Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: yX4piMtWY0+blVgfHkpOAh/pfuOBdBrsORrNtuqP0WE=
Subject key identifier: 3C:31:74:87:D2:E0:00:4D:78:10:CC:85:E6:A7:79:71:E7:83:B8:FE
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 019A4E869D51F1892F286B4E36F74549CE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0C29
Signing time: Tue 04 Nov 2025 11:00:36 +0000
Manifest this update: Tue 04 Nov 2025 11:00:36 +0000
Manifest next update: Wed 05 Nov 2025 11:00:36 +0000
Files and hashes: 1: FCRIl5Vt1LPdQ6IrZpaUR6T2zRk.roa (hash: dI7TXuZLS0+y6udtXa2yol0ikupwyIZAlaHrmt/VDI0=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: tdZUpEBdSIZNG1ukNH7CVH5guERw3hWotaibF1BrU+I=)
3: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (hash: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9d:51:f1:89:2f:28:6b:4e:36:f7:45:49:ce:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Nov 4 11:00:36 2025 GMT
Not After : Nov 5 11:00:36 2025 GMT
Subject: CN=3c317487d2e0004d7810cc85e6a77971e783b8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:9d:36:0b:70:e9:45:5b:ab:81:68:cb:a5:
a9:44:a9:98:da:0f:6e:3c:98:fc:56:42:ba:0b:e7:
fc:ce:39:ca:65:d1:25:33:cc:d8:1a:87:1a:7b:e6:
16:5e:0b:af:77:28:aa:2d:77:0d:db:61:91:34:6e:
00:e7:a5:ee:5a:db:07:e6:a2:ed:3a:2c:b6:78:b1:
e5:c4:e9:e5:ee:c5:58:e5:2f:08:dd:2e:fd:64:92:
cc:fb:34:21:7c:dd:16:8e:85:1a:0f:b0:f4:ff:9b:
ed:99:06:f3:ff:73:37:6a:a1:cd:ba:b3:05:e3:25:
71:ab:e3:b7:89:ee:6c:2d:0d:0c:33:38:30:2b:f2:
5d:bb:52:71:72:38:97:47:d7:8c:fe:67:ec:bc:87:
dc:24:58:a6:53:50:fc:31:29:1b:ba:90:f0:a5:e1:
48:5f:63:28:c1:23:20:0d:e9:64:1c:02:26:e1:dd:
7f:0a:02:12:a3:a9:ee:9d:de:85:d3:df:6c:84:0d:
84:8c:9e:61:92:e0:05:a4:19:82:65:29:c2:8d:67:
c8:e6:09:0e:f1:e0:e1:c6:9a:e1:e5:cb:6a:86:e0:
9f:39:ca:09:77:f2:50:2a:09:b6:05:61:8e:9c:03:
88:26:4f:03:a2:3f:34:40:13:40:91:51:95:5f:d4:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:31:74:87:D2:E0:00:4D:78:10:CC:85:E6:A7:79:71:E7:83:B8:FE
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b1:94:84:21:d8:46:35:4d:c9:92:78:db:78:44:3e:93:02:
44:b3:53:67:c8:7d:cb:3d:44:02:ee:0b:83:ea:26:e8:49:a8:
91:9d:33:9c:33:16:20:2c:2b:78:92:7d:d6:0c:ce:6d:6f:b9:
d6:9a:06:2f:4b:d6:58:9e:63:07:33:05:b2:5d:c7:5e:64:cc:
e1:b6:0d:67:b5:5f:11:07:d5:5d:f8:2b:7d:d4:5a:0c:eb:91:
19:bf:a0:c7:39:46:04:51:28:af:ff:d0:70:77:2b:8d:5d:36:
80:1c:74:cc:2d:c2:79:b6:d1:a8:78:6d:d2:dd:7e:52:6c:59:
b8:89:d9:fb:e9:ab:11:21:b9:6b:68:d8:9d:e1:7b:b3:94:7c:
20:92:41:f8:44:4a:d7:98:76:da:96:a6:3e:5a:bf:c0:b7:d5:
7e:2c:ad:4d:57:8a:93:e7:88:40:0f:36:0d:ba:3b:1d:ee:17:
bb:5e:f4:ba:06:45:91:20:90:ec:18:71:2d:37:3d:8c:70:0e:
9e:5e:4d:9b:e7:2f:72:3b:11:65:bb:3d:fc:07:25:9f:9b:ac:
4f:86:4b:e1:33:60:f0:ff:1f:54:59:3f:32:d7:20:99:8e:76:
9f:cc:b8:40:e0:82:db:6d:5c:b9:5d:8b:8b:4b:5c:83:3d:b1:
48:a2:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:16 2025 by rpki-client