Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
File: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json)
Hash identifier: TNw/UkPI8AWEjOSQmGOhB8eineW99+x5WDRHFV1LPGQ=
Subject key identifier: D2:7F:B4:36:95:55:57:E6:8C:DD:F1:17:1A:66:CF:AD:90:32:11:58
Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
Certificate issuer: /CN=29da6411a13264dc6de0f101108540ef741ed19a
Certificate serial: 019A4EF5AF4D1642AE5642C257091401B127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
Manifest number: 132A
Signing time: Tue 04 Nov 2025 13:01:55 +0000
Manifest this update: Tue 04 Nov 2025 13:01:55 +0000
Manifest next update: Wed 05 Nov 2025 13:01:55 +0000
Files and hashes: 1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: Q9nx+NeQZhjnoCEdtlnijIhRCq0yAYxKtokofQ6ctRY=)
2: ofG1VLRjjYIcZfzAaNigWWgyFxw.roa (hash: ZHICR+Axb4b3KRXOcmZzuP26q8FUw656ivJ0mJFMsoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:af:4d:16:42:ae:56:42:c2:57:09:14:01:b1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a
Validity
Not Before: Nov 4 13:01:55 2025 GMT
Not After : Nov 5 13:01:55 2025 GMT
Subject: CN=d27fb436955557e68cddf1171a66cfad90321158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:4b:03:12:7b:55:8d:2b:c6:25:52:43:19:
00:1c:bb:bb:dd:5a:81:76:56:ac:71:ed:0e:0a:81:
7e:a8:10:f4:4b:dd:91:3f:01:a3:c6:fa:f2:31:70:
0d:0f:a0:23:a3:6f:5a:38:d4:4a:c5:a8:0a:75:b1:
be:a2:e8:4f:39:d5:27:2c:c6:7e:dd:e3:fe:da:16:
34:5e:0d:48:16:2e:7a:d1:93:36:de:42:b9:c6:e8:
b4:e7:34:a1:ab:4d:b6:77:9d:3b:c9:12:24:84:d8:
2c:d5:8d:4a:9e:2f:a9:6c:cc:50:72:93:94:b0:14:
f9:1b:16:fb:d4:9b:4e:a7:73:08:3f:ab:77:76:09:
95:7a:b3:00:05:8a:2a:66:9a:65:b4:42:03:88:7a:
71:a5:89:ff:37:3c:b6:b2:f8:62:e0:2a:a5:64:0d:
1d:43:82:76:37:7b:17:4f:d2:9a:fd:0d:7b:df:10:
41:3d:cb:b1:f6:3b:6f:ec:0a:02:75:51:29:e5:28:
ba:bd:3d:0f:2c:71:1b:64:aa:a4:28:ae:d0:72:2e:
27:68:70:cc:51:27:69:c2:dd:33:a6:e7:06:dc:8b:
89:6a:0d:3d:4e:2b:a6:52:9a:96:02:8d:0d:4c:8a:
cf:f3:f1:87:4c:1b:52:36:e6:1f:c2:78:ec:b2:b4:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7F:B4:36:95:55:57:E6:8C:DD:F1:17:1A:66:CF:AD:90:32:11:58
X509v3 Authority Key Identifier:
keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ed:0a:09:d6:26:38:ee:30:7c:cb:8f:ca:3d:33:b5:2c:49:
b0:e9:66:fd:64:af:d6:35:5d:de:df:05:02:39:4f:bf:7d:f5:
0c:46:55:35:01:df:86:e3:cd:85:8f:5d:c9:08:67:ec:60:60:
4c:ab:37:12:c3:79:97:a7:75:79:07:31:a9:6d:27:d8:92:8e:
57:cf:c4:dd:de:b0:6f:6b:63:ea:7b:6a:b4:fc:71:38:45:f3:
59:70:1e:e2:60:22:01:a0:da:5f:eb:0f:4f:3c:e5:15:95:c1:
84:35:a8:7a:0d:34:43:5f:97:6d:6d:c4:64:11:e8:e9:77:a0:
ed:91:26:d8:1b:52:e5:16:63:00:0c:1c:24:a5:7c:2e:33:e2:
d5:8a:f2:81:ae:c1:b2:84:58:af:bf:88:f2:95:cf:a6:15:a8:
b4:49:b5:9f:3a:64:e8:fb:ab:c9:58:6d:80:98:a3:fc:1a:e6:
2e:f3:4d:8f:b2:b0:9e:ac:17:7b:e8:e5:e1:d5:60:1e:e3:72:
91:0f:63:21:d6:5c:0f:72:d9:5e:85:30:a4:2b:0e:d1:fc:c0:
0d:a7:92:19:41:ab:bb:53:9c:5d:aa:aa:7f:33:5c:25:50:8e:
bd:ed:f4:7c:6e:a3:d0:b8:2b:53:ca:7e:bf:17:59:80:73:c9:
a2:c7:b2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:21 2025 by rpki-client