Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
File: KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft (raw, json)
Hash identifier: GL3HCGK8VA/Im+AEGkrLY2CKbAanDz7gfbEY9kD8N34=
Subject key identifier: F1:C5:F9:7E:AD:BF:E6:5B:CD:50:2C:C9:DE:22:C0:DE:34:D6:B4:93
Authority key identifier: 28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
Certificate issuer: /CN=28bbb54e37826c0390b04379279f8e06cff3a234
Certificate serial: 0199FDDA2131CC2E50407B833DEEFDE63353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
Manifest number: 05FC
Signing time: Sun 19 Oct 2025 19:02:34 +0000
Manifest this update: Sun 19 Oct 2025 19:02:34 +0000
Manifest next update: Mon 20 Oct 2025 19:02:34 +0000
Files and hashes: 1: KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl (hash: rqbE9gJUcDIyX6hTo/8HcQ4slhEwuZdGKk3qAyS+dio=)
2: N3FIvLoAi-SrbWKri-QxAJXERl0.roa (hash: oePUnAR/4Fy7x02aEJQp05kRfdkIvxnqMAYzYP5D1B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:21:31:cc:2e:50:40:7b:83:3d:ee:fd:e6:33:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbb54e37826c0390b04379279f8e06cff3a234
Validity
Not Before: Oct 19 19:02:34 2025 GMT
Not After : Oct 20 19:02:34 2025 GMT
Subject: CN=f1c5f97eadbfe65bcd502cc9de22c0de34d6b493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:5c:58:1f:42:8a:79:41:8e:e4:de:f5:e7:
11:0b:4e:93:3f:ea:a5:d1:a8:61:94:81:a7:f2:be:
91:10:95:5d:2d:de:91:32:ef:5e:ff:e5:06:46:2b:
3f:7a:51:b9:20:0f:77:b4:8d:af:cc:32:94:11:7c:
ac:e8:ef:41:7a:21:bd:48:00:12:af:dc:ef:70:54:
ce:d6:51:7a:43:55:01:ef:a4:f0:4b:19:df:d0:4d:
33:b1:18:39:98:8c:62:78:09:f5:65:70:07:c9:8c:
ec:95:23:25:95:03:72:27:e7:61:5f:13:4b:7b:30:
02:51:db:7a:de:2f:17:f1:89:df:f0:7e:94:d9:f4:
b7:ed:e8:cb:e9:0d:33:1f:c0:c2:7e:46:be:88:78:
58:14:ac:3f:a4:14:66:74:45:fd:c9:bd:9f:ac:5f:
fc:2c:90:b6:c0:98:e1:f8:4b:54:bf:fd:84:b1:84:
21:c6:e3:5e:00:ea:d1:06:e4:e1:74:6c:84:94:a5:
89:c7:13:c6:81:0b:8a:f5:ea:de:de:83:cd:b4:7c:
4b:55:a3:e1:7b:c4:a2:91:e6:b5:31:95:ef:49:16:
98:b8:34:44:26:63:78:7a:8e:7b:63:1e:34:80:71:
14:02:26:ce:32:d2:d4:bd:01:e5:8c:5f:f7:aa:a5:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C5:F9:7E:AD:BF:E6:5B:CD:50:2C:C9:DE:22:C0:DE:34:D6:B4:93
X509v3 Authority Key Identifier:
keyid:28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2a:cd:13:66:49:c3:6f:34:98:72:38:cc:58:52:42:e4:82:
46:61:b4:1d:bf:00:7b:48:cd:0f:0b:6d:f8:a6:9a:9a:d9:f1:
0f:39:af:0f:4f:1a:a0:7d:9d:73:cf:eb:66:7a:79:53:f5:a4:
ae:ef:65:ea:dc:68:71:6d:07:c2:4d:03:29:a4:3c:1a:34:32:
7c:c4:57:2a:f8:27:5f:18:65:b4:dd:b9:96:4a:74:29:c6:93:
f5:a5:92:6c:2b:11:6d:55:10:88:c6:ca:fd:01:40:33:38:ee:
ec:6a:2f:ca:79:f9:29:19:8f:fc:db:9c:be:ba:44:64:4d:d7:
b8:e9:bd:97:bb:80:0d:33:90:3e:d3:ba:6f:79:99:6e:b6:ad:
21:7c:bb:ff:8f:e7:60:7a:ca:8f:b8:57:67:26:96:d2:fd:1c:
ac:f8:7d:09:86:a0:a2:64:60:48:8b:cf:54:70:ec:3d:f0:f3:
f9:cf:70:bc:66:33:71:0f:3b:dd:a8:a1:54:28:0f:00:94:41:
96:8b:b0:be:fa:28:57:d3:67:4a:5f:9f:dd:ca:3e:ff:cc:84:
9e:dc:37:19:6e:4f:36:9a:16:3e:0c:32:00:a0:a9:0e:6d:3e:
86:31:1a:88:88:5f:69:76:a6:79:4a:ad:d6:cb:38:ef:08:67:
32:1d:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:37 2025 by rpki-client