Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
File: KEo1xF93T6_4QkXOEkvcZVx0Uos.mft (raw, json)
Hash identifier: oBdcy7UhyB4Av6G6qVAr/AzekBMRnNeTUXI0guYUc/I=
Subject key identifier: E1:69:72:8B:DE:68:28:FA:CB:DC:CE:4B:86:62:92:47:21:B5:69:D3
Authority key identifier: 28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
Certificate issuer: /CN=284a35c45f774faff84245ce124bdc655c74528b
Certificate serial: 0199FC585F1E28F48E3B9A646BBC98946AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
Manifest number: 07B3
Signing time: Sun 19 Oct 2025 12:01:13 +0000
Manifest this update: Sun 19 Oct 2025 12:01:13 +0000
Manifest next update: Mon 20 Oct 2025 12:01:13 +0000
Files and hashes: 1: KEo1xF93T6_4QkXOEkvcZVx0Uos.crl (hash: S+I4srU479/AkeM2Dqd4blv6UxAOpT+8J3OrzjiGHR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5f:1e:28:f4:8e:3b:9a:64:6b:bc:98:94:6a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284a35c45f774faff84245ce124bdc655c74528b
Validity
Not Before: Oct 19 12:01:13 2025 GMT
Not After : Oct 20 12:01:13 2025 GMT
Subject: CN=e169728bde6828facbdcce4b8662924721b569d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:e2:a2:33:29:bb:3a:3b:1a:40:ad:51:91:
11:e2:bd:7e:8e:d6:97:7e:ca:46:3d:c8:fd:0b:19:
b2:ff:e0:30:a6:99:e2:50:fc:9b:43:9b:d0:99:21:
30:60:c0:d8:1d:7d:da:9b:40:c3:aa:68:1b:68:24:
20:b8:85:87:2c:cc:31:3c:e0:d7:17:4a:ed:c4:f5:
af:e7:bb:d9:3e:8e:0d:47:bb:ce:7d:66:48:a3:0a:
07:49:55:73:69:1d:61:9a:f1:0e:45:24:05:78:70:
ee:fe:3e:42:80:f7:b9:06:ea:49:8d:16:d6:cc:3f:
d4:34:07:3d:00:5c:87:fe:f1:85:83:7a:88:dd:39:
dc:25:22:17:49:00:ba:af:8e:26:62:df:92:3c:8a:
b9:d6:95:9c:99:46:2b:47:24:c1:5f:b5:d6:10:f4:
5c:42:cf:bb:97:db:57:2e:04:de:46:35:12:6a:d2:
63:e9:0e:14:eb:8b:e3:c4:02:ed:2c:13:ba:2b:23:
aa:4a:c7:2a:38:01:ef:47:9b:d3:7b:4f:9f:41:8d:
21:e5:9d:35:57:dc:74:49:86:95:7e:87:01:fc:c7:
2f:a7:49:f6:a6:6d:c4:e1:a5:3c:ee:2e:a9:cf:fb:
2f:99:38:ca:2a:b8:b2:ca:81:46:ad:76:be:10:df:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:69:72:8B:DE:68:28:FA:CB:DC:CE:4B:86:62:92:47:21:B5:69:D3
X509v3 Authority Key Identifier:
keyid:28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6e:4f:c2:ba:a7:3a:a6:23:05:7e:ca:95:68:4a:fb:42:91:
8c:40:ae:73:a9:82:d2:07:4b:ee:eb:e7:0b:02:b6:72:2e:7c:
8e:23:5b:85:c2:80:b9:18:b3:fa:8c:45:d6:7a:9d:91:89:60:
d8:bd:f7:38:34:27:34:23:fd:75:33:08:8f:f3:3f:5f:e3:b1:
c4:10:a3:c3:af:00:42:13:8f:5a:cb:8b:2d:b5:0e:b6:09:1d:
f3:2b:ce:97:7d:c1:f7:ec:bb:49:36:e2:ef:1f:78:4c:20:af:
75:79:10:81:c6:ad:5d:a6:af:84:6c:a2:7d:3e:6b:3c:b0:d1:
68:70:f1:8e:26:83:61:de:18:0c:80:1a:aa:8e:8b:6a:f6:01:
65:58:95:12:d2:da:ff:f9:65:3d:27:2c:a4:98:ec:2a:cb:a4:
eb:ba:06:b4:50:0f:03:43:72:82:a4:bf:b6:58:d1:04:4c:51:
bf:e8:e3:e2:37:66:2d:1a:6a:dc:cf:05:bf:e9:79:2a:f3:bf:
0f:4f:54:ef:7c:8d:3e:20:e7:b2:34:bb:f4:b1:a9:0e:fe:2b:
b5:1f:a9:33:36:c8:fb:1b:d3:9e:f2:5e:48:50:c4:6c:29:82:
4a:f9:c6:99:8b:62:6d:31:8e:a3:6c:81:be:c6:dc:63:f2:4c:
c3:20:15:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:20 2025 by rpki-client