Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: Dzl/7CToDalSWBWodosnIB3xwHHTGC67SoCLTEvdBAo=
Subject key identifier: 3C:83:59:B2:26:5F:54:B7:63:48:14:29:85:34:E2:20:96:06:F7:34
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 019A522CC84BD3A6FE94D34BA09CE43BFB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 101D
Signing time: Wed 05 Nov 2025 04:00:57 +0000
Manifest this update: Wed 05 Nov 2025 04:00:57 +0000
Manifest next update: Thu 06 Nov 2025 04:00:57 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: w+wZ/s0uJ901DZQOQxWG+jEb7KfkP2dc26KATGvXs8Y=)
2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:c8:4b:d3:a6:fe:94:d3:4b:a0:9c:e4:3b:fb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Nov 5 04:00:57 2025 GMT
Not After : Nov 6 04:00:57 2025 GMT
Subject: CN=3c8359b2265f54b7634814298534e2209606f734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:7e:d9:f2:03:bf:e0:67:91:be:f4:aa:4a:
c3:41:86:ee:b3:84:f6:38:bf:d6:87:f4:3b:12:59:
0a:70:19:87:92:71:e9:97:17:8b:13:13:a6:0a:2e:
e7:76:38:13:a7:79:55:c1:56:84:e6:eb:5b:f8:43:
2f:b0:0c:46:52:6d:dc:3d:eb:80:3e:2a:a4:c8:13:
e2:1a:eb:69:1e:39:18:9f:66:e3:62:2b:55:c3:b2:
08:76:37:a4:60:cb:68:cf:fa:0e:79:9c:0d:9b:2f:
ef:e8:90:2c:5b:0c:28:93:6b:85:a8:4e:bb:9e:cf:
22:33:5b:3c:13:72:92:66:34:8c:95:7b:7e:0a:9e:
b0:cd:70:ed:b1:05:11:50:05:15:24:63:ab:ab:2b:
58:31:90:81:85:a8:cf:94:84:d9:eb:d0:2b:6c:f1:
ab:bb:d5:c1:4a:02:e3:a2:31:39:7e:9e:43:58:1d:
6b:c3:9c:20:41:69:09:77:04:06:d2:ec:2a:70:13:
3f:ec:ce:d8:f5:2c:b6:63:3e:4a:ac:f9:24:d7:d6:
3a:cd:8a:e8:09:af:98:2d:7f:cb:1e:e3:2c:05:db:
c5:5f:1e:18:ab:72:64:f4:9e:23:c4:8a:58:5b:c1:
24:29:32:d1:2c:83:10:27:ea:15:96:a5:c8:c7:a9:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:83:59:B2:26:5F:54:B7:63:48:14:29:85:34:E2:20:96:06:F7:34
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:65:53:eb:06:f4:31:e7:41:b6:09:70:88:92:53:d8:80:b0:
89:ce:69:4c:08:32:6c:91:f4:d8:e7:ed:bf:9c:33:c0:f9:f3:
48:d2:ca:e6:cf:d9:1e:6d:b0:ea:86:62:6a:18:ef:08:89:0b:
0d:46:59:02:69:8d:75:6a:70:6c:2e:fe:05:8c:91:05:3b:38:
eb:55:a8:0d:96:3d:24:a3:49:d0:72:29:a8:f4:9a:b1:31:2d:
ce:dd:17:5c:53:b9:6e:04:4b:98:7a:50:9b:2c:eb:04:47:4f:
1a:4c:8f:cb:6a:ef:17:9c:2d:57:ab:4f:de:26:af:c0:9a:a8:
a4:e4:3c:71:46:8c:f2:05:fc:2e:a3:1a:f5:aa:74:a5:bf:f2:
26:40:99:f1:f3:b1:cb:d0:81:7b:b3:7c:56:42:ab:04:43:5e:
7e:ad:14:a5:2a:6a:76:9f:cc:2a:0e:42:b3:3d:08:ba:1e:0e:
f4:b2:23:05:23:a1:6d:6e:db:b4:0b:57:3c:79:9d:50:4f:35:
fe:c9:73:d1:1f:76:be:2a:70:21:b8:6e:66:ea:7c:84:29:10:
60:cf:f8:e0:40:5b:a6:bd:16:8d:6a:2e:c0:a3:e2:cc:ff:8e:
cc:80:14:59:72:1f:e6:26:e0:41:79:b9:4d:e3:fb:77:0e:9b:
75:03:d3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:25:05 2025 by rpki-client