Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier: s2HHIlrAGOAwgS5H9ZbZ8aA4O0McYoQNVG9Ost0Z85k=
Subject key identifier: FE:3A:70:2F:17:A7:1D:3E:CD:55:E7:C5:EF:EE:68:AA:BE:7A:7B:A1
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 0199FCFD4E16AE07FFDE452CADB53CDB5108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number: 15E0
Signing time: Sun 19 Oct 2025 15:01:22 +0000
Manifest this update: Sun 19 Oct 2025 15:01:22 +0000
Manifest next update: Mon 20 Oct 2025 15:01:22 +0000
Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: nd4+/c/l7EUdYONKDEaFZC7FYrA88viYM/e+guZRWVg=)
2: zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa (hash: xRdPuuQI3JcVUeXoif3h7qYjCY0yxLycmnxRLYfe7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:4e:16:ae:07:ff:de:45:2c:ad:b5:3c:db:51:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Oct 19 15:01:22 2025 GMT
Not After : Oct 20 15:01:22 2025 GMT
Subject: CN=fe3a702f17a71d3ecd55e7c5efee68aabe7a7ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:d5:11:a3:1e:99:28:3e:fc:24:93:c1:ba:
59:60:65:3f:80:ce:47:15:55:af:d3:14:d0:6a:e2:
c0:81:30:74:2d:69:81:4a:bd:b4:b0:09:7f:41:0b:
b6:9c:f5:c3:fa:61:54:4a:65:ea:be:a2:b9:a7:da:
b3:6a:28:ba:54:05:cc:09:ef:fc:f4:4f:60:c9:8b:
bd:61:a7:7c:a3:de:e3:9d:26:11:2b:a2:fc:a8:d7:
bf:dc:50:61:69:4b:dd:4d:73:b3:7c:cb:3a:e8:b4:
38:66:6c:da:58:5a:5a:e1:61:fa:ec:26:52:d6:e3:
2b:ae:56:8a:12:e0:37:ac:75:56:70:f8:b7:2a:e1:
7b:e5:aa:a3:23:7d:01:49:6b:eb:3f:d0:b8:23:d1:
c0:43:e3:cc:fb:e9:b0:cb:fa:e1:2e:cc:b4:38:3d:
fa:a3:86:4a:e6:10:51:30:2d:93:c8:06:9e:37:50:
d1:df:5f:13:c0:83:92:4f:78:df:05:ab:0e:3b:ec:
03:55:15:43:48:cf:d6:8c:3f:c0:ea:fb:23:ef:c9:
a8:24:4e:23:12:c2:5f:d5:4b:eb:c8:17:07:1b:92:
5c:c7:d6:15:d5:c4:c4:e3:ee:de:02:2f:dd:ab:1a:
f8:4e:19:ec:57:98:3d:22:9d:08:45:f1:97:3b:39:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3A:70:2F:17:A7:1D:3E:CD:55:E7:C5:EF:EE:68:AA:BE:7A:7B:A1
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e9:81:d3:20:e1:91:5b:bf:34:7d:15:2b:72:ad:a6:5a:84:
80:2e:99:21:cb:e4:d4:e5:bc:83:8f:ed:ef:a6:2b:4d:1e:3d:
ec:ba:0e:01:74:09:dc:53:94:52:b4:5f:90:d9:2a:bf:a2:56:
8b:05:d1:88:9d:e3:39:97:0f:70:57:ef:d5:b0:0b:75:30:61:
e0:8f:a6:b2:71:95:9e:d9:d8:b8:2e:72:2d:09:aa:7a:1e:1a:
06:40:51:42:24:fd:e7:f4:97:3c:81:56:0b:df:d2:54:c2:22:
60:31:cf:bc:d1:45:a8:f4:84:de:fa:ba:51:a1:bb:47:3e:a5:
33:82:ad:08:e8:4b:fa:99:1a:c3:f0:6e:9a:df:40:48:0d:cc:
55:d7:25:9e:69:2b:61:8b:44:25:b5:6c:c0:2f:4e:77:84:b2:
55:04:de:4e:fa:73:9e:69:83:58:6f:23:85:6d:16:84:32:a1:
ac:f5:a3:3c:c9:17:09:22:bf:ba:17:53:57:4c:1c:70:97:f8:
54:52:92:48:ed:bc:bb:ac:42:c7:f9:17:fc:0f:d9:4e:ff:56:
e7:0f:1d:02:c9:15:3e:21:83:7e:e2:ac:9e:85:0d:e8:fe:25:
1f:b6:fc:6e:5a:d6:94:63:a0:e8:f1:56:0a:95:72:7e:1e:85:
b2:1a:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:10 2025 by rpki-client