Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: rdiaXafey0zR5gkpjkGf8krigjk5NACStMljAzHgINU=
Subject key identifier: 02:F1:C5:D5:93:9B:55:11:09:C9:DD:DE:B0:BF:4D:B5:DF:E2:40:FE
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 019A7112BAC691152DC1ECB794B8B6DAA029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 0AFE
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: llDM0gppxEpKULWu9GB/NsWt+hAibOn/ayIPUZEZyl8=)
2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ba:c6:91:15:2d:c1:ec:b7:94:b8:b6:da:a0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=02f1c5d5939b551109c9dddeb0bf4db5dfe240fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:3b:bd:b6:bf:a8:fe:3f:6d:48:8a:1a:aa:
83:63:98:36:23:12:20:25:7c:25:2b:a3:38:da:f0:
83:bb:1a:99:3d:a4:1a:ad:e5:8b:0a:f8:ad:a6:23:
ee:9b:73:e1:d4:39:de:5a:c6:47:75:0e:d8:6d:16:
fb:dc:9c:70:7b:34:dc:32:d9:62:61:5e:73:5f:b6:
87:d3:b1:ec:33:a0:c2:6a:e6:cc:8b:ab:72:ed:6d:
6e:20:9f:dd:b7:64:71:89:1c:11:aa:91:38:90:ec:
ec:22:76:0c:64:83:23:cf:89:bc:8e:ec:dc:a8:ef:
38:b0:cb:6f:90:0b:9f:6a:d1:96:69:83:a9:8d:d8:
f7:7d:3a:4e:c8:24:75:bb:67:84:e1:eb:0b:23:97:
8e:01:39:b3:d3:3f:95:68:3c:70:0c:e4:7d:89:3d:
f8:82:f2:b6:70:dd:6a:e1:04:50:dd:cc:03:13:da:
60:dd:d4:b8:47:f1:d4:7c:41:13:58:da:8c:af:1e:
44:88:9e:09:7b:f0:9d:42:0b:e9:37:c4:2a:5c:1c:
71:8f:4b:ec:05:62:43:4f:30:54:bf:ba:8f:c7:10:
2d:24:f5:26:1a:b4:8c:f8:fb:ca:19:46:1f:e2:b9:
5d:bf:80:f8:2b:b8:b1:52:c9:e0:d8:64:3e:52:85:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F1:C5:D5:93:9B:55:11:09:C9:DD:DE:B0:BF:4D:B5:DF:E2:40:FE
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:87:cf:c0:cc:aa:78:99:1e:c3:5a:20:d6:1d:50:73:47:8b:
a0:dc:17:a7:62:e0:22:91:8b:07:97:1c:62:67:14:6c:08:cb:
09:70:19:7f:ec:a2:fe:8e:67:1a:1f:1b:3f:18:a3:4f:3b:5b:
e4:58:c5:27:34:42:5e:71:17:e0:60:bc:a5:e6:77:d6:08:77:
39:17:fe:e3:49:3d:95:fa:ef:c3:b2:ef:95:5c:aa:80:a6:17:
4e:73:40:b2:67:f9:4d:d1:90:0a:60:8c:43:6d:44:43:d4:5f:
5a:75:d8:d0:b6:5f:16:29:41:16:81:d2:4d:53:a2:22:e2:50:
7e:f7:41:d4:e4:69:f2:e7:8a:80:31:46:f4:c2:1d:6b:c3:5e:
bf:41:db:22:63:c9:99:26:32:a0:54:1c:4c:9a:08:d3:d2:ec:
86:8e:c9:23:c9:53:83:c4:f1:37:e7:29:28:27:cc:e5:4f:a5:
83:50:69:b6:e3:81:83:e1:67:4e:c5:3c:b1:48:7e:d3:d7:5a:
4a:2f:3e:58:ea:ea:85:c2:df:4c:62:ac:1d:12:5f:4d:81:cb:
5b:36:25:82:36:91:26:7b:2c:70:89:8a:ae:77:ef:30:01:cf:
8c:24:97:66:10:c7:29:db:57:a4:5b:b8:cd:4d:28:a7:fc:12:
1f:e6:1b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:12 2025 by rpki-client