Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: BKB9aaikzMO8VzuM8pUDQI30RVgaIIIbSlwwui4WEAQ=
Subject key identifier: 22:ED:34:03:2F:7E:7A:B7:70:AC:D2:31:27:12:40:43:4F:31:CD:DE
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 019A21AE12906B485A389733F95E62D38694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 07F3
Signing time: Sun 26 Oct 2025 18:00:47 +0000
Manifest this update: Sun 26 Oct 2025 18:00:47 +0000
Manifest next update: Mon 27 Oct 2025 18:00:47 +0000
Files and hashes: 1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: YPccn/DBHuXbcV+H9Wp6xoZyFuXVOYRXBQilSgIfsHE=)
2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ae:12:90:6b:48:5a:38:97:33:f9:5e:62:d3:86:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Oct 26 18:00:47 2025 GMT
Not After : Oct 27 18:00:47 2025 GMT
Subject: CN=22ed34032f7e7ab770acd231271240434f31cdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:fc:be:2f:6a:cf:81:d1:cc:1b:7f:0b:93:
56:b1:a7:86:47:34:fb:ad:1d:39:18:50:9a:e6:2f:
3f:5a:e9:0d:d5:7e:7a:dc:29:8c:c0:b2:ae:70:39:
f2:2f:31:ac:fa:ab:bc:69:45:8c:a5:b3:b2:cf:73:
f1:78:d2:b1:07:76:2c:52:ad:32:25:a6:a9:c2:c0:
f1:48:90:82:65:8f:80:bd:c4:87:e8:72:b6:39:7f:
53:cf:37:1e:92:4f:d5:a3:35:57:02:83:4c:a0:ad:
1f:29:0d:72:f8:eb:80:14:6b:5b:81:9c:d2:45:56:
7b:21:8c:12:84:21:b5:63:87:3a:d1:38:26:84:da:
9f:7b:dd:0f:ec:7b:a0:d7:de:2a:b8:3d:9a:3b:d2:
ba:88:09:4c:0e:20:e0:b8:3a:b5:66:67:5f:f2:90:
31:75:28:90:af:c1:e3:71:ce:3a:8a:98:05:fd:7c:
d6:9c:76:53:5a:09:4e:4e:e3:93:8a:fe:8d:2f:7c:
19:b0:47:f0:c9:49:1c:2e:38:67:0b:c9:0a:19:4d:
ef:fe:e8:ae:7c:e4:38:05:61:df:ca:22:fd:4a:06:
39:21:60:d7:12:52:9b:bf:88:bb:f2:a0:a9:dd:a0:
e0:ea:0f:18:32:67:71:1b:00:f2:a9:76:dc:12:81:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:ED:34:03:2F:7E:7A:B7:70:AC:D2:31:27:12:40:43:4F:31:CD:DE
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9c:4c:b0:4c:c0:86:32:18:6a:84:c7:04:77:da:de:e4:64:
13:b8:99:44:c5:cb:08:1c:7a:d6:5c:bd:fc:6f:27:b6:ae:d5:
17:54:73:8e:f0:17:69:46:56:03:f9:58:03:c6:a2:6b:9d:4c:
05:fa:a3:bb:ac:9a:74:72:bb:bb:e6:37:63:f4:52:e3:44:a1:
b7:09:34:6a:aa:d9:b6:0d:d3:31:ee:80:eb:28:26:3c:f9:82:
41:97:85:c2:5c:3f:7d:c1:f3:0e:92:3b:b3:42:dc:30:8d:e2:
34:09:a6:f2:cb:72:cf:f6:c2:b6:40:26:4b:27:52:a7:5b:f4:
34:ac:0c:14:69:88:3d:77:dd:88:4b:f9:c2:3d:16:32:29:47:
6d:64:bd:80:02:6e:48:86:5e:69:df:98:0f:5b:50:04:d6:94:
8a:c4:bc:b3:fd:3a:a2:bf:31:ba:f5:4e:2e:3a:3a:5b:49:35:
8b:e4:cf:b1:af:2f:b1:9c:d8:ac:52:1c:4c:0a:ff:72:6f:33:
59:e1:83:1a:4d:f7:df:a0:be:e2:09:52:1d:04:28:d2:87:fc:
32:c0:8c:c1:50:46:fe:07:50:e6:c0:58:e5:e3:20:3e:10:e6:
b3:6c:fc:06:9d:0c:25:90:01:52:fe:5b:bd:84:3e:af:0f:28:
eb:95:4c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:31:02 2025 by rpki-client