Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: +a0q/c3DExUhjPibXx2oZS6lXgSMJrUJmuqsnEmHAy4=
Subject key identifier: 9B:E1:B5:83:38:AB:FE:05:94:7C:F5:9E:D0:30:B1:77:C8:2C:42:83
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 0199FC21AE78AFF60E0207CE9CB29314EA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 07C7
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: qoFa3bZjQo3fzSHUn63emTpSgAXSyH1BanGZrrnL52Y=)
2: Wky7GIO48q5Am7lt9_maGgpqgJU.roa (hash: zVs1sI4WsKaD65jBAnhtkrYGwGsMw1WHVF/3i95RTn0=)
3: fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa (hash: /r8rCHZ/j6Q+/dPG2IPSlLzNTFQayT8a7Qiqlbqm++I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ae:78:af:f6:0e:02:07:ce:9c:b2:93:14:ea:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=9be1b58338abfe05947cf59ed030b177c82c4283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a4:cf:bc:e9:c2:b2:67:37:0c:47:3a:82:0a:
d9:54:47:50:4c:49:bb:3b:1c:f7:1e:60:03:65:8c:
5d:7f:8a:40:f5:f6:7e:fe:16:3f:ec:dd:61:f9:17:
06:89:b3:58:19:48:45:91:ad:44:01:87:75:72:a4:
79:51:ef:62:e2:d9:ec:e7:ef:55:49:44:59:f6:6c:
ea:0e:f7:66:b5:cf:7f:e8:d3:32:e0:cf:28:04:94:
5a:cd:32:f2:87:5d:d8:28:5a:06:7d:93:27:69:97:
ea:99:6c:45:b8:50:c5:c9:88:df:5d:6d:6d:14:3a:
9b:0e:4e:44:4f:26:54:3a:03:41:99:b1:60:45:e0:
bc:03:4e:a2:60:f3:6f:99:fe:9e:13:c2:34:ef:27:
e0:c8:0f:4f:f1:84:e8:5f:27:1e:c9:b3:35:6f:ee:
75:4a:bb:de:33:0c:8d:f7:e6:1c:e6:34:16:6e:37:
0b:70:69:82:6d:e7:41:29:f3:d0:1b:bc:ec:b2:a0:
28:b7:dc:b6:79:9b:50:92:78:84:2c:b9:4c:a9:31:
10:8a:1e:07:e7:0f:0e:43:8b:20:f7:06:94:bc:56:
38:ea:98:30:7d:60:98:5d:22:04:d5:81:81:df:d4:
9c:3b:08:18:39:4e:17:ab:bb:e2:5c:cc:7a:ef:ea:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E1:B5:83:38:AB:FE:05:94:7C:F5:9E:D0:30:B1:77:C8:2C:42:83
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:22:28:a7:75:b7:e3:9c:e0:71:fb:6a:28:5b:a9:37:c4:64:
c5:b6:35:24:00:7d:11:06:54:a5:e4:8c:d8:5c:e7:06:82:18:
fa:51:fc:00:18:c2:a8:d7:b2:c3:9a:8c:ad:b3:9d:fe:b1:76:
07:ce:85:78:c5:92:ec:a6:1b:c1:29:08:57:6c:48:2b:9d:3c:
cd:fa:1e:6a:22:05:c3:b7:fd:79:7d:64:b3:d7:2a:15:e5:e3:
4c:e1:19:67:36:16:73:d3:56:5c:fb:e8:9c:f4:c9:98:68:cb:
39:25:97:a6:1a:40:2f:4e:64:9a:47:4b:c6:ef:3c:84:aa:4e:
be:ff:3e:6d:e9:bd:b5:e4:a7:1a:03:c1:bf:a0:1d:9d:6f:43:
ec:81:47:c9:5e:5f:00:af:9b:44:81:e7:b9:bb:0e:26:3b:e7:
0c:31:5f:5d:0a:bc:be:6e:0e:62:b6:c6:60:24:49:b7:7d:ab:
24:ea:4a:c5:ad:36:21:41:6b:8e:8c:b6:e5:bd:eb:8e:de:06:
91:3b:0a:50:b8:0c:2f:dc:e8:91:cc:5e:ac:5a:38:76:54:32:
fa:a0:96:65:41:89:05:9a:2c:f3:d9:66:5b:40:78:2c:ec:3a:
ae:dc:29:bb:16:a4:90:c7:da:40:91:d9:f1:ac:ed:d1:98:ce:
54:f2:7e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:48 2025 by rpki-client