Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: 92ApIduatv6o2/dNLxMuOZYILDJRDbflz9ZRwLmu5Ao=
Subject key identifier: 8D:99:2F:8F:11:D5:C0:7F:54:7B:77:B1:65:8D:4E:6E:D0:CC:9F:9F
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 019A71EE638BCAD070CC811DA651E67C7FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 1429
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (hash: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=)
2: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=)
3: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: LiaZ9HSW+aaudk676CF7Bsn8soH/WDEJl5QRQwdX0eA=)
4: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:63:8b:ca:d0:70:cc:81:1d:a6:51:e6:7c:7f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=8d992f8f11d5c07f547b77b1658d4e6ed0cc9f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:5c:15:97:3f:83:b2:cc:d9:9d:46:96:9f:
1c:4f:73:f2:c4:8c:7d:44:9e:61:6c:f2:db:b2:cd:
e6:0a:61:5f:a0:db:c3:20:e6:17:72:78:9b:e6:55:
16:79:02:82:ed:e5:08:79:62:34:95:ae:f9:df:8e:
bc:b6:c5:69:cc:0b:8c:c0:08:26:8c:bf:42:b3:27:
0a:b5:26:0a:7e:5c:dc:3e:e7:01:40:4b:b3:0b:0d:
84:3e:20:18:de:7e:a1:7a:3b:44:1b:ee:a5:7c:7e:
5a:a9:b6:fa:16:b0:59:d9:71:82:8f:a2:57:56:cf:
2a:ca:8f:f8:82:01:b6:a6:94:6f:d3:26:25:34:5b:
69:93:1e:f8:a7:8b:a7:ea:a4:f2:53:fb:f9:e3:bf:
bd:db:86:b6:8c:13:f5:2b:fb:c2:6e:ea:58:5e:2c:
c7:80:4f:ad:7c:eb:b9:da:4b:75:74:66:c8:2c:0d:
5b:2b:81:2e:f6:f5:d7:61:91:c4:40:ea:bb:02:d8:
ed:4e:d8:3a:5b:de:e4:31:8e:6b:de:7b:02:b8:47:
ae:05:b8:63:41:48:48:58:af:7f:ca:be:a8:87:a6:
19:98:79:0f:02:01:24:3c:28:e7:3e:2a:e1:51:f4:
a8:f6:c4:62:a1:fd:b7:25:6c:11:e6:4f:e4:ea:13:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:99:2F:8F:11:D5:C0:7F:54:7B:77:B1:65:8D:4E:6E:D0:CC:9F:9F
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:08:22:cf:26:b2:b4:ac:71:85:57:ab:ce:35:d4:0a:28:f2:
b2:3f:0e:c7:7b:d9:c3:93:1c:b4:6a:0e:05:76:c3:f8:0f:7e:
fd:c4:44:83:80:f6:6f:f4:57:22:c1:46:cf:63:d4:af:3b:1d:
9c:d0:25:50:e9:42:67:8f:df:29:d3:e8:91:00:19:2a:ba:39:
11:d9:e1:05:82:26:1f:4f:5f:ef:57:0a:f0:a3:0d:2b:66:1b:
d6:2d:3b:20:e8:5c:75:0e:d8:ae:79:2d:f6:fa:eb:d8:93:c1:
15:66:eb:98:a3:0d:1f:bf:fa:fa:90:9c:ee:f8:80:65:07:d1:
22:54:94:2c:b4:a9:89:70:6c:d5:10:13:ca:8b:90:bc:cb:4c:
32:6c:5d:d0:65:1e:70:e0:ea:4b:a8:36:ca:8d:68:49:7e:0f:
44:c8:63:15:f9:df:eb:0c:dc:44:ff:2a:db:d2:55:ec:14:4a:
04:04:2c:d0:57:ab:81:1b:90:d9:bd:02:7a:2f:2a:7a:ac:49:
99:3a:44:56:a2:23:c6:04:07:59:06:90:5e:0e:7e:e6:60:8d:
a9:ab:b5:a9:6d:ce:03:c9:26:74:36:4d:fc:b8:62:cf:7a:60:
a5:d7:c7:ff:3d:5a:63:e2:84:8e:22:75:46:e8:60:05:35:6d:
a4:e2:d1:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7mOLytBwzIEdplHmfH/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YjBmZjc5OThjYTg4NTRjZTdjNDc1YTk3MmVkMWQ1MmE1
YzYwY2QwHhcNMjUxMTExMDgwMDM5WhcNMjUxMTEyMDgwMDM5WjAzMTEwLwYDVQQD
Eyg4ZDk5MmY4ZjExZDVjMDdmNTQ3Yjc3YjE2NThkNGU2ZWQwY2M5ZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIxcFZc/g7LM2Z1Glp8cT3PyxIx9
RJ5hbPLbss3mCmFfoNvDIOYXcnib5lUWeQKC7eUIeWI0la753468tsVpzAuMwAgm
jL9CsycKtSYKflzcPucBQEuzCw2EPiAY3n6hejtEG+6lfH5aqbb6FrBZ2XGCj6JX
Vs8qyo/4ggG2ppRv0yYlNFtpkx74p4un6qTyU/v547+924a2jBP1K/vCbupYXizH
gE+tfOu52kt1dGbILA1bK4Eu9vXXYZHEQOq7AtjtTtg6W97kMY5r3nsCuEeuBbhj
QUhIWK9/yr6oh6YZmHkPAgEkPCjnPirhUfSo9sRiof23JWwR5k/k6hOhgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2ZL48R1cB/VHt3sWWNTm7QzJ+fMB8GA1UdIwQY
MBaAFCiw/3mYyohUznxHWpcu0dUqXGDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDIt
MjY3NTQ3ZWExZTM1LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDItMjY3NTQ3ZWExZTM1
LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALggizyay
tKxxhVerzjXUCijysj8Ox3vZw5MctGoOBXbD+A9+/cREg4D2b/RXIsFGz2PUrzsd
nNAlUOlCZ4/fKdPokQAZKro5EdnhBYImH09f71cK8KMNK2Yb1i07IOhcdQ7Yrnkt
9vrr2JPBFWbrmKMNH7/6+pCc7viAZQfRIlSULLSpiXBs1RATyouQvMtMMmxd0GUe
cODqS6g2yo1oSX4PRMhjFfnf6wzcRP8q29JV7BRKBAQs0FergRuQ2b0Cei8qeqxJ
mTpEVqIjxgQHWQaQXg5+5mCNqau1qW3OA8kmdDZN/Lhiz3pgpdfH/z1aY+KEjiJ1
RuhgBTVtpOLRmg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:26 2025 by rpki-client