Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier: If0zU3KLwZeHMOa4iLivXc9GoIS7RRtnF4gViu1+KbM=
Subject key identifier: BB:DE:12:C3:37:55:36:0D:5E:27:99:EF:FD:13:EE:CC:18:B8:B3:8C
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial: 019A0B9375F112522903DC61920569458824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number: 16EB
Signing time: Wed 22 Oct 2025 11:00:04 +0000
Manifest this update: Wed 22 Oct 2025 11:00:04 +0000
Manifest next update: Thu 23 Oct 2025 11:00:04 +0000
Files and hashes: 1: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: SqXsyf2skwEWxABH5h7DemWd+MFouOnYL2nmpPWwaOA=)
2: tkt4SudQfK9uwQrgGKvvYflAjl8.roa (hash: dFUnqKo0rasEdebFDefgA9DnqivcqZmMoexL2NOUY5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:93:75:f1:12:52:29:03:dc:61:92:05:69:45:88:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Validity
Not Before: Oct 22 11:00:04 2025 GMT
Not After : Oct 23 11:00:04 2025 GMT
Subject: CN=bbde12c33755360d5e2799effd13eecc18b8b38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:19:6f:ed:81:1f:a2:45:bb:a9:3a:6c:36:
a8:55:97:75:ab:0e:c6:e3:2d:ef:d5:e4:a8:30:21:
5a:7c:28:d0:83:a7:14:7c:d3:e1:1b:97:a4:df:27:
ec:0d:30:ea:f1:91:d8:28:a4:8e:a4:d3:a1:21:ef:
52:e1:31:0f:b9:ff:57:8d:c0:37:1e:9f:cf:6f:71:
1c:0e:84:bf:60:5c:e9:b8:e5:93:79:ad:a1:be:83:
19:4b:a5:b9:9e:1e:6f:d9:f7:22:7c:6a:9b:34:01:
5a:15:65:4c:d2:e6:bd:17:75:83:8f:e6:87:c8:c8:
88:d7:1c:09:c2:c2:c0:9e:62:51:03:43:f8:fe:33:
7c:59:0b:ef:05:dd:c8:5a:ba:e3:eb:dc:38:0a:1e:
54:ca:75:bd:f2:74:ed:b7:99:dc:9f:a1:41:67:45:
ef:14:ef:fb:59:25:93:04:51:c7:ed:97:c4:7e:1c:
49:fe:fe:5f:76:09:f1:6e:5d:95:5b:5e:1d:1c:57:
a6:46:bd:06:5a:a1:fc:1a:18:c5:73:80:46:42:4b:
f8:ad:e2:2c:12:0e:d7:cc:dd:54:80:8a:fd:06:f5:
35:37:f4:de:75:e9:0d:24:a8:19:49:21:a7:99:3b:
32:7d:d8:03:b1:2a:5a:2c:e2:c9:e0:1a:f9:1f:a6:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DE:12:C3:37:55:36:0D:5E:27:99:EF:FD:13:EE:CC:18:B8:B3:8C
X509v3 Authority Key Identifier:
keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:2f:9a:f9:98:97:48:ea:7e:44:36:a5:f6:a8:25:6e:df:30:
36:70:f2:ea:f4:06:b7:73:0d:b5:e0:95:49:e6:69:a5:f9:64:
b8:b9:13:fa:b2:f6:1c:a4:e9:23:03:4c:b4:09:77:08:c6:31:
dc:a2:e4:33:1e:83:c7:7c:19:24:bf:18:1e:14:e2:59:ac:35:
e3:da:84:dd:fc:a7:ee:5c:c7:36:c6:2b:b6:90:c7:26:69:51:
cc:88:71:fa:c8:75:65:25:72:70:4d:a5:7d:77:1f:65:d1:92:
be:33:63:18:9d:af:c8:77:c3:0b:4e:bf:80:a1:6a:57:25:b8:
29:84:ae:47:9a:2a:87:73:a2:f5:30:31:1d:1e:b7:e5:a9:f6:
e5:f5:30:d8:6a:70:65:c5:0e:1a:0b:04:4d:bd:2d:a4:1e:d3:
e4:c9:ee:f0:c8:a7:9c:c6:9f:86:07:14:76:71:7f:7c:f3:d3:
ba:8a:75:9c:cd:7f:2d:46:13:cc:b7:0d:de:0c:e8:37:a6:21:
3d:0a:52:40:91:1b:91:b4:aa:42:7e:79:a2:22:6e:c0:07:66:
00:4c:cd:89:61:1b:9e:68:5d:ff:a7:1f:47:09:ad:34:cb:9d:
60:08:1f:ff:7d:fd:38:27:6b:42:91:7c:9c:20:91:39:30:b0:
49:ea:95:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:34:33 2025 by rpki-client