Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: /bn9wBpMxloFUm5BC8nhcKuDBNQIixzRvCXfAHIc0HA=
Subject key identifier: 1A:4F:F9:36:F0:56:01:E3:05:D6:31:9F:0B:3F:E9:D5:18:05:AA:97
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 0199FA6A986F8AD176EAA44C924D52FF3AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 13EF
Signing time: Sun 19 Oct 2025 03:01:53 +0000
Manifest this update: Sun 19 Oct 2025 03:01:53 +0000
Manifest next update: Mon 20 Oct 2025 03:01:53 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: mrdVYbJJ2AHRfLPbiqMwv27o7xr25mJT+JduBaxneN4=)
2: UtENKEhEm8aI0Ou7bKpM_GJZgfw.roa (hash: uJUKEvtya4FeDlxGJPwjMFWIfPRKUsKW7PNJHjdDHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:98:6f:8a:d1:76:ea:a4:4c:92:4d:52:ff:3a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Oct 19 03:01:53 2025 GMT
Not After : Oct 20 03:01:53 2025 GMT
Subject: CN=1a4ff936f05601e305d6319f0b3fe9d51805aa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:cf:f9:08:0d:9b:79:89:68:a3:7e:0a:45:
4e:09:29:37:ce:4e:51:1b:8d:8f:ba:3e:fd:13:17:
ed:b1:33:7f:5d:db:4c:1e:6c:3d:fe:10:03:ba:94:
5e:2d:d4:7b:b4:7f:8f:2c:13:21:d5:a3:d6:bf:bf:
39:3b:46:7c:98:05:51:46:4a:1d:2f:84:89:50:6e:
41:4e:f3:43:e5:8d:ee:0b:28:ee:54:3c:86:2c:08:
ec:b1:dd:b5:67:39:87:c0:4d:70:19:5c:6e:37:78:
24:cf:07:f4:16:39:7c:a7:ae:37:fe:35:97:cf:f7:
a9:d1:c3:3c:10:77:d9:1c:ee:c4:2d:ed:e1:6d:1b:
7c:d7:34:24:6e:d5:08:11:d2:4c:bb:44:37:2b:7d:
36:84:d0:73:43:3f:7c:3c:0e:e7:31:de:47:96:62:
38:06:87:e4:bc:9b:43:d1:5e:44:ce:a1:d7:e2:a2:
4b:14:5e:01:c1:c4:53:f2:36:72:c6:e4:3c:61:d2:
8c:a4:8f:1f:cd:45:34:a8:0b:31:75:b1:b3:e3:bd:
d3:c3:0b:9e:76:92:fb:b8:9f:3d:ff:d6:0d:5d:01:
61:31:9e:d1:f6:3c:94:1a:1e:d6:02:0b:10:36:17:
72:70:54:4f:97:a1:58:93:27:87:77:7c:8c:56:b9:
70:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4F:F9:36:F0:56:01:E3:05:D6:31:9F:0B:3F:E9:D5:18:05:AA:97
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2d:e2:b7:b5:ca:b5:fb:e4:0f:5d:87:86:ad:4c:82:2d:e8:
ef:d8:8f:02:66:6f:03:c8:05:76:26:01:db:84:56:b6:df:61:
64:41:95:e4:c4:07:83:5e:37:40:84:50:e8:d4:05:47:ec:92:
21:a0:c1:5a:9b:9d:1d:da:df:a3:64:72:27:5e:0f:a7:ab:4d:
6b:d6:39:1a:a3:97:e0:22:13:7a:a9:7a:8c:fc:78:e2:7d:ae:
04:1a:5b:0b:83:2f:d9:67:2e:1f:25:43:16:8a:64:84:c8:44:
a6:3d:e3:30:d9:3d:fb:97:1d:e8:68:c2:b1:f6:4c:08:68:ba:
cb:4f:1e:1a:ed:94:28:b0:70:d1:69:a1:9f:f6:5d:b6:d8:c2:
2b:4f:1e:67:f9:95:9e:83:62:64:d7:16:f0:6c:05:43:dc:db:
fc:1e:ab:76:8d:0e:6a:a6:9b:61:7b:68:87:2c:3d:39:ca:fb:
70:b0:60:ba:02:72:95:85:66:2c:86:80:49:6e:ba:9c:be:de:
ea:93:35:2f:c7:f9:29:ea:a2:3f:5e:a8:33:16:23:36:4a:fc:
4b:f4:de:7c:c5:65:78:42:5f:95:a2:1e:c0:94:84:9f:b4:43:
1f:97:54:a6:fa:c1:9b:11:e4:22:77:b8:f6:81:07:a0:a4:c7:
ee:b5:6c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:15 2025 by rpki-client