Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: 4TFwtAkJ4WeOWoL36IUDeZhX3BltdGWGbWssSMQztmM=
Subject key identifier: 06:07:8A:64:E7:0D:35:B4:F6:FF:A1:31:AA:AA:E8:18:38:01:1D:E3
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 019A164EDAB5C92CF5FA138433358B0BC52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 0FFE
Signing time: Fri 24 Oct 2025 13:00:57 +0000
Manifest this update: Fri 24 Oct 2025 13:00:57 +0000
Manifest next update: Sat 25 Oct 2025 13:00:57 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: 3JVayCJ7uP9vAEMVAQnGiOp5hAme/W0M3Vc4/ID3Wrg=)
2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:4e:da:b5:c9:2c:f5:fa:13:84:33:35:8b:0b:c5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Oct 24 13:00:57 2025 GMT
Not After : Oct 25 13:00:57 2025 GMT
Subject: CN=06078a64e70d35b4f6ffa131aaaae81838011de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:75:7c:4b:8f:24:63:d4:db:7f:ce:e2:0e:
d6:97:b3:24:f6:6c:5a:7b:2d:64:df:1b:33:8b:e6:
8d:17:18:13:7a:cd:99:f4:c3:76:04:7d:84:a9:50:
2c:ee:fc:53:23:c4:f0:1b:45:e7:7e:76:d2:d9:31:
fb:08:81:87:bb:15:20:b2:fd:5e:b9:ab:c4:47:12:
35:5a:68:91:01:d6:c0:bd:f5:fb:93:f7:16:d2:d5:
0f:b8:76:80:93:34:31:4b:f1:d5:5e:5c:3c:a5:a2:
e0:5b:f8:a0:1a:48:08:9a:81:9f:0d:6c:6c:e3:b8:
02:66:db:37:85:f9:be:2f:8b:ee:76:f3:dc:0c:f2:
88:10:27:37:35:31:89:bf:2d:58:03:fe:f7:07:d4:
91:ab:00:c4:4d:96:ac:4e:a8:a1:a8:ab:08:49:38:
72:de:e1:9c:8d:f8:09:9c:82:0d:1a:d4:3e:50:22:
ba:ac:04:d7:ca:6f:99:a9:32:a7:da:ed:8d:1f:9e:
e4:36:8b:a7:2c:ab:30:b9:90:66:67:64:1b:77:05:
2f:3d:e0:7a:df:d2:a8:e6:47:3a:82:f0:17:b2:b3:
bd:32:6d:6b:c6:01:08:b0:c9:90:c9:12:5b:e2:14:
a7:65:e9:a0:ca:2a:bf:85:74:c1:54:f8:3f:33:ac:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:07:8A:64:E7:0D:35:B4:F6:FF:A1:31:AA:AA:E8:18:38:01:1D:E3
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0f:7e:6b:d1:41:07:f8:09:08:fa:e8:56:bf:de:ba:f2:7e:
7e:36:6a:db:f7:de:40:cb:34:d8:8d:18:ff:16:bc:ff:bf:d8:
97:bc:5f:72:bc:a9:65:f6:72:c6:2d:b6:77:49:5a:6e:4b:2c:
e0:d9:04:a5:85:54:8c:c7:20:6f:a0:45:ee:fd:d6:49:2a:67:
e8:e6:b4:72:b7:d9:d8:0f:6e:8c:e3:48:2a:7b:5c:46:69:47:
d9:e2:1f:34:6c:6e:7c:79:a4:a7:1d:d4:49:6f:8f:14:ed:41:
84:df:cc:70:c5:82:08:3b:20:66:b8:68:dc:c8:51:7c:29:1f:
97:f8:1c:93:21:b1:95:ac:49:66:2f:98:3f:98:d8:78:04:92:
0b:87:9c:24:a8:30:9a:c6:f8:c2:71:26:b4:40:6c:f9:50:1a:
78:86:6a:ba:29:79:de:75:75:33:63:92:64:a9:3c:b2:5d:c7:
58:ab:4f:4d:af:17:81:84:0c:54:c9:f4:cd:91:aa:14:4c:81:
05:4e:08:e7:83:ec:43:77:fa:b2:da:eb:42:ee:9a:68:e8:32:
ac:51:4a:3e:2b:df:fb:dc:27:81:39:36:33:64:71:62:99:fa:
e5:0e:fb:17:74:97:de:ac:da:37:85:31:3d:45:0d:26:a6:80:
c6:10:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:16:45 2025 by rpki-client