Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
File: KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft (raw, json)
Hash identifier: 3Kp7zsWVpu3a8Y4iF4/TVHS0uSFDb1D2gt3SmHlKOJ8=
Subject key identifier: 25:AE:A6:9C:D7:31:E7:66:7C:24:5C:E3:8F:D9:54:2D:5A:7B:8D:3E
Authority key identifier: 29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6
Certificate issuer: /CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6
Certificate serial: 019A03A3D65DBE3DF0ECD00DBAD19E20FEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
Manifest number: 0974
Signing time: Mon 20 Oct 2025 22:01:00 +0000
Manifest this update: Mon 20 Oct 2025 22:01:00 +0000
Manifest next update: Tue 21 Oct 2025 22:01:00 +0000
Files and hashes: 1: IrS-qV3W0Ik-KE138sR-ycmjsj0.roa (hash: ZrhZqy7V3sNpl24EYUX1sc+YyDytYvN7JDm/U17ihTc=)
2: KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl (hash: JJ8oYXa4HGd8DaDD4sdmHdJEFlzHz62TaiXpRSWSwM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:d6:5d:be:3d:f0:ec:d0:0d:ba:d1:9e:20:fe:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6
Validity
Not Before: Oct 20 22:01:00 2025 GMT
Not After : Oct 21 22:01:00 2025 GMT
Subject: CN=25aea69cd731e7667c245ce38fd9542d5a7b8d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:9f:55:c1:19:18:5a:fd:7f:0e:59:04:a9:
38:d9:02:24:32:cf:b9:3e:e2:94:cc:6d:24:46:74:
e5:fa:0b:83:c6:22:e1:6e:5c:11:fb:66:41:5e:ef:
3e:78:1c:4e:9b:a6:00:f1:a7:c9:f1:b0:48:0d:eb:
43:62:b7:69:56:7e:83:fc:64:a1:de:0e:06:6e:a4:
77:5d:b7:db:53:14:ef:68:03:6e:16:81:f5:71:3a:
95:41:e8:d4:44:bd:11:53:7f:bd:dc:b9:47:1a:19:
25:40:fd:3f:77:c0:df:70:33:92:6b:fe:a8:94:59:
e4:19:4d:fd:8e:6b:6c:7d:86:61:45:7d:17:0b:00:
9f:97:c8:3b:94:b6:2a:1d:ba:e5:00:74:03:10:e3:
21:bc:87:f2:9d:76:28:3d:ed:5f:96:fa:ca:59:01:
c9:cf:c7:50:7f:ae:da:63:78:15:7e:f9:6d:8a:72:
07:0b:88:e3:89:c8:a3:24:37:3e:c1:a8:b9:2d:94:
2a:ff:13:e5:17:fd:fe:29:0c:e6:88:f9:65:68:0d:
0b:aa:77:ba:07:86:fb:bb:1c:9b:2c:5d:95:cb:fb:
dc:00:4b:6c:bb:5d:5b:c3:05:58:25:89:57:ea:ba:
6d:21:38:81:94:4c:0f:95:7a:18:d2:b0:77:94:ee:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AE:A6:9C:D7:31:E7:66:7C:24:5C:E3:8F:D9:54:2D:5A:7B:8D:3E
X509v3 Authority Key Identifier:
keyid:29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5a:5e:43:c4:bf:0f:e4:d8:ee:11:c1:b2:cc:da:37:ca:30:
66:a2:61:fd:78:9f:f9:e9:33:67:be:8f:f7:da:04:6f:7e:23:
24:d6:52:a9:c3:6e:46:49:82:20:14:56:6c:0e:d9:58:d5:8b:
33:3f:ef:e6:35:a1:95:84:78:a9:95:ae:e7:53:ef:ea:c6:35:
1e:53:60:41:cd:2f:de:c8:59:bd:8f:0a:84:bf:21:f0:bd:82:
63:40:5d:7d:d6:16:84:bd:30:10:40:6c:cd:45:cb:88:4b:28:
e3:d6:7a:1d:2f:91:07:a6:df:d2:b9:0a:62:98:df:29:88:9c:
cf:37:ad:1e:79:86:ae:2c:b4:91:12:ac:84:df:ae:46:3e:4d:
56:bd:d6:cb:ae:d5:eb:e6:4b:a3:4c:8f:b3:6e:67:3e:16:92:
6d:ea:61:6f:c6:74:79:7e:28:f8:a0:d1:f1:8b:1c:dd:b1:cc:
ae:2c:ab:8d:92:fd:b7:72:17:6c:37:c3:e4:90:b6:7a:7f:59:
69:2b:4a:e2:44:ff:a0:07:82:31:a4:dd:0b:52:fe:d8:6d:07:
d3:62:e8:99:8f:e4:00:e0:33:14:96:45:63:71:c1:9d:ef:4e:
c9:5e:24:13:16:38:cf:32:e4:d8:d6:67:ac:c2:45:5a:1b:8e:
16:58:86:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:19:43 2025 by rpki-client