Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
File: KvD7S5rcsuyisQbeCok5YVlszRg.mft (raw, json)
Hash identifier: AwI9e2n/u5yGaMYKn23jYjH2CZYJ1tABGwBgqbukd/c=
Subject key identifier: 8D:3C:EE:06:A7:AB:B5:B8:57:78:E9:ED:5C:6C:87:49:2D:B0:1C:2A
Authority key identifier: 2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
Certificate issuer: /CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Certificate serial: 0199FC590340E2274ABCE25F76D4A7C5501F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
Manifest number: 0D64
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: KvD7S5rcsuyisQbeCok5YVlszRg.crl (hash: 4RebLBTEsKOpx/MScpuTGen3XVMPZXS8K6AqbaiddZ0=)
2: zXRn6qUdykmyNBlVs8F5lijyofI.roa (hash: ocGQIF9V1x5fsDLwah9aysnQL0wM33g0zDeGg9Z68IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:03:40:e2:27:4a:bc:e2:5f:76:d4:a7:c5:50:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=8d3cee06a7abb5b85778e9ed5c6c87492db01c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:51:98:b7:bf:c7:d2:78:dd:55:4b:0b:3b:
c1:26:70:1c:4d:7f:47:74:7a:c9:48:b3:17:4c:f4:
be:0a:f5:de:56:aa:7e:da:d1:55:9b:e8:4e:7d:6b:
1c:27:c1:f7:99:2b:d1:d8:31:e4:dd:76:cf:a2:52:
5e:66:69:88:1b:e8:1b:97:85:c6:1f:79:e0:05:e4:
dc:48:4f:c0:1c:13:6c:07:32:d2:d2:a1:3d:98:fd:
eb:73:b7:7f:29:a5:69:d0:54:3d:f6:50:f4:66:23:
44:c8:f6:5b:7d:c6:a7:d2:e2:c0:da:71:94:b0:73:
dc:c4:01:57:12:fc:17:0f:10:58:1e:40:87:5e:ec:
14:7a:20:83:27:6e:72:a4:16:c3:d1:c6:4f:53:0e:
d4:b8:1a:db:5d:e0:42:88:7d:fd:4f:48:fa:41:ae:
5a:3b:72:6f:35:08:c2:c8:cc:1d:f2:9f:f7:20:fe:
28:63:4e:b8:36:57:f3:61:08:d4:38:f9:7e:8d:49:
ff:60:01:3c:44:23:cc:72:11:f9:f8:e9:c5:54:3d:
b0:2e:1c:a4:84:83:e5:8e:6e:04:d1:d0:7d:09:36:
75:12:46:2f:41:ff:62:1d:b9:a3:55:1c:19:19:79:
2f:46:50:ae:4d:e7:36:04:7b:be:18:35:ea:d3:e9:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3C:EE:06:A7:AB:B5:B8:57:78:E9:ED:5C:6C:87:49:2D:B0:1C:2A
X509v3 Authority Key Identifier:
keyid:2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a6:d8:bf:9f:23:be:5f:8e:4e:67:c3:a0:4c:f5:75:c2:d2:
50:eb:36:62:f9:df:9f:ab:33:9a:b3:5e:f9:66:0a:0f:66:7c:
05:fc:e7:52:8f:3e:a1:14:6c:0f:3e:37:87:90:a1:8a:6a:b0:
69:f2:33:85:94:35:69:bc:78:b7:75:b9:16:78:ca:fb:b8:83:
b1:97:13:c1:42:60:97:54:17:ee:e4:ac:81:fe:fb:ea:59:d9:
d4:de:de:65:60:9a:17:99:16:fb:88:0a:7d:d0:75:c9:f9:7e:
3a:c9:e2:18:bc:a7:c1:f9:fd:df:e2:d0:b6:9f:76:2d:ba:d7:
44:4a:11:08:44:03:65:f3:eb:9b:9d:79:ef:ed:03:a0:58:08:
46:49:5f:1b:72:e5:5d:8b:56:52:14:11:a3:44:fb:4d:d2:f7:
ed:50:47:60:d1:46:02:4a:b9:ae:ed:f8:bd:cd:1e:56:8a:22:
6f:37:f3:f9:2b:4a:1b:97:09:12:4b:eb:2d:78:0b:5a:60:85:
a1:6a:73:19:75:19:e8:87:5d:73:68:23:6f:38:c9:3c:3f:b8:
0c:ec:dc:82:a7:00:06:9e:e2:26:d0:b2:51:18:24:1b:5a:f7:
af:bb:14:81:1e:8c:7c:d0:75:77:20:40:16:73:a7:88:2d:fb:
84:80:13:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:59 2025 by rpki-client