Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
File: KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json)
Hash identifier: ewX3/OrmiGQblivgW1+1TWsJVoZSy5KNQJrEXszopX8=
Subject key identifier: E8:8E:9E:07:9E:1F:9E:9E:A0:8A:CD:FB:57:CD:76:6E:11:D8:BA:BE
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Certificate issuer: /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial: 019A4E4F6BE54F13D26FC3F5048D0D6549F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
Manifest number: 108A
Signing time: Tue 04 Nov 2025 10:00:18 +0000
Manifest this update: Tue 04 Nov 2025 10:00:18 +0000
Manifest next update: Wed 05 Nov 2025 10:00:18 +0000
Files and hashes: 1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: HSWckiTLosoutmhSxP+rpqFNwOyueEn0TynTJ0CIar0=)
2: jp-8lbUOvN6sUPZsTL-dh7MOVR8.roa (hash: /kMpoM5rzLA4Q5DdnfjuYEV0in2H+0XYtN+u4LENV/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:6b:e5:4f:13:d2:6f:c3:f5:04:8d:0d:65:49:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
Validity
Not Before: Nov 4 10:00:18 2025 GMT
Not After : Nov 5 10:00:18 2025 GMT
Subject: CN=e88e9e079e1f9e9ea08acdfb57cd766e11d8babe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:21:de:fe:58:f9:ca:31:d2:fd:8f:1b:9f:
ec:84:b3:b7:c9:55:43:8e:db:6d:54:03:81:5a:4f:
aa:2d:73:fc:02:e6:ae:3f:e8:a5:65:ed:9c:fe:c8:
03:d7:9e:6a:8b:01:95:53:b1:b8:35:8e:4e:d7:ff:
af:fc:d9:ff:36:90:77:22:46:f3:5f:df:f2:ad:2b:
a0:ba:fb:ac:31:3a:4d:28:b3:82:a2:b2:fd:a4:a5:
d1:53:ed:43:8d:fd:1c:84:6e:d0:03:97:1b:06:32:
ef:d2:e8:80:eb:fa:1c:79:5e:c0:75:ac:13:9f:c0:
12:8d:37:e2:ec:bb:86:5b:78:d8:d7:20:d0:20:8e:
19:f4:d9:d7:4d:a3:eb:2c:1b:69:b0:7e:f1:82:51:
79:45:59:10:06:48:24:17:79:05:4c:08:9e:f2:93:
f2:49:36:1a:9f:e7:3b:2a:21:46:47:c6:d4:6c:2b:
ad:65:14:71:d5:36:9b:bd:c0:99:11:03:13:40:03:
18:9a:04:47:bd:c7:71:10:a8:ef:cf:ec:80:aa:21:
3a:3b:5e:d2:bf:31:61:89:f0:47:53:d6:f8:45:c4:
23:b2:63:c4:a7:ee:c3:da:10:29:70:22:10:10:e9:
82:dc:1b:93:88:57:29:b4:8e:29:bd:7c:43:4c:16:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8E:9E:07:9E:1F:9E:9E:A0:8A:CD:FB:57:CD:76:6E:11:D8:BA:BE
X509v3 Authority Key Identifier:
keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a7:f5:ab:fc:c4:b1:bb:c3:91:d6:3f:c1:81:76:94:d4:dc:
59:ec:24:bc:3c:59:4e:8f:ee:8b:1b:8a:17:d2:be:cd:4c:fb:
20:e3:2a:d0:0e:23:5a:0b:6f:71:c2:0b:5a:74:d2:61:6c:04:
ba:59:56:32:8d:5a:2d:cf:c5:92:8b:ee:7d:24:1a:2d:11:ef:
81:49:cd:7e:57:d2:33:93:f9:ec:f3:77:84:b0:39:e0:6a:16:
d5:f7:e5:b1:87:67:5f:ad:41:af:11:78:bc:6c:1f:af:0b:37:
32:78:d1:7a:56:f9:09:a1:46:27:8c:5a:03:64:af:d0:f3:18:
d6:ee:d4:a4:9a:1c:81:d0:27:1e:02:f5:ff:29:22:43:00:e8:
43:46:a1:10:c8:4b:ef:b5:8d:67:5a:a8:33:c1:16:44:76:ca:
f7:49:93:c6:5a:1b:9f:2e:bc:70:da:b0:bf:48:89:c5:92:c6:
eb:58:d4:5a:52:1b:7c:2c:a1:b9:86:98:b7:df:b7:cf:5b:11:
17:32:a3:fa:13:5d:f7:8e:0e:7b:99:19:4f:9d:4b:3a:e9:6b:
23:bd:19:4e:ca:4e:d5:dc:46:31:93:e0:29:50:27:79:cf:b8:
43:0c:8e:64:46:08:23:7a:0a:bb:15:b1:2a:ac:fd:3a:ce:2c:
74:0f:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:09 2025 by rpki-client