Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
File: KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json)
Hash identifier: eHYrq2qMlvnzLK4xXVE/8lxI8uDfZ1H7mNhfuzhjAKI=
Subject key identifier: 80:1E:8F:FE:53:73:48:F4:7D:9E:EF:91:8E:2F:FE:18:1F:EC:AB:A0
Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Certificate serial: 019A1F51FA9A243985B0CA72DBE173F70683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
Manifest number: 0516
Signing time: Sun 26 Oct 2025 07:00:57 +0000
Manifest this update: Sun 26 Oct 2025 07:00:57 +0000
Manifest next update: Mon 27 Oct 2025 07:00:57 +0000
Files and hashes: 1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: tKz2mzP6u2bG2Z9NRl7cGnbcJHHvbxjRD7UcuM9+quw=)
2: lzjPjehPcPKbzhp_BORqJSFXL5w.roa (hash: o7m8VbYXK8WyV5y7PTGt6HIYSCCP18Dfj928jAcIW9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:fa:9a:24:39:85:b0:ca:72:db:e1:73:f7:06:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Validity
Not Before: Oct 26 07:00:57 2025 GMT
Not After : Oct 27 07:00:57 2025 GMT
Subject: CN=801e8ffe537348f47d9eef918e2ffe181fecaba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5c:3f:a9:1d:31:b1:5f:da:ac:e7:17:26:d9:
d6:f9:58:46:f0:b1:83:a8:9c:12:51:d0:b9:57:aa:
bc:19:74:e6:a7:0b:f3:53:46:31:ab:c4:df:17:46:
fc:9e:46:fb:31:bf:96:44:f7:59:c4:13:2a:4c:36:
35:a8:bd:e1:8d:c1:08:47:db:20:70:ec:07:00:54:
9d:35:e4:b3:a0:80:1b:9d:ff:3b:17:35:fe:e3:04:
7d:71:5e:22:2e:21:a8:14:c3:85:51:70:b5:c4:8c:
90:13:54:92:9b:d5:81:0d:e6:cb:be:a8:74:4a:61:
ee:19:91:f2:fa:27:ed:25:d0:23:f1:b2:10:12:a1:
2a:58:80:95:21:ea:62:51:c2:b3:41:2a:61:0d:80:
1a:65:e1:24:01:0f:8d:31:51:67:df:40:1f:9a:60:
5e:24:a6:97:33:28:39:bd:c0:e3:33:29:11:df:9c:
3f:5c:a6:fe:f7:02:c4:38:be:66:4e:67:78:f0:05:
73:3b:73:9d:43:9a:89:90:d9:6b:2b:f0:8c:5d:80:
7c:3d:4a:cf:34:09:6c:f2:60:5b:6c:82:13:05:3f:
bf:d2:ef:e3:47:07:07:26:e7:77:a1:c4:21:8f:ad:
cc:b7:59:96:12:5c:dc:8a:c1:17:3b:72:1e:b8:42:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1E:8F:FE:53:73:48:F4:7D:9E:EF:91:8E:2F:FE:18:1F:EC:AB:A0
X509v3 Authority Key Identifier:
keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:36:35:50:33:71:f0:69:8f:94:86:3a:b2:e3:91:a8:63:99:
25:09:69:38:25:ea:ea:4f:70:bf:7e:46:bb:bb:1d:41:25:51:
c0:23:4b:a2:65:be:c7:04:62:5f:f9:31:80:e9:77:b5:9b:bc:
7f:12:bc:f5:9b:1d:56:37:e6:69:05:8c:f4:5d:ad:3b:1e:68:
0b:15:0d:fc:e8:b5:13:22:74:f5:96:a5:bb:4d:9a:83:e7:f2:
13:fd:7f:65:f3:8d:69:ce:f0:e5:b1:3e:74:c3:81:ba:12:54:
37:aa:22:3f:36:b6:e0:70:f9:2b:53:c7:6f:fb:1e:d7:b9:56:
20:36:3b:d8:3b:ea:af:64:c2:e4:ee:78:73:be:58:0e:f6:74:
8d:cc:8b:fc:6e:ea:c1:18:9b:3b:db:35:35:32:74:64:77:3b:
62:cc:f6:59:87:e2:2b:b1:77:3c:5d:dd:6c:10:23:93:69:99:
ca:1f:aa:3d:ea:71:75:e8:40:d0:ad:0d:77:16:36:03:b6:b3:
08:94:05:77:67:0f:d6:b9:09:dd:1a:a5:67:a4:a6:f4:9a:23:
52:bf:10:40:98:e4:79:77:c8:ae:6e:c9:51:c8:14:91:27:2c:
93:3b:21:a0:3b:78:d5:16:6f:88:1a:13:60:81:fb:dd:13:1b:
9b:c2:92:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:07:32 2025 by rpki-client