Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier: mNTR5jmg6lUoYG/FG6RDwY61Tp6ir24Ud/0+NCO71HE=
Subject key identifier: 12:96:9B:B6:DF:5C:AC:C9:EB:B1:25:14:41:B8:D3:DC:C3:BF:B1:57
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 0199FDD9318E617D797A8858F72A39C729D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 19:01:33 +0000
Manifest this update: Sun 19 Oct 2025 19:01:33 +0000
Manifest next update: Mon 20 Oct 2025 19:01:33 +0000
Files and hashes: 1: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: acvLtqfWanpIUzLDZ7v3RB8f5f8jjN5yDavvZJQVu5U=)
2: rdvag5pHs9es_gyoqlFPFe0V7WI.roa (hash: ckptdnrG1RV/ZZ5MTTowIZnIHeIBz++eWuv3IdAEj3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:31:8e:61:7d:79:7a:88:58:f7:2a:39:c7:29:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Oct 19 19:01:33 2025 GMT
Not After : Oct 20 19:01:33 2025 GMT
Subject: CN=12969bb6df5cacc9ebb1251441b8d3dcc3bfb157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:4f:c4:69:9d:20:f6:03:f3:27:48:3f:d4:
f1:b3:d0:cd:7f:59:b6:75:02:2e:91:86:56:a2:72:
09:e5:95:27:07:d9:f0:89:f7:8d:83:2c:d5:e0:27:
01:99:77:93:bf:4f:6d:dd:a6:ec:83:3f:55:7e:ac:
fd:49:9c:59:3c:36:64:a7:70:85:9d:be:86:f9:ad:
4a:84:ea:8b:0b:09:d0:b0:74:3c:c3:7f:70:d7:d5:
62:f5:c6:10:45:bb:40:8d:3f:5b:34:32:ae:7c:36:
b3:c2:55:16:09:74:21:5c:5d:db:09:b4:53:20:00:
d5:46:45:b9:9e:e6:bd:09:bd:3f:e3:a9:4a:a3:20:
ed:e4:52:b1:d8:80:30:d9:41:8d:af:5f:8d:7a:7e:
92:12:3a:af:69:8f:04:73:bd:df:8c:0d:a8:e5:16:
ae:64:0a:e8:da:b8:41:d4:1e:16:36:ce:48:d1:bd:
87:86:2d:97:0f:e6:ed:e1:d5:67:a8:87:86:3e:67:
5a:09:a6:27:d3:ac:d0:e0:1a:e7:6b:dc:31:2e:f4:
d4:d2:8b:0a:b4:b6:73:99:df:b2:1c:94:25:f4:f4:
0b:8b:6c:dd:da:1a:cd:35:f3:eb:69:e1:9f:bf:d2:
3e:50:aa:c8:ce:0a:e6:6b:f9:3e:a2:4c:74:5e:4a:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:96:9B:B6:DF:5C:AC:C9:EB:B1:25:14:41:B8:D3:DC:C3:BF:B1:57
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:de:51:2f:5c:b0:aa:2c:55:82:f2:1c:1a:88:d2:06:79:1a:
75:af:12:64:91:62:f9:1b:ec:29:4d:ed:32:38:0e:4a:c2:96:
e2:ec:4e:22:df:e0:34:1a:bc:b7:a5:6b:85:ba:97:b2:91:94:
f2:41:1f:73:41:12:38:88:45:d6:3f:b8:84:a4:8e:1e:13:57:
06:10:96:bf:e0:80:63:48:11:8a:49:73:0b:17:47:7b:69:d4:
f5:85:a9:6a:dc:c9:f5:c8:01:09:ca:24:b3:e6:3e:29:85:c7:
f3:be:53:21:98:a7:af:93:2a:f1:08:d3:28:cc:ec:03:5e:00:
07:2d:2f:3a:d4:a8:e6:d5:38:fd:e0:c7:e7:80:d4:0f:89:d5:
fb:87:8e:b3:04:d5:1c:93:a6:92:d0:21:0f:ba:64:88:2c:5c:
50:28:f6:f7:d7:6b:6f:72:84:1e:44:ff:64:19:c1:1b:8f:7d:
6a:41:4d:ec:ad:46:6d:5b:3b:7f:e9:f5:ca:04:40:d4:89:c5:
b7:31:c6:5c:3f:97:de:b9:28:06:a3:d9:92:da:b9:3f:2b:43:
31:c8:b1:dc:6d:7f:af:ef:97:e6:9f:ea:ed:c1:9b:3f:20:ac:
f1:29:eb:1c:6b:fd:3d:b1:15:e7:1e:46:66:d7:cf:b9:01:9a:
af:50:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:14 2025 by rpki-client