Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
File: KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json)
Hash identifier: rWODS67ff7MBbNA9S1p9e9E+9BaVWYjGVKtohikfKN4=
Subject key identifier: BD:A8:1E:A8:7B:E3:15:60:B9:FB:C2:71:ED:A5:33:E3:31:09:E4:B3
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial: 019A4D06AC2A0463311694C78B80788ECC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
Manifest number: 13E9
Signing time: Tue 04 Nov 2025 04:01:14 +0000
Manifest this update: Tue 04 Nov 2025 04:01:14 +0000
Manifest next update: Wed 05 Nov 2025 04:01:14 +0000
Files and hashes: 1: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: NyEkkyjebSubLwuvCmXtow8NbB5vlj0m3UokLhDUJD4=)
2: lKv_MpftntPeWIBfQDo4EvQnOCE.roa (hash: v96JNz5ZiqAWk2kEUzYU+IVtwUC39vYGpp2p54BaFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:ac:2a:04:63:31:16:94:c7:8b:80:78:8e:cc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Validity
Not Before: Nov 4 04:01:14 2025 GMT
Not After : Nov 5 04:01:14 2025 GMT
Subject: CN=bda81ea87be31560b9fbc271eda533e33109e4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:a4:a3:31:bb:79:4b:2b:45:99:95:90:78:
f8:f8:19:31:7b:2b:30:cc:b9:81:e5:48:ef:05:a3:
93:59:a3:11:9c:fa:15:ca:be:82:ef:06:9f:06:c2:
b7:9c:6c:4c:79:eb:fe:6c:a8:d3:87:80:c4:81:3c:
6a:1e:9e:f9:5e:d1:d3:d4:fd:3f:5b:19:9f:9b:f1:
91:f9:68:1c:36:55:80:ac:2e:ea:02:c8:13:c3:83:
0b:c5:87:24:18:d9:5a:99:0e:15:b0:2b:d4:7c:ec:
82:e9:08:0e:7a:e9:9f:bf:5f:67:1a:c7:02:8d:1f:
d0:ab:39:d6:e5:5e:fc:ae:c7:b0:b6:81:91:22:81:
39:63:80:e3:37:ea:82:cd:9e:ec:ea:34:f3:1c:d8:
35:67:7e:cb:17:11:31:5a:11:7d:1f:62:1b:c0:02:
3e:d0:f4:77:52:7a:cc:5a:37:16:34:6e:5b:62:8c:
cb:16:53:4e:ef:c8:cc:8b:1e:ae:3c:9c:3b:94:d5:
1a:2c:9d:d6:b6:d2:ba:85:0f:97:d0:5c:96:66:1a:
b2:62:da:a6:9c:4f:ae:f5:66:02:cb:f6:3a:dc:ed:
6d:5d:11:d2:60:05:a4:02:af:d8:e1:9b:58:5d:e6:
e0:90:2a:74:16:56:4f:e4:d2:12:fa:f6:5f:46:4a:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A8:1E:A8:7B:E3:15:60:B9:FB:C2:71:ED:A5:33:E3:31:09:E4:B3
X509v3 Authority Key Identifier:
keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fc:00:d6:89:24:6c:fa:1a:e1:97:3a:6f:5b:dc:a0:c4:c1:
9b:26:44:ce:db:33:6c:7a:99:57:a7:69:d8:d7:01:cf:4a:96:
92:c1:d8:9c:17:71:99:63:8b:69:f9:32:29:be:f4:54:a1:3e:
a2:6f:f0:8f:73:7c:16:ab:27:f3:00:46:e1:97:dc:4d:fd:9b:
57:f5:d7:d8:9e:c6:be:00:bb:ac:0b:01:29:67:53:81:0d:c0:
21:38:75:43:17:85:62:d7:43:82:b7:71:3d:d5:66:b3:9b:e9:
b7:5b:75:d8:d5:70:9b:2a:ca:93:ed:fd:75:ec:1c:54:59:7e:
23:33:91:10:66:9a:2f:df:3c:2c:a1:08:1b:d1:b8:d0:05:e9:
b5:5c:f9:b5:04:00:46:e0:df:13:ca:24:e2:90:1c:b1:72:1f:
47:20:ce:35:9c:24:7c:1b:d4:aa:5b:cb:2a:80:33:cd:c2:c6:
d3:38:6e:ba:31:ee:44:74:b2:2f:e9:52:f2:1b:05:27:64:c9:
a6:04:b8:b1:e2:8f:a8:ef:34:1d:20:71:8c:e7:b8:e7:32:5f:
6a:e6:1b:7c:7a:69:94:2d:37:df:68:38:4a:b6:f6:d4:34:42:
74:31:42:c3:b4:25:b4:e8:31:34:be:a9:df:01:e3:33:36:02:
57:7d:ed:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:39 2025 by rpki-client