Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
File: KdlQvBhFV79QTPK3yUp9zsCHbWY.mft (raw, json)
Hash identifier: W7Vtl3QGCPOrGefA2LsWgHUO7HiDCBfkfVMQf/eUY1E=
Subject key identifier: F2:20:CD:62:64:39:E5:6C:15:B4:05:FC:D2:A1:8B:C6:24:EC:3D:B3
Authority key identifier: 29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66
Certificate issuer: /CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
Certificate serial: 019A4EF4B68C8DAB68AA1AE6C51A1D045D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:51 +0000
Manifest this update: Tue 04 Nov 2025 13:00:51 +0000
Manifest next update: Wed 05 Nov 2025 13:00:51 +0000
Files and hashes: 1: KdlQvBhFV79QTPK3yUp9zsCHbWY.crl (hash: /cAjaHhBFLHuB2ViTOA0n1basDDyQZ8LQhMOlAj02/8=)
2: zbr28h6G65Bn1Q6ZX_BmInmSKTE.roa (hash: ETLOFsK2osYgbAep7Hus0i1EKEQGmJzxLIzfnOkM508=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b6:8c:8d:ab:68:aa:1a:e6:c5:1a:1d:04:5d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
Validity
Not Before: Nov 4 13:00:51 2025 GMT
Not After : Nov 5 13:00:51 2025 GMT
Subject: CN=f220cd626439e56c15b405fcd2a18bc624ec3db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:85:6d:86:33:16:74:77:25:16:44:ba:7b:
4e:de:11:f6:98:83:b3:51:95:97:a8:a8:8f:98:b0:
40:18:b4:75:74:cc:0a:17:5b:e2:bc:8e:2f:c2:bd:
bc:bd:cf:1b:3d:10:18:b7:77:48:94:3a:0d:b2:49:
1e:10:a2:d3:c4:85:be:12:2d:6a:42:84:a9:df:14:
91:ed:7a:04:e5:55:73:68:1a:09:8e:9f:ce:17:8c:
b4:62:2a:c6:a9:ef:48:da:06:df:e9:29:e8:65:4e:
9a:56:fb:10:08:88:1f:9f:53:84:1a:aa:a5:86:a5:
e4:de:51:98:b9:22:00:b3:76:37:c3:8d:bd:d2:b9:
3a:70:32:ca:d8:df:f4:88:48:8f:78:c0:06:12:b3:
ff:6b:18:56:ac:cb:45:95:e2:95:9b:15:00:20:a8:
e4:42:9c:19:cb:dd:37:c9:52:56:b6:6f:af:0a:65:
37:1e:2c:92:e3:45:5c:5d:cb:ee:c9:96:d9:93:48:
3a:01:67:75:1c:84:09:65:ff:27:67:36:bd:81:81:
fe:15:22:c9:80:6b:e3:f5:7b:da:30:f1:cb:b3:ea:
28:d8:bd:8f:d6:d6:03:73:cf:8d:b4:79:9b:73:6e:
ea:3e:ef:e3:d0:44:2f:ba:1e:75:97:07:46:c9:ce:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:20:CD:62:64:39:E5:6C:15:B4:05:FC:D2:A1:8B:C6:24:EC:3D:B3
X509v3 Authority Key Identifier:
keyid:29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9d:fa:cf:fc:64:33:49:8c:e9:9b:95:76:35:83:2b:05:76:
47:0b:61:dc:1f:c6:17:d4:40:d3:fa:4b:e1:28:57:75:7d:af:
ea:32:76:d2:e1:33:a7:45:74:0e:23:34:ee:03:2a:ea:a5:8d:
c6:72:19:58:1f:63:b0:07:f7:1e:41:4a:11:2d:c1:9e:88:c9:
0e:4f:1e:28:0d:63:cd:fa:70:4c:af:73:1d:0f:94:d9:5e:d6:
8e:e2:2e:a1:2e:69:92:cc:81:b2:5c:dc:38:f2:4f:3e:47:b7:
71:ce:4d:08:8e:48:cf:ba:c8:53:f8:ee:55:a5:ec:cd:44:f4:
1b:06:b4:2a:96:33:ad:a9:52:7b:a5:1e:61:84:3f:c1:f7:a1:
e0:f7:50:7f:3c:4f:18:98:a4:ac:00:98:0f:d0:51:05:fc:80:
1e:03:c0:1d:38:82:1e:2b:54:3c:fa:7c:68:ef:8e:9c:46:3d:
4e:c3:41:0b:08:0e:48:33:e1:e6:51:56:96:5f:c1:f3:79:66:
89:bb:61:a7:aa:3a:36:3d:e8:aa:69:66:95:f6:df:15:4b:34:
85:82:03:26:50:c0:26:ac:34:2b:e2:f9:35:7e:d8:c5:47:5a:
b4:9b:cb:e5:de:1c:00:01:1c:31:75:98:4b:47:e9:c0:6c:97:
13:df:1d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:09 2025 by rpki-client