Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier: bbs2zM/yDmTfZlTrVCq2FIvfCkOuoqywGNzaSnhsBx8=
Subject key identifier: A6:F5:56:D8:BC:29:E7:A3:27:02:C2:D2:A9:0D:2E:7A:50:C3:13:17
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 019A50E2D6246EC78E2D0A8F1D6588369C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number: 0FAA
Signing time: Tue 04 Nov 2025 22:00:34 +0000
Manifest this update: Tue 04 Nov 2025 22:00:34 +0000
Manifest next update: Wed 05 Nov 2025 22:00:34 +0000
Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: 3kBhdKMp7M+wgbipTFYwpoHNSZWq/Y8LEa7T3HtA3Yo=)
2: b64Uii9JYXCMSIcDqVfd-guKolk.roa (hash: zu1QMl+md4/UwiMRhp2koQ5VJ3r3EhScu5BVA2+NzSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:d6:24:6e:c7:8e:2d:0a:8f:1d:65:88:36:9c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Nov 4 22:00:34 2025 GMT
Not After : Nov 5 22:00:34 2025 GMT
Subject: CN=a6f556d8bc29e7a32702c2d2a90d2e7a50c31317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:97:bf:1b:c8:22:75:49:33:ae:03:4b:49:
0c:a3:70:63:1b:83:43:23:4e:d7:70:0d:22:0e:07:
39:b9:24:24:f2:ee:8c:45:9e:f9:63:03:5d:2d:e4:
d1:6d:2d:cb:ff:45:25:c1:c7:f1:f9:96:39:73:d2:
d2:10:9b:a3:e1:0b:03:89:ba:90:c5:56:f1:5a:21:
dd:d1:89:48:49:c6:83:38:51:cb:ec:29:f8:ac:8e:
80:e3:9b:83:4a:c8:2a:e1:d6:40:d6:f0:6b:dc:9c:
89:7d:f0:15:96:96:56:0f:91:ed:c3:90:f4:66:18:
dc:88:d8:ca:9f:ef:db:0e:63:91:7f:57:c3:cf:bc:
ef:12:45:f0:27:3e:b2:a1:bf:3a:a6:48:22:52:27:
64:a5:b6:43:4a:ab:ac:32:9e:16:4f:dc:d7:b1:34:
19:b5:c2:8e:9a:8d:f1:8a:7d:20:4c:8f:24:36:d7:
a1:e8:06:82:e3:db:f4:8a:ef:80:f6:2f:44:1a:25:
39:a8:19:68:83:ff:db:6b:86:48:07:a8:2b:21:9a:
cc:b9:d7:a9:e1:ca:0e:ac:22:3f:75:0a:58:0b:f8:
77:f7:78:88:cd:6d:17:71:9c:c0:de:e2:b9:c7:09:
0f:f9:bd:33:41:f3:e8:4d:20:c4:17:47:b1:92:68:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:56:D8:BC:29:E7:A3:27:02:C2:D2:A9:0D:2E:7A:50:C3:13:17
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:22:cc:24:bc:9c:bd:f5:48:cb:df:3c:87:fe:f8:d1:42:7a:
fc:56:b5:d8:24:d5:05:6c:7f:e5:85:00:5a:30:8f:77:de:ef:
65:e6:82:34:e7:b8:e6:47:ec:c3:59:40:a2:ff:56:06:cf:56:
47:91:76:bd:1f:02:64:cb:04:7a:83:78:6d:d2:75:e0:cc:36:
08:d8:12:4a:c4:b6:0f:81:00:98:00:2e:e6:26:16:3b:c9:bc:
7a:ed:aa:3c:fe:37:9e:2c:3a:e0:5d:02:91:3f:d5:13:fa:84:
ee:57:2d:fb:3f:8f:41:07:b5:4c:6b:a0:8c:6e:b0:3b:4b:27:
79:72:e2:cc:f6:aa:3e:fe:4d:df:76:9d:d6:09:4d:a5:f8:af:
f2:1a:1f:ae:ea:f1:1d:ad:55:5d:1d:47:8e:f7:7b:c3:b0:06:
71:c4:56:7a:8c:a8:49:a1:f0:06:ad:59:59:64:88:3c:db:d2:
de:d6:b1:77:71:49:6e:7b:7a:de:65:95:e8:1a:24:2b:93:0d:
bd:65:83:16:74:de:cd:13:ea:17:73:77:c6:cb:e9:dc:9b:f1:
90:aa:88:3e:41:1e:61:46:31:2d:62:4d:e5:b6:66:10:c9:46:
7d:d4:16:3d:87:00:78:ab:df:2b:97:ec:9b:48:8d:60:7d:1e:
dd:73:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:17 2025 by rpki-client