Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
File: KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft (raw, json)
Hash identifier: ypqXZTW0aqfkbLnb/OYcrcR6HBmHdZQaDNtCBmC6ylw=
Subject key identifier: E5:D6:C5:C5:6A:59:F9:DD:1F:7A:E2:35:79:0A:F8:8E:FE:5C:0E:C6
Authority key identifier: 28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
Certificate issuer: /CN=28fa456d1c23678621954ffbf493a323de2c4484
Certificate serial: 0199FDD8D3495C585CF493C41B2D73F4A60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
Manifest number: 0C1E
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl (hash: O0fdJPuo+UIOdOYId3y7lKs5yChsOA62ccxn+Uokq30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d3:49:5c:58:5c:f4:93:c4:1b:2d:73:f4:a6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fa456d1c23678621954ffbf493a323de2c4484
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=e5d6c5c56a59f9dd1f7ae235790af88efe5c0ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:79:f0:20:df:d6:b5:ef:0a:de:58:63:64:
81:20:b9:be:82:ea:f6:18:0e:09:2f:51:42:61:4c:
a7:d7:a2:91:73:a8:ab:86:a9:0c:58:fa:ed:65:55:
c9:e5:3e:4c:26:79:40:de:0d:55:5e:12:6b:3c:79:
88:2d:7f:1e:63:2c:c0:d7:cc:21:31:25:0a:85:6f:
5d:11:13:5a:eb:34:de:9b:0a:c7:3b:e9:29:3c:fd:
db:7c:56:b4:da:a0:da:aa:7d:7d:cc:63:1b:ec:d9:
f8:54:cc:04:2d:d9:c0:d2:d1:41:aa:cd:a3:9a:24:
0f:ea:2c:d1:cf:12:c1:e9:d7:13:a2:92:b4:35:56:
c3:9b:ac:cd:20:5d:93:f0:66:84:b0:c2:9b:9c:6c:
66:8a:07:76:11:1e:8e:62:14:69:b3:89:fc:ca:30:
73:16:7a:9b:2f:3d:ac:01:2b:0a:76:35:11:22:6a:
76:53:12:da:d1:6e:37:a7:1d:49:ca:38:72:4c:25:
20:9d:f2:04:8e:d2:cb:c0:86:ef:c4:85:16:14:0a:
72:b6:76:ae:8d:ae:0e:1b:3b:65:d3:af:70:b8:b6:
51:df:c3:a1:7d:cb:a3:d2:8a:57:00:3a:ec:45:61:
db:96:04:e9:66:91:2a:d6:08:6f:b2:4c:46:98:91:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D6:C5:C5:6A:59:F9:DD:1F:7A:E2:35:79:0A:F8:8E:FE:5C:0E:C6
X509v3 Authority Key Identifier:
keyid:28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0d:b2:d5:e7:e5:54:8d:f4:df:a4:bb:17:24:be:66:4d:26:
ea:3e:eb:68:13:31:b6:af:ff:03:86:8b:b8:5e:96:db:ee:89:
fa:67:3a:16:81:9d:a2:96:85:c5:ab:c3:ec:48:7a:ec:54:fe:
c6:70:6e:f4:25:ab:28:1d:40:b2:0a:5e:2c:78:18:da:be:83:
32:96:21:a0:1d:8d:66:ab:47:8d:27:47:17:97:58:97:04:b7:
42:35:0b:57:50:74:89:56:de:f4:b3:51:0d:21:9b:60:a0:a3:
0e:9a:df:1e:d4:43:d5:99:4f:07:26:70:c1:24:67:db:28:d7:
3c:d7:b4:93:8f:6d:9d:bf:cf:e5:92:66:de:1d:17:88:1e:c6:
8d:82:ee:76:49:6a:f8:a3:2d:4f:07:62:4d:aa:5c:8b:14:16:
2d:54:5d:d2:23:7c:0c:0f:72:58:f2:d3:42:aa:d9:d0:f3:6e:
81:7c:0b:8b:03:72:fc:02:40:32:93:8d:04:c7:50:61:0a:39:
7b:7f:20:57:0f:6f:5a:82:bc:9c:df:fb:0a:59:72:cb:a3:80:
70:96:ca:07:0c:0f:9a:d4:67:dd:26:b9:5e:47:bf:a9:fa:32:
0f:56:43:ae:eb:c2:f4:76:46:63:7c:c8:2e:dd:9d:1d:7b:87:
8d:46:72:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:07:29 2025 by rpki-client