Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: i5jdL4FHdQM/DI1g0VAlX2rNFZ2JQ9llr2TG3LhB81E=
Subject key identifier: 24:74:13:94:90:87:B2:06:4C:A7:6A:5D:D3:94:1E:14:83:04:DB:2E
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 019A21E493B8370A6264FB837ECE3C00CD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 15CD
Signing time: Sun 26 Oct 2025 19:00:19 +0000
Manifest this update: Sun 26 Oct 2025 19:00:19 +0000
Manifest next update: Mon 27 Oct 2025 19:00:19 +0000
Files and hashes: 1: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: EupLZUaKTQJZR3ftgUic9G2LVW+gtBSlpw3KS2/5JXw=)
2: NEgXAX_wlUMaQy2Alio_tXjqDko.roa (hash: AzGPeergn3UOGKBGdY9DWg2cAqJA+mog0I2Sf6Bpi0g=)
3: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (hash: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:93:b8:37:0a:62:64:fb:83:7e:ce:3c:00:cd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Oct 26 19:00:19 2025 GMT
Not After : Oct 27 19:00:19 2025 GMT
Subject: CN=247413949087b2064ca76a5dd3941e148304db2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:3f:35:e6:ee:1f:3e:76:06:67:87:9b:e0:
9d:d4:8d:bf:0f:6b:2f:1d:16:77:ef:1d:4c:58:b7:
e0:26:db:10:d7:50:32:b0:a3:9d:1a:53:9a:2a:81:
9c:f8:10:b0:af:c8:9a:b4:96:5a:ae:d4:fe:cb:51:
27:89:57:61:b1:d2:16:ba:17:23:73:78:97:30:4a:
f1:3e:0a:4f:7a:f7:75:2e:44:40:e3:91:9b:cd:41:
3a:17:6a:c4:c2:a7:ee:59:1e:ab:92:ad:d8:6d:00:
83:3d:a1:dd:59:58:7e:60:b6:16:85:80:71:b5:95:
84:88:be:18:16:63:aa:68:b5:11:d8:72:93:a7:37:
4e:62:ca:2b:bc:c6:88:df:46:88:0e:89:aa:4f:4a:
fe:b2:b9:ef:00:c9:e8:08:d4:6a:c2:1d:8e:8c:96:
13:97:39:eb:d6:d2:76:fe:a5:d2:c7:f0:0b:89:93:
2b:12:7b:4a:8c:7f:18:a1:af:84:69:13:b3:ab:11:
43:3b:36:11:44:fd:d4:96:0a:c2:95:dd:49:10:ed:
a5:b4:10:22:c5:6d:98:12:d1:14:85:d0:9e:11:4a:
c0:4e:00:a9:7d:47:5e:b8:36:cb:7b:4f:f9:86:04:
d6:69:7d:ce:93:6b:be:de:32:ca:0d:ff:05:f8:fb:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:74:13:94:90:87:B2:06:4C:A7:6A:5D:D3:94:1E:14:83:04:DB:2E
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c9:48:9b:17:ad:b8:f3:da:f5:48:cd:0f:fa:02:79:55:ef:
0a:2f:99:7b:99:78:05:16:e1:37:d8:eb:71:2d:79:dc:a3:f8:
a9:d4:2e:6b:9b:ba:eb:76:df:5d:cd:c1:62:10:3d:fa:d7:8f:
32:4f:88:66:20:f9:5f:10:0a:76:c7:38:d5:78:4e:91:f1:2d:
f0:95:de:91:09:6f:58:33:b4:31:38:72:01:35:c9:d4:21:3d:
e6:62:36:fd:7f:bf:54:a5:a0:a0:a6:35:5e:4d:97:96:ba:ed:
1f:7f:ef:17:c3:20:bb:8d:81:1a:69:63:94:0d:62:2e:6b:7c:
05:dd:4a:29:5e:fc:e7:dc:49:9e:e8:64:73:21:80:8a:51:52:
8e:d8:5e:17:be:6c:9e:51:25:1d:91:d1:bb:ab:54:b6:d5:6a:
77:d0:11:1b:9a:90:c2:16:ba:aa:db:c3:cb:30:15:05:08:58:
62:90:31:1e:91:ca:6f:32:72:5a:82:f1:89:c6:e8:dc:3b:aa:
1e:38:cb:4a:8d:1f:3b:e2:04:11:80:41:88:f1:71:bb:1d:aa:
77:89:70:76:23:00:fe:20:19:48:58:1b:ca:fb:0d:87:a1:49:
01:2f:8b:e7:a6:69:3b:bc:87:6d:2a:d4:d9:ad:27:b1:9a:2e:
d5:27:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:11:05 2025 by rpki-client