Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: 8vl6Ih+2Kpx/ZBu7tpJuQWPtcKTDhGyRYIIpWE/Wzzs=
Subject key identifier: 24:84:3C:90:B9:0A:51:D5:7C:0B:0B:93:8E:E3:05:84:AB:A0:96:E8
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 019A209B11912743E7909898BE048994AA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 0EBB
Signing time: Sun 26 Oct 2025 13:00:24 +0000
Manifest this update: Sun 26 Oct 2025 13:00:24 +0000
Manifest next update: Mon 27 Oct 2025 13:00:24 +0000
Files and hashes: 1: 2muVnH1_oI_9ztpeyJIqq88lM1c.roa (hash: UznFOVn685h5ihMi8FItxWdR/wWRBKXy+8YPxE2cn9c=)
2: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: 71vcQFXYhPOLr6s+3zclkGMOYfFIR1P+VfM3aDIWfFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:11:91:27:43:e7:90:98:98:be:04:89:94:aa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Oct 26 13:00:24 2025 GMT
Not After : Oct 27 13:00:24 2025 GMT
Subject: CN=24843c90b90a51d57c0b0b938ee30584aba096e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:d9:e2:ce:3c:17:46:e1:27:22:f4:25:b9:
ac:8f:12:2e:7f:0a:ab:a6:67:55:39:85:8a:01:72:
4f:b0:64:92:e1:df:0e:8b:28:55:d5:37:8f:c6:57:
b9:e9:19:2c:aa:71:94:cb:cd:a3:7d:3d:f7:f8:97:
d0:3e:9f:ec:f5:36:16:da:4b:14:fe:ef:89:3b:d4:
f7:a4:63:e5:f2:d4:68:0e:eb:89:97:85:3d:35:10:
13:15:da:72:43:8f:c7:3c:5d:5b:79:a2:74:46:f8:
b5:7c:c4:67:fe:1a:f0:61:b1:76:31:80:be:a5:42:
e7:c1:66:dd:e9:2c:62:85:f3:ca:73:d8:99:f4:f2:
49:f1:0b:5e:03:c4:40:5f:16:4f:25:5d:06:45:1c:
12:11:4b:94:0b:2d:24:90:ea:f8:52:9c:50:b7:7c:
c5:49:8f:dc:bf:d4:4c:55:77:0f:f9:a3:5e:2c:79:
73:01:2d:b3:4a:66:86:a9:c4:7f:b6:d5:c6:52:4c:
d0:5a:7e:6d:da:46:d6:70:f5:d0:10:5c:c6:84:19:
d2:ab:73:2a:c1:75:aa:2f:2f:c1:b9:c2:8e:16:61:
ba:fd:92:39:87:31:ac:48:81:e5:ea:7b:88:51:d4:
5f:0e:ef:1f:eb:cc:da:37:78:e7:c8:50:0d:65:84:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:84:3C:90:B9:0A:51:D5:7C:0B:0B:93:8E:E3:05:84:AB:A0:96:E8
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a5:3c:fb:d0:d3:7a:37:75:c3:10:b0:34:ce:8d:8b:ba:8c:
03:0d:e0:d9:08:44:ea:ec:d7:19:e0:16:49:9b:de:2a:63:d5:
5e:28:fe:ef:d2:ff:04:47:fc:ce:3e:a9:49:5f:7f:31:0f:14:
74:f9:7a:0d:56:b0:92:49:20:59:b6:67:ce:f1:e4:f8:73:c8:
ad:de:3d:38:77:65:27:62:a6:d7:4e:29:d5:bd:ac:0d:3b:d8:
17:73:95:c2:34:c0:ea:ea:9a:c9:6f:7d:1b:80:99:2d:12:aa:
00:35:5c:e9:67:f3:b6:da:64:8b:91:4a:2c:10:49:74:c9:bc:
22:45:b3:31:ae:a1:e2:d0:ca:d7:c8:19:af:ea:58:49:45:76:
bd:ee:b8:91:5d:66:5a:97:43:b9:7f:dd:cf:04:76:4d:ce:0b:
33:aa:ff:3f:ef:64:0e:80:bf:63:d5:26:90:67:82:67:a1:7c:
2f:58:10:a6:b6:88:50:94:e5:35:81:8b:4b:fb:fb:3a:ea:4b:
5d:e7:6e:4a:8a:df:d7:93:68:b8:a5:1f:98:0e:96:d7:0d:e7:
63:74:3f:ca:65:d7:c5:f9:6d:a3:33:34:41:65:5f:f9:24:7d:
04:00:31:f1:b9:4f:a7:9c:82:c8:b2:49:af:b4:cf:c7:22:eb:
30:67:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:05:43 2025 by rpki-client