Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
File: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft (raw, json)
Hash identifier: Xs8t09pAjQJQlqrPgzBUJfPmsZ5bXSYxqdExySqDKHE=
Subject key identifier: DF:47:C1:05:14:E6:C7:9D:1D:E3:73:88:37:5A:28:58:59:EF:19:ED
Authority key identifier: 91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
Certificate issuer: /CN=91d2767aa910e957dc5358025026e6c370570a2d
Certificate serial: 0199FB45FCCD0FACE1BBF021F306E3DDBC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
Manifest number: 0103
Signing time: Sun 19 Oct 2025 07:01:31 +0000
Manifest this update: Sun 19 Oct 2025 07:01:31 +0000
Manifest next update: Mon 20 Oct 2025 07:01:31 +0000
Files and hashes: 1: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl (hash: Uku55d5ySHyiPnMO56qWgjrBqlcJdSU+mlEfjL5SW/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:fc:cd:0f:ac:e1:bb:f0:21:f3:06:e3:dd:bc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d2767aa910e957dc5358025026e6c370570a2d
Validity
Not Before: Oct 19 07:01:31 2025 GMT
Not After : Oct 20 07:01:31 2025 GMT
Subject: CN=df47c10514e6c79d1de37388375a285859ef19ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:ee:4f:22:ae:57:1d:bc:1a:65:05:e7:0a:
75:69:5f:c5:68:58:77:eb:8d:fd:38:68:4c:64:7c:
28:83:bc:8a:0b:f6:df:1c:e6:09:7c:cb:d0:eb:cc:
78:99:68:2e:f3:6b:9e:72:79:cb:40:57:c9:21:dd:
29:39:ed:26:e3:96:4a:74:7a:a6:24:c5:d6:66:1a:
fc:dc:2e:38:3a:83:6c:ba:36:62:6f:af:b1:5b:b2:
53:cc:08:d9:31:15:2d:c6:9c:b0:d9:41:31:2f:76:
54:d3:7d:75:05:53:0b:74:c6:74:a9:71:ec:06:e6:
9f:8d:70:f4:ab:07:f0:c1:d1:12:7e:03:5d:37:03:
b0:5f:92:0d:b4:34:d2:bc:12:fd:8c:3a:e0:be:7e:
f5:c7:68:b9:08:8a:a1:e3:ac:72:53:c6:ab:e5:cd:
1d:12:bd:40:ec:d9:72:39:24:4a:f9:34:93:4f:29:
ea:5f:43:4e:49:a8:2c:29:3e:1d:e6:d5:1b:cc:46:
2b:df:69:4a:63:21:11:79:ec:23:ee:5f:09:6b:66:
0b:23:d8:45:ae:70:d2:c6:02:39:27:cb:a0:27:41:
ba:ec:77:26:e8:ad:b2:25:ac:7e:63:3c:cf:af:9a:
21:9f:33:43:19:36:c8:ec:5e:4a:99:37:3e:d8:57:
a7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:47:C1:05:14:E6:C7:9D:1D:E3:73:88:37:5A:28:58:59:EF:19:ED
X509v3 Authority Key Identifier:
keyid:91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9e:f7:b8:86:1d:13:9c:45:fa:13:58:f9:d7:32:3a:e9:ca:
b7:84:76:c2:b3:7f:44:1e:cf:c9:5d:c1:42:d4:9a:67:6e:1d:
12:41:bb:df:33:46:0f:e0:7b:6f:82:de:d4:09:b7:90:10:b7:
61:65:17:ff:90:0e:79:66:5f:4f:d6:76:44:c2:df:8f:3f:3b:
fa:bf:a1:12:36:b6:ef:56:68:40:c4:dd:0a:22:e1:d9:4b:b0:
74:cf:46:d0:8d:7f:ab:01:f3:6c:3e:a1:80:5d:93:fe:dd:a5:
35:bf:15:9f:77:de:3a:f2:fa:90:14:29:85:4f:4e:49:de:aa:
04:a6:eb:ad:c1:44:8b:17:94:02:e5:1c:d4:a0:de:81:7c:e9:
ba:eb:b2:96:14:0d:ff:54:6b:4c:b6:9b:07:f4:a0:70:67:28:
45:71:4f:5f:f8:f2:c0:21:c4:00:86:b6:22:4b:9c:6b:65:dd:
44:86:22:9d:7d:0f:4e:ac:74:fb:bf:3f:f4:45:11:76:38:3f:
8c:0e:f0:45:0e:f9:26:ac:ac:56:0e:d8:c9:34:c5:2b:35:3e:
e9:08:99:08:40:10:2b:4b:b7:30:91:b9:6c:6e:32:ce:73:57:
71:24:0d:e3:7f:bc:69:8a:01:72:ec:d6:14:49:ab:46:76:0e:
cb:c3:d5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:08 2025 by rpki-client