Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier: aiBa43i+7ETprNKy/p0um9iGfW9/xZtT48iC/UXIqyA=
Subject key identifier: 93:61:BD:46:81:A0:D8:10:C0:93:0E:2A:AC:00:E6:C0:CE:CD:BA:8E
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 019A4DE1D4A068BB10470A874FE5B3BE0D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number: 0A5A
Signing time: Tue 04 Nov 2025 08:00:36 +0000
Manifest this update: Tue 04 Nov 2025 08:00:36 +0000
Manifest next update: Wed 05 Nov 2025 08:00:36 +0000
Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: JXA3QfihLb6hor193EFJS9sBZQOYfxu8Xi85E84DFtc=)
2: hy1vd6FMybZThTm3SvjJ_hE7qn4.roa (hash: vLPWUWT2tszs2HUF2XNEiqkWjYMRC5uDHz+kbz1YJLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d4:a0:68:bb:10:47:0a:87:4f:e5:b3:be:0d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: Nov 4 08:00:36 2025 GMT
Not After : Nov 5 08:00:36 2025 GMT
Subject: CN=9361bd4681a0d810c0930e2aac00e6c0cecdba8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:4c:c1:9f:25:4f:75:93:3c:96:64:92:6a:
12:42:44:48:92:bb:e8:bd:98:eb:81:da:1b:6f:ba:
44:eb:f6:b4:78:da:3c:2e:55:74:73:f0:15:4f:67:
13:a5:a2:11:b3:e0:23:40:9e:33:50:e4:bf:ae:ed:
8e:78:b0:c4:91:ae:84:69:3c:d3:06:06:ab:e0:3e:
54:cb:a8:b3:72:3f:39:5a:d6:bd:55:20:25:fd:e2:
b2:77:12:73:42:66:e3:50:d3:4a:8c:a5:69:a9:ad:
53:95:87:2a:45:5d:3b:6f:0a:33:7c:ee:3c:6d:9e:
c9:5a:ba:e0:3f:f3:df:f8:44:6a:6d:2b:b1:43:eb:
83:0b:d5:86:2b:d5:a8:2e:32:d5:15:63:f3:62:40:
be:a6:8d:7e:bf:0d:d1:68:b3:19:66:b7:64:2b:a7:
72:92:77:8a:d3:65:fe:89:18:22:2f:67:5a:fc:0c:
63:5d:59:a8:3e:c9:73:b1:65:a6:d2:dc:b1:bf:94:
7f:62:43:58:59:d7:70:26:5b:64:f4:a6:33:2c:db:
2c:5d:85:5c:b6:f9:db:79:47:27:9b:5b:d0:2d:8a:
66:fe:77:df:51:96:ca:20:8f:7c:6a:43:f2:97:f3:
67:e0:eb:9f:ff:0c:c3:ce:44:36:c7:3a:fa:e7:52:
b8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:61:BD:46:81:A0:D8:10:C0:93:0E:2A:AC:00:E6:C0:CE:CD:BA:8E
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ae:9b:a7:2e:72:54:20:53:0c:a5:01:0f:b2:d0:f5:ca:2f:
10:c8:db:65:8c:78:45:b5:b6:7b:34:be:3d:9d:67:94:66:af:
7e:ff:00:03:1d:64:df:47:6f:02:42:eb:b4:30:6a:4c:52:55:
19:ba:d8:f0:8d:c4:ed:e1:bf:20:dc:66:a2:e2:13:12:16:e1:
e6:a5:62:0b:24:e3:f6:a2:de:0e:5e:06:90:bf:a2:80:92:1c:
6c:0b:02:3a:6f:7c:d2:09:c0:4a:9b:9e:8d:d6:07:79:44:4f:
7c:a5:45:25:5a:eb:fe:ca:21:66:e5:ff:29:64:c0:a1:17:04:
67:d7:78:24:dc:cc:64:bc:76:9c:db:e5:72:81:07:47:17:81:
17:12:f1:29:de:52:01:ee:7a:83:7a:f0:d3:ee:04:4a:be:ed:
01:1f:f0:63:ff:f3:91:b2:c4:44:15:f0:49:fa:41:a9:78:3c:
25:88:ea:ab:0f:b7:3b:a8:06:c6:3e:d8:11:b2:c7:45:1f:d5:
ad:b9:28:53:d2:a9:2f:dc:86:cd:7f:fc:ec:84:08:26:0c:17:
c7:46:ad:c0:c1:bf:8f:6e:8c:ea:b3:ed:ab:4e:eb:85:46:e9:
dc:8d:96:cd:76:90:16:90:15:79:41:29:f1:20:5f:79:4e:79:
04:a0:60:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:00 2025 by rpki-client