Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: 9fiIKb7Fx4deqCDuWyMmo/pPEkwL5PgcBB25IcuiT54=
Subject key identifier: 03:DD:88:8D:98:D9:DC:A7:C9:2B:5C:FC:2C:3F:24:6C:A8:B7:14:E1
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 019A4E4F7438D71DB1E13461E1D5B53A88B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 0AEC
Signing time: Tue 04 Nov 2025 10:00:21 +0000
Manifest this update: Tue 04 Nov 2025 10:00:21 +0000
Manifest next update: Wed 05 Nov 2025 10:00:21 +0000
Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: UADu3Osb5RCqvB/fZVqffuLXwa4ML7o0bTjh91COWuY=)
2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:74:38:d7:1d:b1:e1:34:61:e1:d5:b5:3a:88:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Nov 4 10:00:21 2025 GMT
Not After : Nov 5 10:00:21 2025 GMT
Subject: CN=03dd888d98d9dca7c92b5cfc2c3f246ca8b714e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:85:73:a6:cc:01:b0:51:b5:d3:ea:87:cb:
e8:9a:bf:ae:78:de:51:5a:da:9f:c0:56:5d:b5:54:
f2:ba:ef:80:d8:f4:86:33:65:68:6a:c5:7a:aa:4a:
c9:8f:81:f7:62:2b:52:a1:26:da:41:19:3b:f0:43:
ee:f1:7c:ec:25:42:98:f8:f5:ea:e3:a4:44:0b:c5:
61:9f:3c:96:17:b8:6a:e4:ce:d1:3f:bc:61:e8:88:
1e:0e:2f:41:a6:75:15:fd:88:9a:30:60:92:66:4c:
c1:22:19:7b:c9:fd:71:62:83:32:38:24:d5:fb:b6:
4f:a8:f1:82:c5:c8:53:61:7d:69:86:cb:7d:45:3a:
80:8e:91:cc:69:36:32:18:d1:fe:d4:37:10:92:00:
9f:74:9d:5d:5c:34:c6:8e:46:ed:a4:dd:58:48:aa:
44:41:e5:97:f0:b8:c7:fa:83:24:db:15:6a:2f:ef:
a8:75:fc:9c:ee:d0:3d:9c:0c:4f:4c:44:b2:d3:8b:
f2:a0:5e:41:8b:a7:26:41:4e:6f:8a:35:96:f7:b1:
f0:7b:97:09:5c:28:18:14:39:74:60:d5:3e:09:0e:
c9:21:9a:1c:37:4f:24:45:c7:ea:75:05:19:3d:77:
18:bb:ca:fd:7d:61:7f:9a:50:3f:0a:76:25:22:2d:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DD:88:8D:98:D9:DC:A7:C9:2B:5C:FC:2C:3F:24:6C:A8:B7:14:E1
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6d:04:b8:ac:fc:b0:46:0f:2b:89:38:68:6b:0e:30:25:d3:
24:21:f2:a8:6e:25:00:41:54:72:10:16:b4:13:78:18:d4:78:
96:46:78:3d:31:fb:f7:76:f9:0e:8f:5d:d9:1d:c2:1d:d7:94:
3c:e6:81:e9:db:7b:fc:c0:8b:a8:ac:49:b6:90:9e:23:c3:f0:
37:ce:ee:0e:4a:92:23:bf:10:c3:e6:22:86:ab:81:9f:9a:9a:
29:22:10:b3:4c:d9:91:58:2d:0b:5e:9d:20:88:4a:16:6a:eb:
24:ed:c0:1e:c2:df:ce:b7:28:b1:01:3b:19:00:19:a2:f8:f7:
00:3d:5a:6d:fc:e8:5c:58:90:2b:5e:7a:a3:8e:7c:1f:22:ef:
aa:1c:1d:13:98:0b:0b:26:05:f8:f4:54:48:dd:f5:f9:63:0a:
c7:88:03:eb:35:4d:61:fb:fd:eb:cf:f7:a0:3e:97:1c:7e:42:
1d:11:bc:31:37:44:5c:e3:42:f7:7c:77:b2:32:79:33:dd:21:
db:4c:c5:29:4e:7a:e1:6e:32:47:c8:ae:72:ae:ad:39:05:77:
73:e0:7b:bc:6a:f0:24:68:3d:97:72:de:50:15:e5:59:67:87:
8f:08:cb:17:18:a3:de:2d:d0:87:be:c3:67:38:92:ff:e8:b3:
09:3d:31:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:23 2025 by rpki-client