Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
File: KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json)
Hash identifier: pgCeTWaGJuY0MjkfcGiMbwNc4rFS8v43tEVx+7PQpbk=
Subject key identifier: 52:42:FB:E1:4C:CF:C8:F3:0E:A0:B5:2B:A4:22:D1:DD:C6:FB:BF:A4
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial: 019A71B7B4B71A5B52B305B6F20D1255D7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
Manifest number: 13FC
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: Ptk8Py9aGIj0s0j6H3ed7nn5zhepGAWzxPwbfIs26Vw=)
2: lKv_MpftntPeWIBfQDo4EvQnOCE.roa (hash: v96JNz5ZiqAWk2kEUzYU+IVtwUC39vYGpp2p54BaFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b4:b7:1a:5b:52:b3:05:b6:f2:0d:12:55:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=5242fbe14ccfc8f30ea0b52ba422d1ddc6fbbfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:59:4c:ce:bd:ee:27:c4:f1:cf:4e:25:65:
df:8b:6c:73:f2:e6:4c:15:95:08:72:25:8f:75:c6:
5d:b4:37:4e:e6:dc:ee:6d:83:00:3f:94:33:c6:58:
ce:db:4b:ee:b9:c8:9a:db:e6:51:05:23:67:e4:62:
21:4f:b6:fe:ea:9a:a4:33:9c:4f:32:81:09:f9:f1:
8d:50:25:84:28:df:9b:51:d2:03:40:40:47:77:5e:
5c:ca:af:9a:8b:d4:ff:d6:aa:42:d4:e6:77:56:a6:
5b:97:41:74:88:53:a7:ca:62:1e:cb:e4:01:31:e2:
c4:91:94:94:86:2d:8c:4b:85:fa:26:66:3e:80:61:
56:49:85:85:cd:e6:6c:8e:af:29:4d:f4:89:6f:84:
2b:32:db:ab:50:38:b0:db:e0:5c:9c:21:17:2d:fa:
44:9e:6c:08:2a:c6:d4:23:40:17:a6:7d:14:83:82:
f4:08:d4:d8:66:ca:79:59:52:63:39:13:a7:dd:a7:
c2:b4:f3:7e:cf:d5:a4:e0:a2:7e:27:e1:ea:b0:5e:
6d:7b:1f:66:3c:cc:3b:ee:d6:06:94:bd:03:7f:e3:
3c:67:89:82:23:0c:d4:d0:0e:9c:56:3f:8d:c4:f6:
36:44:13:1c:ee:2b:86:66:92:ff:1c:f9:6c:24:fd:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:42:FB:E1:4C:CF:C8:F3:0E:A0:B5:2B:A4:22:D1:DD:C6:FB:BF:A4
X509v3 Authority Key Identifier:
keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:df:24:46:3f:06:fc:1d:e5:46:a8:24:10:8f:e0:01:fe:b0:
3a:96:f8:aa:d2:1c:3c:46:d0:ee:b0:44:bc:68:29:e6:38:17:
0a:5e:3f:d5:6b:59:4d:22:83:7e:db:56:f8:bb:0f:52:a0:fc:
43:00:e4:d7:91:1d:11:71:47:c0:49:b8:41:fb:be:b3:67:3c:
7c:32:b4:6a:5f:a2:f3:36:7f:e0:a4:ff:8b:55:60:bc:ee:96:
5f:9c:e3:07:f8:6a:37:4c:7d:91:47:f7:2f:51:23:ce:d4:d5:
a5:4d:ca:d0:f9:bd:fd:ce:d1:6f:43:b3:93:69:e5:1e:b8:28:
e0:33:f6:50:8d:98:5e:50:da:46:40:c0:5f:a0:57:22:ef:4c:
e7:5d:b0:c2:a0:8f:97:37:44:a6:d3:7c:b2:76:de:4a:b6:c6:
f6:2f:1b:5f:2c:3d:0f:b4:c0:9d:cb:5b:39:67:16:1d:76:41:
58:66:91:25:ff:88:87:3b:8f:af:58:1b:1d:0a:d0:5c:bd:1b:
de:b2:c3:9a:e7:c8:f4:2b:37:cd:8d:30:29:47:60:dd:09:80:
6b:8f:b8:75:c0:4d:f6:c4:3a:66:50:75:91:25:64:9d:f6:31:
f9:de:cc:a5:d8:11:70:6b:32:b6:c6:bb:d6:5d:2e:9e:46:0c:
0c:f7:83:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:28 2025 by rpki-client