Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: hHe0UoZ+WeY9UCq0GEZmPaazi3mHtDzTAiRXjS+bTts=
Subject key identifier: DF:35:15:E5:18:92:E4:41:36:C3:B9:8B:58:AA:93:81:19:21:00:AB
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 019A044873F873A3764C7FD1A83542E14950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 04C2
Signing time: Tue 21 Oct 2025 01:00:48 +0000
Manifest this update: Tue 21 Oct 2025 01:00:48 +0000
Manifest next update: Wed 22 Oct 2025 01:00:48 +0000
Files and hashes: 1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: ydjg8UJSzRIGUmzFbAKTbqHsfu24w/mdWlO+mX8FD6s=)
2: o05sdzj6m4fQO6_WrgnQWVEGn8s.roa (hash: 4PZyqJElCUrsee8Vele9Jxa/SXWOHXm1LP7RgEQB9SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:48:73:f8:73:a3:76:4c:7f:d1:a8:35:42:e1:49:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Oct 21 01:00:48 2025 GMT
Not After : Oct 22 01:00:48 2025 GMT
Subject: CN=df3515e51892e44136c3b98b58aa9381192100ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:68:0d:7f:1e:67:48:9a:82:0f:51:4e:80:06:
1b:0d:48:57:d0:0a:6b:97:b8:e1:95:72:f8:9a:cd:
aa:54:32:ed:e9:ca:7f:c9:12:6a:ef:11:49:ad:c7:
02:ee:4a:ff:40:d9:f1:9a:7f:ba:d1:9e:85:e5:83:
d0:e5:2a:f3:8e:67:44:81:ce:34:82:cc:7f:62:15:
df:de:fd:9f:9e:dc:4f:02:7a:3f:ee:cf:cc:6d:48:
d3:05:90:63:11:8c:02:79:94:c0:1e:a7:7b:49:f3:
32:47:bd:22:84:74:07:69:b2:16:0a:d5:d9:52:b2:
62:62:f1:56:cb:80:ac:ac:7e:f7:c9:e0:c4:71:37:
0a:a6:57:79:aa:9a:08:9c:2e:85:fe:7b:f1:31:e4:
06:c5:11:ed:ba:8e:99:eb:53:1b:71:b1:b3:93:7f:
5c:ce:25:25:d2:85:8a:e9:b1:b5:ac:06:93:27:55:
dc:8d:7f:23:3b:2e:de:29:a3:28:1d:b1:b0:99:c1:
15:ac:c9:19:52:7c:0c:7c:52:c8:25:12:d2:50:a6:
42:e6:7c:11:6d:56:83:59:db:cb:16:8a:cc:1a:46:
27:3e:15:2b:88:7d:76:2c:f7:e0:6c:eb:09:bc:a4:
14:11:a7:01:a6:70:6e:c1:d0:33:d1:25:35:15:5d:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:35:15:E5:18:92:E4:41:36:C3:B9:8B:58:AA:93:81:19:21:00:AB
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:29:01:22:66:1e:ec:7e:8c:ad:1a:9e:f4:43:32:97:3f:d5:
5d:ad:62:25:a7:05:d6:e1:a1:21:7d:48:32:e2:9f:aa:4c:a8:
45:88:c7:12:5e:06:87:40:82:bd:6b:31:03:9a:44:4d:db:ec:
6b:95:0b:80:cf:6e:6e:43:08:8f:7b:78:9c:c3:8e:38:5a:f6:
04:05:23:42:ba:d2:01:75:d1:f9:5d:79:5e:a4:02:9b:0b:66:
04:c7:53:c7:11:c4:bc:84:62:ce:fe:cb:5d:4a:f6:df:56:f1:
ea:df:8d:3f:a6:2e:32:06:1d:6a:03:3c:2c:d2:92:da:88:2d:
a5:1b:df:1c:cd:50:9b:a8:a5:59:b9:46:07:d6:22:9d:61:3a:
38:c5:c6:68:11:4f:36:88:97:1c:84:47:4f:6b:98:17:9b:6c:
dc:16:e2:a9:a8:c2:fe:54:71:a8:fb:3a:7e:29:d6:3c:99:a1:
0f:1e:50:22:fc:6d:20:bc:99:0e:09:e0:f2:db:3e:0f:10:51:
b1:02:95:65:03:0f:e8:3a:2f:e1:4d:03:56:07:55:68:12:54:
8f:f9:b3:65:ef:63:fd:fe:84:53:bc:50:09:76:71:0b:5d:77:
b0:3b:03:e0:06:d7:65:2c:58:c5:34:82:5d:7e:fa:98:50:a2:
e7:13:19:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoESHP4c6N2TH/RqDVC4UlQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTU0ZTI4ZjZlMDFjYTVjNzM1M2JjMzcyZjM2OWE1ZjUx
ZDliYjQwHhcNMjUxMDIxMDEwMDQ4WhcNMjUxMDIyMDEwMDQ4WjAzMTEwLwYDVQQD
EyhkZjM1MTVlNTE4OTJlNDQxMzZjM2I5OGI1OGFhOTM4MTE5MjEwMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mgNfx5nSJqCD1FOgAYbDUhX0Apr
l7jhlXL4ms2qVDLt6cp/yRJq7xFJrccC7kr/QNnxmn+60Z6F5YPQ5SrzjmdEgc40
gsx/YhXf3v2fntxPAno/7s/MbUjTBZBjEYwCeZTAHqd7SfMyR70ihHQHabIWCtXZ
UrJiYvFWy4CsrH73yeDEcTcKpld5qpoInC6F/nvxMeQGxRHtuo6Z61MbcbGzk39c
ziUl0oWK6bG1rAaTJ1XcjX8jOy7eKaMoHbGwmcEVrMkZUnwMfFLIJRLSUKZC5nwR
bVaDWdvLForMGkYnPhUriH12LPfgbOsJvKQUEacBpnBuwdAz0SU1FV3/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN81FeUYkuRBNsO5i1iqk4EZIQCrMB8GA1UdIwQY
MBaAFCiVTij24BylxzU7w3LzaaX1HZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgt
OTVjZTJjNzU1ZDQ3LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgtOTVjZTJjNzU1ZDQ3
LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCkBImYe
7H6MrRqe9EMylz/VXa1iJacF1uGhIX1IMuKfqkyoRYjHEl4Gh0CCvWsxA5pETdvs
a5ULgM9ubkMIj3t4nMOOOFr2BAUjQrrSAXXR+V15XqQCmwtmBMdTxxHEvIRizv7L
XUr231bx6t+NP6YuMgYdagM8LNKS2ogtpRvfHM1Qm6ilWblGB9YinWE6OMXGaBFP
NoiXHIRHT2uYF5ts3BbiqajC/lRxqPs6finWPJmhDx5QIvxtILyZDgng8ts+DxBR
sQKVZQMP6Dov4U0DVgdVaBJUj/mzZe9j/f6EU7xQCXZxC113sDsD4AbXZSxYxTSC
XX76mFCi5xMZHw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 06:58:14 2025 by rpki-client