Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: W+OfN2/Kp4m75I8LVpbLDmIgw7Hw2HgOHIU46oAVpsk=
Subject key identifier: A6:EC:DA:5D:B7:86:A4:60:60:87:DB:44:E4:95:84:14:A1:DD:60:84
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 019A71EEC3D74822A07A9E35D8BD43F09FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0D24
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: JQ4W3G2wBUo6PRPPv0dVzYu4y4w.roa (hash: JHM9O5mRc/9ugG6o1WcR1yYfnaT1Q2KD2tNJG5Hqsco=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: L5fDwHr7meXvMF+LHb9ipQH4UR4mamPgshEehFQCOcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c3:d7:48:22:a0:7a:9e:35:d8:bd:43:f0:9f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=a6ecda5db786a4606087db44e4958414a1dd6084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:28:f1:d4:52:6a:4a:0b:31:07:ba:62:4a:
b8:05:12:95:16:c7:9f:71:f1:bf:59:d8:00:d5:a9:
2f:48:18:44:18:42:59:ae:08:3a:2c:40:d9:f2:03:
69:f9:73:0b:0e:13:79:d6:50:4b:00:6f:9a:05:b8:
fa:90:b0:3d:5b:f9:51:27:88:f2:bd:ef:dd:fc:00:
a0:62:05:26:ec:44:1a:57:a9:75:85:56:cb:10:5f:
02:e9:dc:3e:56:06:44:9e:a5:09:cd:9b:7e:88:05:
52:98:e8:62:b2:6c:33:c2:2b:a3:f6:db:33:1a:78:
eb:43:f0:a3:4b:fc:c5:32:c4:bb:80:ab:9a:d7:78:
e7:e5:18:fd:0a:9f:19:5f:69:50:6a:e4:71:3b:df:
91:42:b9:6a:a7:e9:8a:64:82:ba:74:4b:9a:19:c8:
5f:f1:8e:c0:2f:c3:ed:07:ee:3e:0d:b1:67:19:b4:
ad:32:b7:9e:7f:99:18:4f:34:82:89:88:5e:d6:91:
77:90:e9:97:26:73:0c:06:a2:54:70:f7:2e:dd:c3:
41:61:79:8a:36:5f:6b:6e:69:6c:60:bf:31:8b:31:
b2:bd:02:7c:bb:1e:1e:c0:6c:9b:e4:70:e1:31:02:
b9:8a:1a:cb:d4:f4:ac:9c:84:e5:44:7a:41:41:0f:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EC:DA:5D:B7:86:A4:60:60:87:DB:44:E4:95:84:14:A1:DD:60:84
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a0:89:2b:64:15:41:f0:b5:ac:a5:cb:0a:05:c7:67:46:6a:
63:14:14:a6:9a:49:68:27:58:3a:44:2c:57:b9:1a:92:fa:be:
1e:4f:c7:da:da:bb:0b:18:49:f8:9f:d0:c2:60:3e:ee:f6:e6:
c4:4d:a1:b5:47:9f:29:e8:c3:1d:f5:58:5f:f9:c6:71:e4:6f:
e8:0e:e6:27:0d:5e:3b:90:0e:5a:4f:c8:64:dc:12:2a:06:ee:
89:b5:ec:66:a1:d0:3b:36:1c:b8:39:6a:bb:be:38:d8:de:77:
f3:73:e0:c0:57:be:25:59:12:6f:ba:37:2e:07:de:b0:32:aa:
f0:4b:3e:76:92:88:b5:a0:59:be:9a:59:90:ec:79:38:2e:5b:
6a:91:46:77:d9:5f:02:3b:b9:23:56:29:b6:4c:32:88:7c:0f:
a8:c6:b7:5c:9f:e4:fe:3e:b3:0e:2b:9f:7f:38:c0:da:27:e2:
44:b6:b1:2f:93:d7:d0:b8:89:f7:38:cb:c6:88:7c:18:cd:24:
67:62:67:ad:76:b1:4d:13:b3:89:49:80:3b:73:47:cd:7c:b5:
4e:f0:0e:31:07:c7:4e:58:58:e7:90:cb:08:07:05:6f:5a:73:
f9:75:f4:37:0b:74:30:f6:2b:80:e0:e7:9e:31:32:f6:bf:41:
73:30:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:16 2025 by rpki-client