Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: 61OdzlHJ+pY6cLucwPZ2nNVPz3BcuTHbKa5tTVTd610=
Subject key identifier: 7A:E6:94:42:EA:C3:31:95:6C:56:C6:80:3B:BC:06:12:BB:B4:C2:3A
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 019A3D92FC747EAF84712BBC25F31C2A39DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 0E8F
Signing time: Sat 01 Nov 2025 04:00:34 +0000
Manifest this update: Sat 01 Nov 2025 04:00:34 +0000
Manifest next update: Sun 02 Nov 2025 04:00:34 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: Dc6+eWUwlX3944RvBukGEggOydEvnk2pBqk6ef+BOh8=)
2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=)
3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3d:92:fc:74:7e:af:84:71:2b:bc:25:f3:1c:2a:39:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Nov 1 04:00:34 2025 GMT
Not After : Nov 2 04:00:34 2025 GMT
Subject: CN=7ae69442eac331956c56c6803bbc0612bbb4c23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:04:a4:f1:22:b7:de:d2:5b:70:3b:96:32:
36:c3:c9:80:1c:a9:de:79:7f:99:a4:12:a5:a0:4a:
6f:d6:a2:0b:46:f0:f0:95:86:55:f5:66:13:b7:f1:
c4:aa:c0:fb:19:a1:2d:2f:0e:ad:5c:f0:3b:e4:72:
98:44:33:ba:a1:b9:4f:24:9c:60:ef:68:12:48:f9:
f9:e2:23:e7:12:70:ce:ae:ab:d6:e7:2c:86:d1:16:
0d:e8:67:6c:a2:8f:4e:f8:d9:37:e2:98:e2:3e:a6:
12:22:5c:99:ad:91:ed:98:fe:e1:6f:af:4c:ff:55:
01:19:d7:49:af:be:21:08:9b:1d:bd:ae:f4:65:4d:
af:c5:29:0e:63:74:3c:89:79:bb:de:c1:39:e2:e9:
f5:ac:03:2c:62:0f:44:61:23:0e:3b:59:7b:65:75:
2b:65:ec:c1:6f:e1:c6:75:aa:c9:0e:34:ea:fc:c0:
20:5d:82:42:ec:67:cb:52:60:3c:74:a8:9b:d3:14:
8c:ea:91:11:6e:d8:ca:53:70:00:6d:56:15:6d:85:
ec:89:c1:b7:9d:b2:0c:ef:20:f6:13:ca:4e:83:3a:
92:81:7c:ef:5b:ee:be:5b:2b:e5:6e:d3:48:ce:d6:
a2:30:37:81:fc:c2:2a:65:91:7c:a0:31:7f:db:83:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E6:94:42:EA:C3:31:95:6C:56:C6:80:3B:BC:06:12:BB:B4:C2:3A
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:65:e4:03:ec:4c:bb:5c:8b:ff:9b:5b:27:3b:7f:d1:1d:32:
ac:66:97:39:e3:9e:a6:22:3c:1e:93:3b:a5:fb:86:04:ad:af:
4f:cc:d4:d8:42:77:d5:c1:96:ca:40:33:71:74:34:2c:6b:68:
8c:91:d5:ee:44:ab:d6:c5:88:db:4c:6b:3e:6a:bc:35:96:d3:
65:1b:1d:55:8a:2b:b1:20:5f:71:e7:73:bc:d7:c2:4f:16:73:
ad:bc:0a:6f:be:9b:12:99:4f:92:5a:80:7e:57:d0:d5:13:81:
2b:c3:56:99:14:24:75:b5:ca:c8:cc:04:a0:55:64:7b:7b:72:
80:5c:7e:66:17:98:89:46:9c:47:a6:1c:09:a8:99:d0:64:0e:
cd:3b:b7:13:7f:18:f8:fc:1f:00:98:94:82:fc:58:2b:0c:84:
af:f7:c4:e7:e6:c1:30:6e:3b:93:34:2c:38:fc:4d:d9:4a:21:
67:cd:88:a8:2d:f8:6d:0b:5c:da:ef:2c:09:53:3f:31:e5:07:
5e:39:0b:0b:0a:b3:c8:cf:c8:0a:a8:71:7a:f3:28:9b:3e:a0:
79:af:19:a3:72:a7:1c:b6:c5:e3:be:0d:b0:bf:70:b5:92:a5:
60:bd:a5:58:ae:2d:1c:9a:6e:7a:86:1b:ab:ab:2e:80:49:62:
68:ae:1e:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo9kvx0fq+EcSu8JfMcKjnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjhlZGUyMGI3OGY5OTU5OTNkYTk4ZjQzNGE5NjYwNzRk
NTYyYzIwHhcNMjUxMTAxMDQwMDM0WhcNMjUxMTAyMDQwMDM0WjAzMTEwLwYDVQQD
Eyg3YWU2OTQ0MmVhYzMzMTk1NmM1NmM2ODAzYmJjMDYxMmJiYjRjMjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKgEpPEit97SW3A7ljI2w8mAHKne
eX+ZpBKloEpv1qILRvDwlYZV9WYTt/HEqsD7GaEtLw6tXPA75HKYRDO6oblPJJxg
72gSSPn54iPnEnDOrqvW5yyG0RYN6Gdsoo9O+Nk34pjiPqYSIlyZrZHtmP7hb69M
/1UBGddJr74hCJsdva70ZU2vxSkOY3Q8iXm73sE54un1rAMsYg9EYSMOO1l7ZXUr
ZezBb+HGdarJDjTq/MAgXYJC7GfLUmA8dKib0xSM6pERbtjKU3AAbVYVbYXsicG3
nbIM7yD2E8pOgzqSgXzvW+6+WyvlbtNIztaiMDeB/MIqZZF8oDF/24MXAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrmlELqwzGVbFbGgDu8BhK7tMI6MB8GA1UdIwQY
MBaAFCj47eILePmVmT2pj0NKlmB01WLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgt
OWQzYTBmMjNjYmU3LzEvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgtOWQzYTBmMjNjYmU3
LzEvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmXkA+xM
u1yL/5tbJzt/0R0yrGaXOeOepiI8HpM7pfuGBK2vT8zU2EJ31cGWykAzcXQ0LGto
jJHV7kSr1sWI20xrPmq8NZbTZRsdVYorsSBfcedzvNfCTxZzrbwKb76bEplPklqA
flfQ1ROBK8NWmRQkdbXKyMwEoFVke3tygFx+ZheYiUacR6YcCaiZ0GQOzTu3E38Y
+PwfAJiUgvxYKwyEr/fE5+bBMG47kzQsOPxN2UohZ82IqC34bQtc2u8sCVM/MeUH
XjkLCwqzyM/ICqhxevMomz6gea8Zo3KnHLbF474NsL9wtZKlYL2lWK4tHJpueoYb
q6sugEliaK4eng==
-----END CERTIFICATE-----
Generated at Sat Nov 1 07:09:17 2025 by rpki-client