Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: NcdFC7TYF4kFr7FKbA2vpmni88ZvnyFX6J4UgviM0ZM=
Subject key identifier: A4:D3:7C:0A:12:F8:BB:FE:A4:23:55:93:F3:85:70:1E:99:86:86:CD
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 0199FB0EE8D8AEBA5F219342938C0E1974A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 07B8
Signing time: Sun 19 Oct 2025 06:01:22 +0000
Manifest this update: Sun 19 Oct 2025 06:01:22 +0000
Manifest next update: Mon 20 Oct 2025 06:01:22 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: FMnycdgM4k7YSFR3f/+PgrE1dvHJbz1F5G2k2DhWLcs=)
2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e8:d8:ae:ba:5f:21:93:42:93:8c:0e:19:74:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Oct 19 06:01:22 2025 GMT
Not After : Oct 20 06:01:22 2025 GMT
Subject: CN=a4d37c0a12f8bbfea4235593f385701e998686cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:9f:0b:08:b7:28:c6:44:4f:7a:6c:59:ec:
7b:86:55:a6:e6:20:e3:af:53:13:d9:dc:40:74:86:
f4:38:b1:d6:cd:37:38:12:14:83:20:c1:67:45:4a:
64:8f:25:b8:ab:06:33:45:ff:7f:ad:e9:7a:8c:20:
5c:ae:77:8f:33:6e:4e:38:28:a5:48:d2:16:9b:d8:
f6:f3:75:ee:a2:98:73:3e:37:3b:40:bd:fd:a1:1d:
39:3b:9f:50:69:dd:42:1b:76:e9:1a:6f:b5:3c:7f:
d2:52:c5:39:c2:9f:7c:f6:ab:88:68:71:88:9a:00:
07:b2:4a:a3:a2:d3:0f:d8:80:3b:82:34:d4:58:ef:
d3:75:56:2b:8a:20:b7:c3:3d:30:bd:bf:1c:9f:a7:
ec:c1:9a:0e:72:70:68:1f:93:eb:59:d9:6f:e2:33:
e6:17:d7:38:fc:1b:62:85:c2:46:c9:d4:db:e1:47:
78:85:b0:87:3b:80:ee:fb:ee:9b:1d:b5:75:2d:d1:
30:06:fd:43:ca:bd:fc:e6:2a:81:0c:5f:86:0b:88:
e6:0e:15:dc:c2:e2:77:ef:9f:08:31:29:46:cf:62:
b0:97:d7:c5:d1:87:7e:fa:89:c5:b7:e9:c4:65:79:
80:87:26:14:ce:a7:9b:35:c1:bc:75:13:0e:ed:02:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D3:7C:0A:12:F8:BB:FE:A4:23:55:93:F3:85:70:1E:99:86:86:CD
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:58:6d:1b:27:1d:50:0d:30:43:b5:88:db:4a:e0:a6:da:f0:
d3:57:17:f4:1c:13:0b:50:19:6c:74:91:6f:8a:22:3a:50:be:
45:bc:7f:40:27:f7:7d:23:96:a2:3a:d5:d6:ed:4c:fa:a0:d2:
96:45:c3:7c:dd:54:2b:42:98:45:cb:bb:4e:c9:10:7d:e3:3e:
99:12:3d:d9:02:e0:84:a8:ed:f3:7b:b6:02:59:e3:ef:f9:79:
b7:ce:27:ff:e3:a5:36:d8:b7:36:9e:8c:ba:bb:58:eb:fc:ca:
ab:6f:1d:35:8a:7f:22:44:d8:ae:75:39:dc:53:37:bc:88:3f:
74:9b:b0:64:23:82:75:da:d1:40:eb:e3:1c:de:1c:3f:c8:a9:
03:95:eb:ad:a8:ed:f7:43:b6:02:66:35:98:48:b5:08:25:66:
34:4b:bc:e9:41:ed:12:78:f5:2c:bf:dc:68:46:96:77:1e:2f:
7b:f3:ae:c2:c7:61:45:3f:d5:c9:b3:37:8a:5a:71:fb:d8:b0:
81:d6:5a:04:68:b6:7d:3e:4e:66:ef:7d:76:73:16:7c:f7:0e:
d6:03:0b:d0:e5:3c:91:f8:f6:83:64:d4:bf:96:ae:42:cd:19:
19:a5:ff:15:f6:cc:97:93:ee:fb:72:61:88:44:bd:ae:6d:5f:
dd:05:80:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:48 2025 by rpki-client