Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: ASBOraa33IX+GtEFcJ7XmPejiGjjxR+KqXQJJ4udmng=
Subject key identifier: 72:06:7D:65:60:BF:19:C0:BC:F2:B2:4F:28:91:EF:B9:B4:6B:EA:21
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 0199FC2169219E2BF2C731CF5386E7693A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 13EC
Signing time: Sun 19 Oct 2025 11:01:11 +0000
Manifest this update: Sun 19 Oct 2025 11:01:11 +0000
Manifest next update: Mon 20 Oct 2025 11:01:11 +0000
Files and hashes: 1: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (hash: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=)
2: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=)
3: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: phXNsxRGB/Y/m2ofWeljdK/HLNluNGyqHAWh7Z5egSY=)
4: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:69:21:9e:2b:f2:c7:31:cf:53:86:e7:69:3a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Oct 19 11:01:11 2025 GMT
Not After : Oct 20 11:01:11 2025 GMT
Subject: CN=72067d6560bf19c0bcf2b24f2891efb9b46bea21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c8:1f:06:a6:b8:00:46:96:eb:c8:7a:45:ab:
e7:9a:07:df:1d:7d:6d:97:32:07:fb:3d:ee:44:82:
c4:2f:ab:f0:c3:de:fd:81:65:00:af:50:5e:89:23:
08:42:66:77:08:39:c5:27:b8:f4:78:03:36:df:74:
b3:53:b4:d0:3c:32:23:ce:c2:e4:21:66:d5:f5:61:
36:59:81:1b:bd:04:57:d3:ad:2f:d7:87:1c:bf:e5:
94:8f:89:c4:ed:8e:7e:85:04:24:f0:34:2b:48:34:
15:61:4f:7b:48:e8:1d:e5:9b:c9:37:62:78:b0:4b:
22:9b:a7:33:54:8d:76:22:3f:eb:1d:ff:e4:cd:54:
33:77:51:48:68:2a:dc:66:b7:fd:f4:91:d9:4b:ae:
93:62:8e:89:ff:d4:d6:f7:ef:da:33:81:32:87:d9:
53:ee:77:0c:b1:c2:65:fc:32:f8:32:8f:c9:8e:35:
89:5a:04:6a:80:2c:c0:24:ef:68:e3:11:8d:f7:f5:
40:de:b6:3f:39:ad:97:a8:2d:18:24:1e:a9:13:22:
8f:2d:87:9c:f8:36:3c:63:22:95:ba:51:5c:c5:c0:
99:88:65:55:02:d7:ea:2c:9c:8b:cb:d4:ae:db:be:
f0:43:36:9e:f6:9b:54:ac:d8:d2:09:0a:a6:30:74:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:06:7D:65:60:BF:19:C0:BC:F2:B2:4F:28:91:EF:B9:B4:6B:EA:21
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2c:17:3c:9d:04:cc:0a:c2:78:65:4d:71:c6:77:d3:a9:34:
53:72:2e:92:5a:23:fd:2f:2a:88:29:84:be:66:40:ca:90:b3:
1e:8d:3d:f2:54:d0:25:c0:14:11:ad:4f:8e:d4:00:8e:4d:0b:
ec:fe:2c:14:16:cb:8a:ae:68:49:12:7c:35:e4:71:80:92:e2:
64:78:0e:3e:4d:ae:72:17:00:1d:25:4f:cf:6f:32:e8:5d:18:
f4:71:22:0d:36:27:27:f4:4e:27:e1:3f:4c:48:ab:10:79:73:
f4:b8:25:62:b1:37:bf:94:db:fb:cf:4b:00:b5:b0:e4:0e:f3:
60:9f:be:ab:2e:3e:94:ad:e4:9f:9f:51:09:59:b3:3c:5e:8c:
4a:ed:ec:dd:87:de:e4:01:d8:92:9c:8c:d4:25:8a:1d:a0:c3:
3c:25:05:b9:35:f7:6b:b7:f9:1f:ae:fe:66:1f:8e:5f:94:ab:
f0:98:2d:5b:c8:f9:57:bb:df:cc:8a:69:00:04:68:49:e4:28:
d6:57:dc:8d:e2:ed:bb:d7:4b:88:a6:5f:0a:8c:23:ed:67:77:
28:93:b9:a1:b8:59:be:41:7b:8a:ad:3b:d2:b6:74:66:a3:c8:
44:75:45:b1:ce:5f:f2:37:99:09:41:35:b5:bc:1c:fb:07:d7:
19:74:47:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWkhnivyxzHPU4bnaTouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YjBmZjc5OThjYTg4NTRjZTdjNDc1YTk3MmVkMWQ1MmE1
YzYwY2QwHhcNMjUxMDE5MTEwMTExWhcNMjUxMDIwMTEwMTExWjAzMTEwLwYDVQQD
Eyg3MjA2N2Q2NTYwYmYxOWMwYmNmMmIyNGYyODkxZWZiOWI0NmJlYTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sgfBqa4AEaW68h6RavnmgffHX1t
lzIH+z3uRILEL6vww979gWUAr1BeiSMIQmZ3CDnFJ7j0eAM233SzU7TQPDIjzsLk
IWbV9WE2WYEbvQRX060v14ccv+WUj4nE7Y5+hQQk8DQrSDQVYU97SOgd5ZvJN2J4
sEsim6czVI12Ij/rHf/kzVQzd1FIaCrcZrf99JHZS66TYo6J/9TW9+/aM4Eyh9lT
7ncMscJl/DL4Mo/JjjWJWgRqgCzAJO9o4xGN9/VA3rY/Oa2XqC0YJB6pEyKPLYec
+DY8YyKVulFcxcCZiGVVAtfqLJyLy9Su277wQzae9ptUrNjSCQqmMHQ1SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIGfWVgvxnAvPKyTyiR77m0a+ohMB8GA1UdIwQY
MBaAFCiw/3mYyohUznxHWpcu0dUqXGDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDIt
MjY3NTQ3ZWExZTM1LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDItMjY3NTQ3ZWExZTM1
LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECwXPJ0E
zArCeGVNccZ306k0U3Iukloj/S8qiCmEvmZAypCzHo098lTQJcAUEa1PjtQAjk0L
7P4sFBbLiq5oSRJ8NeRxgJLiZHgOPk2uchcAHSVPz28y6F0Y9HEiDTYnJ/ROJ+E/
TEirEHlz9LglYrE3v5Tb+89LALWw5A7zYJ++qy4+lK3kn59RCVmzPF6MSu3s3Yfe
5AHYkpyM1CWKHaDDPCUFuTX3a7f5H67+Zh+OX5Sr8JgtW8j5V7vfzIppAARoSeQo
1lfcjeLtu9dLiKZfCowj7Wd3KJO5obhZvkF7iq070rZ0ZqPIRHVFsc5f8jeZCUE1
tbwc+wfXGXRHZg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:25 2025 by rpki-client