Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json)
Hash identifier: zz9VDXw1SdjZdjYNXD8uSoQrmSnzlLUXZfJN2q6wo2k=
Subject key identifier: C5:29:B9:A2:45:E8:58:CD:E2:E2:5D:CA:DC:19:24:D6:6A:03:33:4E
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial: 0199FDDA15D7FA2FCF23EC0A9F6DFB9B1706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
Manifest number: 02B8
Signing time: Sun 19 Oct 2025 19:02:31 +0000
Manifest this update: Sun 19 Oct 2025 19:02:31 +0000
Manifest next update: Mon 20 Oct 2025 19:02:31 +0000
Files and hashes: 1: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: kDhpKdsIztIhH9fFQStdwEM5GxXDX8zXvzWiTDpHQ1s=)
2: l2JOTmWwgvB0Noq1JM57zkDHT7E.roa (hash: fvF/3WFpXW+en1bZSjFDxni1bz8bZU75qvWIdCsVsmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:15:d7:fa:2f:cf:23:ec:0a:9f:6d:fb:9b:17:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Validity
Not Before: Oct 19 19:02:31 2025 GMT
Not After : Oct 20 19:02:31 2025 GMT
Subject: CN=c529b9a245e858cde2e25dcadc1924d66a03334e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:b9:a2:60:06:c6:df:c0:44:bc:55:93:14:
98:90:e3:48:76:1e:21:a0:5d:be:c3:2a:8e:53:eb:
20:86:38:26:aa:05:83:6f:8b:19:fa:85:32:df:bd:
04:d6:92:06:52:75:42:b5:90:e8:7c:66:e0:f8:bd:
d1:88:7e:a6:77:14:e2:d3:35:e4:0c:78:4b:ac:10:
da:99:94:ed:66:77:3a:fa:de:51:e8:f6:a0:6f:66:
95:2f:2f:61:f5:23:e9:ab:5d:ba:21:b9:4e:29:47:
6e:f6:80:55:6a:0e:2f:6f:30:d5:8c:59:8a:3f:6c:
56:1d:e6:e6:1d:be:ab:27:f6:51:35:56:70:e0:08:
6c:d4:0d:51:af:4f:80:11:f5:ed:d9:dc:9a:33:a8:
13:62:6d:76:1c:b9:0b:9f:16:b6:22:62:0e:f7:5f:
05:c7:f1:50:e0:e7:6d:a0:c4:e1:82:1e:fe:b3:7c:
5a:d7:16:a7:43:e1:c2:19:e3:4f:a9:bf:c4:18:df:
b3:77:10:12:fb:13:26:11:ff:f6:03:6c:58:01:ab:
01:4a:7e:77:e3:cd:ea:16:3e:19:9b:08:80:7d:51:
33:61:54:16:fd:d6:d7:8c:62:7a:cc:10:c5:ad:1a:
2e:cf:05:4e:71:2f:75:86:6b:9e:41:da:93:75:73:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:29:B9:A2:45:E8:58:CD:E2:E2:5D:CA:DC:19:24:D6:6A:03:33:4E
X509v3 Authority Key Identifier:
keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:16:d2:64:54:ef:f7:62:7d:69:08:fc:06:5f:5a:0e:e1:ac:
7f:68:14:e7:71:16:18:1e:63:5a:f2:97:5e:6c:8d:31:f4:9c:
b6:69:03:ab:32:63:5b:41:f3:6b:31:17:1d:1c:9e:d7:4e:ce:
0a:43:68:d2:76:19:c8:6f:22:bc:55:c1:eb:97:2c:8d:24:55:
89:5e:66:28:1a:74:f4:ad:a7:62:ff:af:dd:16:27:b6:24:02:
63:54:a1:8c:e2:de:a0:5d:7a:e1:37:5e:b7:25:6a:88:60:38:
05:8d:74:24:17:fc:78:85:1e:e6:45:be:7d:8e:f1:34:24:5a:
ca:63:e4:f7:3f:52:83:e6:a2:6b:6c:4d:af:2e:08:af:62:74:
dc:a4:c0:1f:a7:3c:f8:5a:b3:e3:7f:2d:67:e7:16:69:36:d3:
c4:ae:24:de:f9:d9:2e:81:ab:0f:2c:92:5c:56:30:31:d9:ac:
ba:87:fc:98:8a:1a:dc:e9:44:d6:31:f2:a5:62:fd:ae:19:9b:
ad:6f:5f:4b:ab:f8:02:de:da:b0:20:1d:02:c6:63:63:c1:e1:
ca:3b:df:a5:02:86:92:10:92:55:5e:bc:fb:f8:11:a8:fb:70:
d3:a9:b1:b2:b0:f3:e1:92:2e:49:13:32:61:e3:c2:f7:35:ce:
8e:d7:e7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:56 2025 by rpki-client