Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
File: KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft (raw, json)
Hash identifier: DQXrEQ8n5sHnXaTQup7IkpXhr3Kt6/MnPFwl5DS4QiE=
Subject key identifier: 85:ED:16:40:77:94:2F:0F:82:57:3B:16:D0:CA:3F:E7:9F:AF:24:B4
Authority key identifier: 28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
Certificate issuer: /CN=28693b0056de87d84baccdd805d0365fac60f67c
Certificate serial: 019A4E18D574E72A9C51BEDDE9EA893B6E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
Manifest number: 034D
Signing time: Tue 04 Nov 2025 09:00:41 +0000
Manifest this update: Tue 04 Nov 2025 09:00:41 +0000
Manifest next update: Wed 05 Nov 2025 09:00:41 +0000
Files and hashes: 1: KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl (hash: 2H3dDac2jJdKZydN8YzUdLE/yPDrdUZQWc1qHBxGAlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d5:74:e7:2a:9c:51:be:dd:e9:ea:89:3b:6e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28693b0056de87d84baccdd805d0365fac60f67c
Validity
Not Before: Nov 4 09:00:41 2025 GMT
Not After : Nov 5 09:00:41 2025 GMT
Subject: CN=85ed164077942f0f82573b16d0ca3fe79faf24b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:1a:51:a7:45:cb:4a:53:6d:50:91:aa:07:
4b:0f:a6:7d:f3:78:4c:eb:58:32:8a:5e:7c:59:6d:
ea:e4:91:36:ad:37:5c:9c:a1:0a:b7:33:ad:ae:5c:
7f:4a:4a:1c:e2:17:ae:b4:38:cf:d9:af:a6:dd:d8:
5d:78:d6:f3:9c:44:01:77:13:c7:de:f8:ce:11:7a:
e5:e9:36:1f:a1:71:b1:71:ee:bb:01:5a:7a:9b:f3:
ad:a0:8d:b2:ff:e2:7d:fb:f5:30:6a:5c:c5:11:36:
13:c7:1a:1f:16:57:c2:51:08:1f:b1:33:a0:f4:a9:
dc:82:0c:b5:0e:81:a9:06:31:cf:36:fa:98:99:49:
55:ef:db:01:09:b7:21:75:ad:5b:85:4d:cb:94:d6:
33:40:2f:18:f7:de:56:d9:e1:c3:73:26:df:09:c9:
eb:cd:e7:21:b0:57:48:6b:f4:e5:c1:ce:c9:bb:26:
3c:28:5a:8d:28:7e:2f:62:e7:6e:8c:03:de:79:d0:
4f:82:d2:cb:72:82:53:32:74:2d:e3:e8:d9:0e:79:
39:f5:01:e5:65:d8:9d:38:98:be:6a:cf:f9:e1:13:
b7:df:a4:bd:38:08:15:bb:c0:5c:eb:fd:80:8e:6c:
6c:48:d7:e6:de:0e:46:1c:a5:01:80:0f:2e:15:a6:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:16:40:77:94:2F:0F:82:57:3B:16:D0:CA:3F:E7:9F:AF:24:B4
X509v3 Authority Key Identifier:
keyid:28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e5:53:03:26:1b:6a:b2:79:4e:51:16:48:36:89:23:cc:1a:
20:c8:85:8e:30:80:76:79:27:0a:53:32:10:df:f4:d7:63:17:
8a:e4:25:3b:5e:bc:da:ce:4c:b5:08:6c:e5:0b:35:25:ed:12:
ad:0e:9c:54:7e:f1:29:78:34:c6:ff:a7:a3:72:73:ee:fb:fb:
4a:2c:39:3e:e2:20:2a:82:50:79:d6:ae:5f:9d:b6:68:5e:4d:
76:e4:2f:9b:da:75:e0:85:ab:61:00:ac:6b:b1:f8:29:98:ed:
c6:61:5b:c5:8a:5b:2c:31:f4:b6:89:77:29:30:2e:e3:92:bc:
fe:20:67:30:3e:f0:3e:63:68:c8:35:1c:63:a8:79:4c:99:e6:
6f:69:3c:22:a5:6b:d9:bd:1a:51:26:c6:39:eb:3d:f9:7f:fb:
93:b0:7e:9e:9f:72:b7:23:29:ae:05:88:8b:be:82:5a:ca:f3:
ab:65:25:91:1f:72:22:b6:6a:31:85:d0:29:f4:f5:18:6f:5f:
d9:15:3d:ea:27:e1:ec:30:4d:37:e2:20:5c:e8:1a:27:c2:4d:
82:af:66:bf:a0:de:d1:82:ce:18:ea:46:cf:1f:7f:35:e6:4d:
33:1d:77:d2:1b:ff:14:50:c5:26:48:5f:12:d4:b9:35:65:b0:
14:c9:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:03 2025 by rpki-client