Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: 3MeIohtF02ZIxohF7XX6xtEKV6PKfADy40C0Wg7JX3s=
Subject key identifier: D2:E9:06:B7:F1:FF:16:1A:24:C3:9B:15:F5:E5:25:5E:2A:85:51:37
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 0199FBEBB7E7F5FD41D7D4BD5DE71D6ECA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 0EA8
Signing time: Sun 19 Oct 2025 10:02:33 +0000
Manifest this update: Sun 19 Oct 2025 10:02:33 +0000
Manifest next update: Mon 20 Oct 2025 10:02:33 +0000
Files and hashes: 1: 2muVnH1_oI_9ztpeyJIqq88lM1c.roa (hash: UznFOVn685h5ihMi8FItxWdR/wWRBKXy+8YPxE2cn9c=)
2: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: PlqoOX2c5q7lEHj2yoi/AZqcp3Th9oiPrNeZzdLxaWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b7:e7:f5:fd:41:d7:d4:bd:5d:e7:1d:6e:ca:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Oct 19 10:02:33 2025 GMT
Not After : Oct 20 10:02:33 2025 GMT
Subject: CN=d2e906b7f1ff161a24c39b15f5e5255e2a855137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:5e:a3:8d:c3:1a:81:a1:08:3b:c1:06:36:
5d:65:95:a7:4f:4f:f5:d4:64:8f:46:76:40:4f:72:
d5:94:e9:62:50:8e:4e:6e:79:f1:80:24:51:b4:32:
28:5f:99:bb:16:e2:c9:37:b0:38:43:02:f3:a9:61:
23:4d:d6:49:9e:2b:cc:dd:ca:d6:da:62:56:b4:69:
66:26:fa:47:30:09:a5:96:d4:d2:ba:df:b2:b4:cb:
c1:48:b0:81:a3:37:02:98:d7:0e:cb:f2:4d:02:58:
d7:8f:18:a7:fb:e5:2f:e0:c9:05:1f:24:c4:c9:74:
f4:6b:44:6f:b3:99:2e:c7:c3:54:9b:a5:fb:9e:f1:
4a:a8:e5:0b:d7:32:08:73:8a:e2:e6:05:42:95:85:
ea:9b:0e:73:49:3a:56:b2:44:d3:6b:f0:5f:dc:7e:
3b:00:1a:17:2a:37:f5:cd:b7:02:01:85:0a:93:0e:
d8:f2:1e:43:25:f6:0c:51:ea:cd:73:99:b7:81:23:
c0:03:a2:04:1a:c8:80:c4:a3:da:b8:1f:a1:dd:a3:
bd:26:6a:b4:0d:87:fb:51:3f:c8:53:cc:e3:f4:63:
e1:ef:b2:e6:90:61:d6:c7:e4:03:d2:0c:1f:7a:4a:
c3:a4:fe:f2:f5:df:4c:17:07:90:25:36:73:d3:e8:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E9:06:B7:F1:FF:16:1A:24:C3:9B:15:F5:E5:25:5E:2A:85:51:37
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:df:7e:64:e7:da:b2:77:84:d3:8b:8b:b5:c5:50:60:60:d3:
34:e0:e6:2d:25:33:74:d9:51:08:81:b3:c5:a7:96:b9:1a:f7:
44:bd:0a:43:d7:7f:5e:08:79:44:17:2f:76:c4:e1:de:54:78:
d8:fe:a7:78:ab:79:38:16:ef:39:b0:77:37:49:ed:1f:e8:cc:
d9:69:b0:c0:10:a4:97:8d:a6:c4:61:c0:b3:fc:c7:1e:22:18:
72:85:48:77:95:db:83:f7:d5:aa:ed:a5:39:fc:7e:ea:66:b3:
e3:7e:f2:d5:4c:1b:4f:62:89:d3:a9:ea:54:c3:52:53:8f:4a:
a3:1b:ae:3b:a3:c5:66:bb:90:3e:7f:62:3e:56:2d:0c:b3:c3:
24:b9:57:4c:a6:59:f1:3a:1d:6d:a7:64:7d:38:cf:43:76:c1:
ca:3a:b4:b5:14:ce:48:e9:45:d3:66:9f:a9:69:fa:0d:80:3c:
d0:d4:de:11:b4:59:63:32:9b:0b:a8:70:f8:ee:77:d9:f1:69:
53:f0:25:a2:2f:ee:04:33:b2:21:2c:61:06:c9:e4:2f:a9:f7:
f1:bd:37:15:2e:0c:17:cd:df:8b:c6:cc:1f:00:1a:a9:2c:4b:
d3:eb:73:24:b2:e3:c2:9b:b5:47:03:23:e5:b0:3e:a2:fd:e7:
2e:2a:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:19 2025 by rpki-client