Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
File: KVZYS3DOhHwam0AFSLFNsDG-3_I.mft (raw, json)
Hash identifier: SCH5nA9L4SjWby3PMFCkZW/32mwKun+fmzsnoLUrE+0=
Subject key identifier: E4:D7:9E:A8:F6:B5:1F:53:DF:BB:B4:85:A7:A9:88:5D:68:AB:F9:DC
Authority key identifier: 29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
Certificate issuer: /CN=2956584b70ce847c1a9b400548b14db031bedff2
Certificate serial: 0199FD6B0D0061BC5FF73BD77E30EAEFC311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
Manifest number: 09C7
Signing time: Sun 19 Oct 2025 17:01:15 +0000
Manifest this update: Sun 19 Oct 2025 17:01:15 +0000
Manifest next update: Mon 20 Oct 2025 17:01:15 +0000
Files and hashes: 1: Hg9ftZU-9AaUb-uuud6YLmFeeqc.roa (hash: kIMrWnLBKnZqV6WvzFWIcWQTCQyb5mE+suXdE7Wee/M=)
2: KVZYS3DOhHwam0AFSLFNsDG-3_I.crl (hash: i89OP0JUwbhgErAPsPZSrDcOisNMvqZNxD1EEIKtrmE=)
3: UY5PADzbeIj93cBuCOAZIezRods.roa (hash: 94p+JoB1n19vWg1B3h2izrs5nmNxhhnj9iR596bjT+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:0d:00:61:bc:5f:f7:3b:d7:7e:30:ea:ef:c3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2956584b70ce847c1a9b400548b14db031bedff2
Validity
Not Before: Oct 19 17:01:15 2025 GMT
Not After : Oct 20 17:01:15 2025 GMT
Subject: CN=e4d79ea8f6b51f53dfbbb485a7a9885d68abf9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:22:20:92:57:64:c5:04:4d:b3:95:9f:57:
39:7b:c5:78:00:03:b0:b8:eb:da:57:77:92:d9:df:
63:93:26:81:60:7d:33:66:2a:dd:34:71:02:2d:89:
19:ee:33:39:79:b7:00:de:8a:83:08:06:36:a5:dd:
9e:ea:a5:4f:f7:3c:66:0c:bf:63:59:46:eb:de:70:
4e:55:bf:b9:39:76:2c:2c:e3:91:27:60:12:fe:ff:
da:96:02:13:01:63:f9:9b:51:25:63:5e:36:da:58:
5a:b3:b5:f8:b1:8f:50:78:9a:58:2c:27:61:72:27:
39:a0:c1:a7:17:52:c5:a4:11:22:fb:9d:96:f6:f9:
8a:17:84:2c:2e:8e:4b:e6:c0:d9:8b:58:32:1e:32:
4f:3f:e0:1b:0c:2e:18:dc:da:3d:4a:f8:dd:6f:3a:
a9:d9:2a:f7:a8:c1:8b:3f:3a:36:c3:e4:fb:2e:88:
45:cc:0f:bf:0d:2b:f7:df:9a:f6:a9:31:51:54:f6:
9c:a8:fd:11:9b:f6:77:fc:f0:06:2a:72:8a:98:b2:
52:c3:09:b3:38:1d:39:ff:8f:92:f5:5e:db:c1:b1:
c5:fd:80:e9:7e:a8:59:c1:a6:da:54:cf:9a:a0:11:
94:cc:38:65:21:ca:b3:e9:d3:2a:fb:64:00:72:b5:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D7:9E:A8:F6:B5:1F:53:DF:BB:B4:85:A7:A9:88:5D:68:AB:F9:DC
X509v3 Authority Key Identifier:
keyid:29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:03:21:9e:7f:cc:f4:ca:c7:ed:41:08:6a:cd:f3:12:44:f6:
ed:6b:4e:3d:06:41:26:60:32:e3:bc:50:96:4a:79:ab:66:b2:
30:b2:bd:5d:0d:2e:28:de:1f:db:9e:c6:62:2e:12:c5:bc:3f:
95:03:4c:24:be:9e:b4:ca:13:18:54:54:c9:66:c2:69:f9:b0:
e0:db:c8:6e:0e:0a:e0:d2:dc:72:bb:eb:0c:7b:a8:d1:7c:3a:
50:73:fc:c4:f6:ec:fb:f9:78:a4:a5:7f:ce:86:f5:86:d0:02:
92:df:b8:39:98:eb:7a:46:8a:3d:f5:01:03:02:b3:76:bc:88:
a8:8c:bd:62:f9:de:7d:72:b9:3d:2e:54:74:ae:12:f6:b0:74:
bf:b4:2d:bd:b6:97:cd:a8:19:61:56:4a:7d:27:26:f8:d3:d9:
b4:63:a2:85:16:d0:f4:0a:17:b3:93:24:39:72:2b:86:c3:3f:
50:44:71:6b:3b:e0:0e:9d:2e:4e:bf:8c:f5:1b:65:97:a9:6a:
d6:e8:a2:89:47:ff:cf:ce:73:e7:4d:ca:4b:a3:75:30:35:fa:
73:ca:34:82:e4:e0:10:ab:07:3f:a5:d4:6a:18:97:89:f3:c7:
f9:04:83:91:83:00:c7:3e:dc:34:07:69:bd:9e:10:89:76:31:
58:4c:97:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:59:27 2025 by rpki-client