Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: /0z8WIwEU3UD4/C2BigKCU3j+D5+BTjgW8NVbbJq9B8=
Subject key identifier: B4:2F:4E:4E:62:E7:BF:C3:8C:9E:A6:61:5C:65:CA:34:8E:7C:37:F2
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 019A725CDD72875F6986416408B2B9358816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 0770
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: C8vWFTXQhNsmRRy3lis6nIQV8v/d6/8tuTnuaq/U+ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:dd:72:87:5f:69:86:41:64:08:b2:b9:35:88:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=b42f4e4e62e7bfc38c9ea6615c65ca348e7c37f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:b5:18:4c:36:a7:a9:94:54:4e:57:6d:27:
a2:47:34:65:93:57:1c:5e:57:10:37:e7:c8:98:2c:
58:bf:eb:67:21:aa:b4:a8:19:66:56:ef:37:02:99:
5d:ac:f6:7b:55:3c:5b:3f:87:46:52:8e:d8:32:1d:
c3:e8:34:23:c7:26:a8:a4:54:e6:25:16:eb:8f:59:
c0:94:1d:d0:1e:be:ea:58:67:f7:d6:57:50:93:17:
25:c6:05:19:b9:ca:47:39:7d:98:e1:41:6b:90:9d:
13:14:b9:8a:bd:f2:42:c4:8b:29:1b:23:8f:5d:35:
2e:95:b1:29:88:74:8d:79:f4:b3:fa:bc:bb:0e:eb:
92:0b:b6:a6:bb:98:2a:05:9b:2a:cf:e2:4e:36:ca:
80:08:af:fe:df:14:f5:82:25:25:be:10:ed:66:34:
e5:f0:40:19:e4:49:61:3d:2f:9c:6c:06:e3:69:60:
0e:88:8f:db:ec:e7:39:f9:36:8f:8a:ef:f6:78:89:
73:16:3e:99:6e:91:71:60:cc:0d:aa:f0:c0:30:72:
67:d4:7c:c2:09:00:fd:8d:0d:a8:ec:6e:66:fa:5f:
43:c8:3f:85:cb:f5:0e:61:94:36:12:60:97:a9:b9:
5b:dc:44:2a:fe:f1:e0:0f:6a:48:73:90:4c:0a:4c:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2F:4E:4E:62:E7:BF:C3:8C:9E:A6:61:5C:65:CA:34:8E:7C:37:F2
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a9:5f:e1:de:c8:c6:9c:ca:8f:86:6a:d8:ee:4e:c3:98:26:
e6:44:e3:e2:fb:50:09:27:0b:10:a0:34:dd:b3:ff:6d:c1:71:
90:2f:36:63:07:67:65:5f:96:1a:24:1d:df:e6:1f:4f:ea:23:
17:ea:dc:15:b8:47:b0:c0:e8:4b:60:ef:ff:0f:00:9f:b7:06:
38:70:1c:ba:6f:18:b3:4a:40:23:21:71:b7:11:56:22:bb:e7:
dc:f9:17:76:b4:d7:f5:35:bf:eb:92:21:9d:0f:2b:91:cf:3a:
0e:cd:cd:79:06:3c:09:1f:fa:12:b1:f4:32:b3:81:5d:2c:cf:
bb:3d:70:fa:f8:ad:ef:a0:76:52:b4:98:25:ad:cb:f2:da:7f:
83:2d:d2:b2:c6:b4:e2:9c:0d:db:f5:ca:c6:d1:a2:d4:e8:61:
45:b6:53:f5:a5:1b:a8:c8:f4:84:4f:17:64:06:ad:c2:25:32:
72:51:9b:77:62:2a:bd:20:5e:f5:97:33:d7:9d:0e:21:20:bd:
c9:b8:56:6e:85:95:4e:ce:02:50:cc:41:fc:26:07:f1:6e:46:
2a:cc:ba:d2:a3:b7:14:a1:f1:73:e7:ee:91:a8:39:1a:39:af:
ed:ef:07:dc:3e:c0:e5:fb:cc:d2:6a:b5:e3:d0:11:f2:49:dc:
63:13:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:33 2025 by rpki-client