b8:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:02 2025 by rpki-client