Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
File: KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json)
Hash identifier: xKXUKFjlqkAd16PkS1s74KpLnB+kROe3u5snkr6AdQo=
Subject key identifier: CF:43:30:A2:99:DA:6A:C4:CD:BA:1D:DE:1B:CC:6B:72:96:C9:89:9B
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial: 019921B293E9ADF9891D33FFE35D4DA2B621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
Manifest number: 134E
Signing time: Sun 07 Sep 2025 01:02:55 +0000
Manifest this update: Sun 07 Sep 2025 01:02:55 +0000
Manifest next update: Mon 08 Sep 2025 01:02:55 +0000
Files and hashes: 1: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: uubYulDHHHIT9pAtbtPGda/VZIpXdNdUdiqZt+tvGL0=)
2: lKv_MpftntPeWIBfQDo4EvQnOCE.roa (hash: v96JNz5ZiqAWk2kEUzYU+IVtwUC39vYGpp2p54BaFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:93:e9:ad:f9:89:1d:33:ff:e3:5d:4d:a2:b6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Validity
Not Before: Sep 7 01:02:55 2025 GMT
Not After : Sep 8 01:02:55 2025 GMT
Subject: CN=cf4330a299da6ac4cdba1dde1bcc6b7296c9899b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:e2:91:00:d3:b9:de:d1:ba:d3:75:e0:f0:
76:c6:40:98:ac:69:46:75:14:3d:af:e1:dc:f0:e7:
d9:a2:4d:76:ea:af:e6:74:03:6c:e3:2e:a6:6d:6e:
d1:7c:45:0d:90:fd:3e:db:da:25:46:58:7f:21:e1:
a4:d3:b3:d0:71:2d:f7:1b:bb:c8:7d:49:1d:37:97:
7a:ca:9e:39:50:12:0c:e7:16:91:47:20:b3:c2:01:
8b:13:ee:6d:e2:d8:ff:82:75:10:7a:cf:80:6c:22:
9b:0e:51:7d:24:a2:97:32:88:75:de:36:37:ee:1e:
37:27:b0:1a:49:d0:4e:9a:c7:57:44:63:d3:92:e8:
c7:fa:4c:be:73:c2:1a:a4:3f:86:0b:bf:72:a9:f6:
18:13:dc:c8:b9:74:69:15:c6:9b:0c:b2:e9:44:6e:
c4:6c:47:fc:63:1f:7c:d0:46:69:2b:89:46:72:94:
d9:45:aa:45:86:0b:9e:af:05:36:05:7e:28:9f:1c:
91:80:b5:91:81:c3:1c:bd:e0:3f:47:4f:78:37:80:
b7:93:0d:5d:4c:8e:f0:d2:8c:16:87:85:4c:28:68:
cd:42:dd:7d:7e:61:18:df:6a:83:d4:7b:9d:ed:aa:
62:9f:21:90:ee:6f:b8:80:20:1b:89:94:88:eb:86:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:43:30:A2:99:DA:6A:C4:CD:BA:1D:DE:1B:CC:6B:72:96:C9:89:9B
X509v3 Authority Key Identifier:
keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7b:c4:49:c0:39:84:33:b7:12:5a:28:23:40:e0:43:8e:b4:
f0:1a:30:b1:e3:b8:3d:9b:fa:47:bd:2e:cf:9a:27:fd:39:7d:
ee:17:ce:95:33:e4:17:6b:bf:ed:6c:5f:1f:e8:d5:fe:1b:eb:
67:e2:5b:af:6f:9e:d1:04:34:3e:43:66:68:52:5d:3b:6d:8f:
2f:bd:0d:96:fd:da:97:b2:e6:5a:04:9a:60:39:7a:20:73:4a:
69:0d:dd:18:0d:16:e0:73:0d:4a:17:c2:e8:f4:8b:01:3b:8b:
de:01:45:20:33:98:6c:96:a6:01:ee:99:ca:b2:37:3b:09:75:
6d:1e:a2:43:e1:a0:94:4c:0a:a5:7a:0a:99:a5:a9:4d:b2:36:
8a:55:c1:7e:7a:11:66:2d:05:aa:fd:0f:af:37:df:43:7f:e4:
69:44:9e:5b:63:98:5b:60:c3:4c:7e:20:db:71:2c:2b:66:a1:
a9:32:35:0b:2e:ae:51:99:d0:42:b8:17:e1:08:29:40:49:94:
0b:b9:ec:3c:b9:f4:fc:bf:26:57:52:5d:ad:31:bc:98:c9:95:
f5:12:6a:f9:79:ef:94:67:42:6d:09:f8:6c:62:1c:ab:83:60:
cf:eb:50:bf:b7:2b:7d:6b:4f:71:93:d6:52:c0:ae:84:b7:81:
a5:96:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:38 2025 by rpki-client