Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: qwVqjCIQk0NlnqSmeZe8bk2wz6QeIgCLcM5bvZUhqV4=
Subject key identifier: D4:8C:1E:63:FC:52:A0:2C:1F:A5:74:33:7B:DF:D5:AD:1A:03:A1:C4
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 0199FC8F919D533140285A3B66C35381553E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0A1A
Signing time: Sun 19 Oct 2025 13:01:31 +0000
Manifest this update: Sun 19 Oct 2025 13:01:31 +0000
Manifest next update: Mon 20 Oct 2025 13:01:31 +0000
Files and hashes: 1: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: E1j9m7QHdJLiDNJLBZuiFNtn65JwrAtlN5tKxzvofSc=)
2: TRmQsqo38AvFLgeV_m9TBYH8n00.roa (hash: qW2qJnlmGn6g7rOMXIGst8HJCwyD3TG1rYc3G+brA8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:91:9d:53:31:40:28:5a:3b:66:c3:53:81:55:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Oct 19 13:01:31 2025 GMT
Not After : Oct 20 13:01:31 2025 GMT
Subject: CN=d48c1e63fc52a02c1fa574337bdfd5ad1a03a1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:0c:56:87:5e:bd:e7:08:66:b0:89:16:4a:
db:ee:bc:71:b1:71:ab:e9:ca:c7:d6:fa:bd:a9:ba:
8d:09:5d:61:fb:c0:60:74:1d:d0:d9:24:a8:32:fb:
9c:30:92:29:e5:3a:63:35:92:04:9b:82:00:ce:c3:
38:b2:bd:ce:79:24:92:ba:f7:f0:58:bb:ba:3c:bd:
fd:b6:9d:cb:6a:89:9a:d3:d9:8f:98:76:c0:67:d5:
0d:f9:12:5a:65:dc:4a:a0:17:1b:7e:cf:87:49:e8:
ce:a8:2d:de:60:15:f1:35:69:c2:a6:e1:5b:cb:cc:
42:01:d8:40:a4:c6:58:25:af:35:f2:02:20:d4:92:
07:72:79:6c:28:2e:c9:e8:15:9b:56:6b:db:08:6f:
c2:9f:60:ee:54:b3:ed:6a:58:35:34:14:42:b3:08:
4b:65:ee:56:a5:18:c9:5c:ff:90:da:12:9b:50:12:
24:3e:b6:c1:82:7e:3e:a5:d8:8a:db:58:99:4c:5a:
2c:bf:dd:15:55:36:d5:8e:74:9c:a4:54:67:4e:3c:
1d:57:90:18:a8:b5:bb:97:9b:57:c9:2f:a1:29:55:
9c:ea:4b:dd:5b:b1:df:81:b3:c0:77:3a:2f:e7:66:
77:4a:11:d1:52:e9:42:8b:ef:52:1c:18:49:5e:11:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:1E:63:FC:52:A0:2C:1F:A5:74:33:7B:DF:D5:AD:1A:03:A1:C4
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:c4:d8:e4:b5:69:85:53:2a:ce:af:bd:e7:74:04:c7:09:
69:0a:04:52:dc:89:aa:39:d6:04:e5:f9:0b:58:6d:ad:b7:19:
48:f5:04:1e:5c:92:1e:e7:f8:ad:3b:9c:0c:38:4f:b5:12:d6:
36:51:15:d5:46:8e:fa:36:a8:78:d0:f6:bd:13:df:6e:b8:e3:
ee:66:f4:3f:a7:c6:92:8c:18:20:21:5d:23:99:93:83:0b:48:
6c:79:56:96:a7:32:f7:97:0a:0d:d0:6b:19:e7:d2:51:4b:8b:
80:0e:af:4d:17:f2:12:3c:e5:2d:52:92:0a:38:0e:3e:35:8d:
b5:cd:0d:9e:0a:10:f6:1a:b6:64:a1:fa:1e:8b:87:ad:b3:60:
40:0d:b3:d0:86:3a:81:21:fc:01:d8:cf:96:fc:d7:d1:e0:88:
e1:32:fb:06:69:38:d0:c6:4a:83:65:f1:d3:e7:be:75:d0:d1:
29:82:f1:7b:e1:f2:94:61:f6:e5:71:3d:5a:46:4f:f0:14:6c:
7f:f3:04:93:11:9c:1c:ab:c6:5c:47:7b:5c:a2:6d:68:70:2f:
81:7f:89:99:49:3a:02:30:d1:87:cc:ac:ea:ed:7a:00:02:d7:
83:75:a5:10:fb:b5:11:bf:9e:87:1b:21:bf:7e:f8:4f:94:5f:
ca:40:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:38 2025 by rpki-client