Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
File: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft (raw, json)
Hash identifier: 57RaXHMXq2JoqHD+f2Mnc8xeU11+IeHoVH5NLEVo5rk=
Subject key identifier: 5D:A4:34:E2:A0:D0:FD:63:DB:22:0A:9F:74:B2:41:4F:26:B4:E6:4B
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 019A4D0735509C4720F51E9F824607CBBD59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
Manifest number: 0BAB
Signing time: Tue 04 Nov 2025 04:01:49 +0000
Manifest this update: Tue 04 Nov 2025 04:01:49 +0000
Manifest next update: Wed 05 Nov 2025 04:01:49 +0000
Files and hashes: 1: Gxa8ZTehusQ__zJKE-EIDPUx7f0.roa (hash: D3bg8s9LSpHww0XiOamb2fTNkB0scUvbSEDIBYdOll4=)
2: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl (hash: z7fM40oOUCq0ZvIVL0koXPPWUoFwtx4JaEZggeK2u0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:35:50:9c:47:20:f5:1e:9f:82:46:07:cb:bd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: Nov 4 04:01:49 2025 GMT
Not After : Nov 5 04:01:49 2025 GMT
Subject: CN=5da434e2a0d0fd63db220a9f74b2414f26b4e64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:60:9c:44:3e:71:34:f9:05:d4:01:42:a9:
12:1a:ef:68:e1:7a:71:fa:ce:1a:69:02:ee:5d:8d:
59:42:a9:6f:4e:af:a8:0c:38:5d:87:e2:13:af:a6:
67:85:af:cf:39:56:fe:f3:73:8d:09:92:fe:63:3e:
a5:33:f0:4b:dd:98:ce:7f:7e:62:4d:0b:2b:f4:da:
1e:f2:b2:55:85:8b:70:64:5c:9a:c8:41:a7:78:42:
c7:48:67:96:6e:95:f2:b8:37:23:07:0e:4e:10:84:
89:82:23:a5:8a:17:3e:08:f5:7d:c5:a1:6f:46:60:
65:90:d9:ce:56:7f:1b:d1:95:b6:4a:6c:c5:1f:4e:
ee:23:5d:d7:46:c1:4e:d1:80:9f:ca:37:05:dc:79:
50:c2:3f:b8:d2:13:bf:fe:1a:cb:6a:41:90:f5:54:
cd:ba:5d:95:99:61:9b:49:ef:04:e7:da:bb:eb:66:
fe:65:42:b0:c9:3f:6d:95:68:e2:a3:a6:e7:62:fe:
f4:0e:28:3e:f3:45:b0:26:10:a0:31:a1:8c:cc:ab:
44:93:50:c9:1b:58:e9:b3:ab:52:95:82:69:c9:84:
79:ee:da:cb:5a:d6:2d:a1:fe:5d:8c:7e:23:01:26:
04:0f:c1:ac:b2:8a:fd:68:e6:b0:a7:ce:96:fa:81:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A4:34:E2:A0:D0:FD:63:DB:22:0A:9F:74:B2:41:4F:26:B4:E6:4B
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c4:5a:fa:b7:e8:3f:1f:7e:9d:d0:53:f1:a0:17:63:49:75:
42:00:c5:92:ff:b6:e0:81:85:16:39:e8:86:22:64:f6:35:1f:
60:b5:80:a7:be:1e:d9:fe:e2:96:2b:14:60:41:09:d6:8d:e0:
14:52:e4:d6:b5:df:b2:30:6c:e7:40:cf:9b:71:11:1a:95:76:
e8:f9:89:ac:7d:c8:91:5e:30:a7:c3:aa:89:4e:d2:bf:df:a0:
4b:3a:46:c6:61:ae:ee:5b:49:60:b4:27:7b:99:45:77:ac:de:
2c:f0:0e:ba:48:12:fe:ef:5d:ce:0d:68:66:df:c5:fd:eb:a9:
40:fa:0a:05:f8:8d:70:d5:e9:c0:39:8c:36:f0:5c:61:5e:26:
12:53:cd:0f:bc:3a:47:18:c6:fc:4a:df:9f:3c:b4:4f:f2:57:
95:41:4b:f7:b6:80:07:a8:1d:01:c9:36:7c:e6:c8:f0:a1:cd:
8d:23:51:2f:d5:b8:a4:1f:4c:00:15:97:32:e0:38:e2:2f:b0:
3e:70:d9:42:6d:39:27:a0:2b:40:f9:75:6d:a9:82:31:1d:de:
bd:88:7e:8c:3d:b0:61:ed:02:e8:aa:d6:db:ac:16:22:57:c2:
0f:d5:d1:39:d3:cb:16:b4:00:a7:5f:ea:79:39:d7:e3:25:fb:
4e:4c:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:19 2025 by rpki-client