Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: YxriDweQR8hJBu4CZGup2necGM0y5/ileARHIljjIzA=
Subject key identifier: 40:16:DF:7E:BF:3D:E4:0C:97:D1:30:6D:C0:A4:84:98:47:C0:60:E2
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 0199FFC86C8C798FA441935CCDEC3051263E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0DFF
Signing time: Mon 20 Oct 2025 04:02:29 +0000
Manifest this update: Mon 20 Oct 2025 04:02:29 +0000
Manifest next update: Tue 21 Oct 2025 04:02:29 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: BvZQLIgzNPLo8NZqdiLDVQGRxIQBq9Z/ydmsIja+DUQ=)
2: o0NNJAdQ09Zlx7io8L7w4JsxeRk.roa (hash: GHDYyjn7cWOGvu2PuaUkyCHLa21ud2IleT+Ydwgziyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:6c:8c:79:8f:a4:41:93:5c:cd:ec:30:51:26:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Oct 20 04:02:29 2025 GMT
Not After : Oct 21 04:02:29 2025 GMT
Subject: CN=4016df7ebf3de40c97d1306dc0a4849847c060e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:3b:14:61:3f:87:be:30:c0:25:32:65:fc:
28:d2:ef:96:74:1f:d9:c1:79:06:b0:11:3a:14:5b:
d8:d5:76:19:ed:1c:f9:fa:2d:ad:27:9d:ea:89:9b:
1e:e4:c1:80:a6:13:ed:81:cc:62:5a:c1:a8:04:98:
e7:dc:f7:49:c7:2f:a0:fc:21:40:19:61:1a:57:50:
fa:b1:21:0f:3a:f4:80:d7:67:80:55:52:7a:76:ec:
bb:ed:34:7f:e1:ac:71:89:57:8d:2b:92:98:4d:8d:
6e:c7:cc:12:c8:12:1c:a3:b3:09:16:ee:3d:a6:ed:
d8:66:d1:9d:c9:09:9c:0c:5e:29:21:a6:74:81:2a:
9b:65:fb:a8:b8:39:d3:c6:5d:72:94:0c:c5:57:ef:
e6:7c:c6:69:2c:29:9b:2e:ad:8c:c9:a7:b3:51:37:
56:6a:e1:3a:11:20:e1:25:40:2c:c2:82:30:5e:27:
13:d7:5c:ef:98:ef:34:7b:df:3c:0f:7d:f9:05:e7:
53:47:c1:2d:7d:41:9f:7e:49:5d:fc:75:db:37:44:
54:7b:17:dd:03:e1:5d:f9:e6:39:b2:41:d3:9a:b7:
cc:2c:32:2e:88:14:d4:d9:a6:77:e7:7d:1e:36:2d:
d1:85:64:e8:2e:87:aa:14:6a:8d:fc:83:fd:5b:b4:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:16:DF:7E:BF:3D:E4:0C:97:D1:30:6D:C0:A4:84:98:47:C0:60:E2
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:83:da:44:9b:33:ef:9e:6f:17:ec:dd:6a:2c:70:1a:aa:8e:
ee:95:06:95:4c:06:67:58:89:54:84:83:ea:7b:ed:19:5f:42:
c5:90:d8:98:0e:e6:4b:79:00:92:d8:ad:b5:14:77:4a:63:d6:
bf:b2:cf:0a:67:75:f9:d2:a7:7e:c0:1d:80:78:20:63:89:a8:
a3:ac:ec:60:b8:79:ec:b4:b1:5b:3a:1a:90:19:35:ac:31:64:
3b:28:a5:3f:cf:3c:5d:a7:c6:4f:0c:56:24:2b:f0:a7:79:f1:
bf:6c:1e:b3:95:ec:98:58:86:25:66:7b:52:31:57:07:81:58:
53:3f:5e:57:a7:48:f9:83:cc:14:2e:19:b4:17:98:fd:39:bd:
9a:e9:af:e0:56:31:b9:85:a9:7d:6d:ef:7f:58:b6:60:72:5f:
0e:cc:e7:75:60:33:92:26:f3:e6:b4:6f:54:cc:7f:1d:73:1b:
83:bf:76:3c:ca:76:cc:6f:95:ad:38:4a:3d:89:57:d5:f1:44:
5e:7f:ab:da:c1:89:5e:7e:e7:d0:a4:c4:c9:f5:cd:2e:7d:6f:
80:70:d1:ec:01:13:8d:bd:c5:e4:9e:ee:ed:02:d0:a5:e6:fe:
64:27:58:9a:c2:26:4f:e2:4b:8a:60:f7:59:64:aa:8f:94:2e:
24:b8:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:50 2025 by rpki-client