Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier: rM56vNmvkqMuc4upBmSLwf9xEj7+yTVZycSIFAN9EAs=
Subject key identifier: 74:A6:FC:95:B0:5D:29:CE:8C:01:9A:1B:A8:C9:9E:35:90:46:22:84
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 019A05C8DF580265BA9AC27CE275B56FF24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number: 16E9
Signing time: Tue 21 Oct 2025 08:00:41 +0000
Manifest this update: Tue 21 Oct 2025 08:00:41 +0000
Manifest next update: Wed 22 Oct 2025 08:00:41 +0000
Files and hashes: 1: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: MUQcaHuF9gNE612xf9wP4e6u83Ks3ZSjTdp151t/pFo=)
2: VL0JqwmqF16Z9vYeG0MjePH-HaI.roa (hash: pSsEMVRtkWy4MtHaQ+2yZDRrd+dgM8mCSpJI0iLDlbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:df:58:02:65:ba:9a:c2:7c:e2:75:b5:6f:f2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: Oct 21 08:00:41 2025 GMT
Not After : Oct 22 08:00:41 2025 GMT
Subject: CN=74a6fc95b05d29ce8c019a1ba8c99e3590462284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:fd:a2:21:2e:ac:3c:ef:e7:44:75:e1:63:
4e:c5:42:d0:e9:c3:e8:32:68:9c:6d:84:fa:45:f8:
07:29:14:fc:3a:78:9b:22:35:e1:b1:de:2d:38:e7:
92:a9:96:98:5d:79:56:1e:65:6a:b7:20:2b:18:a3:
a5:9d:6e:51:fc:b0:54:54:82:82:9d:e6:52:05:f7:
7a:c8:d8:82:f4:15:8f:8b:10:e0:65:4e:4f:6b:c3:
77:e6:31:a2:43:3e:c3:4c:1f:26:0a:ed:2a:ca:49:
5f:38:a1:08:ed:bc:7a:0d:c3:52:65:48:27:f2:57:
5a:57:30:d5:b8:35:a0:d6:47:d2:2a:c1:37:64:2e:
bc:31:52:e6:e2:5b:14:7c:49:40:a2:26:8a:44:14:
c0:20:7d:67:bd:57:23:31:af:45:56:b5:18:9b:ee:
2e:ba:2d:15:43:5f:52:bf:97:f5:2a:0c:38:04:06:
01:61:bd:7e:d8:00:a6:b3:65:f9:c5:34:53:13:8f:
78:36:02:dc:e5:50:84:2a:d8:f7:95:0f:a3:5d:14:
32:c1:27:a4:f7:71:02:c0:74:7d:1a:db:4e:bb:30:
18:76:c7:3a:99:15:78:8b:91:45:20:49:33:7b:55:
7c:98:98:ad:80:87:3e:f4:68:46:19:9d:97:e4:d5:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:FC:95:B0:5D:29:CE:8C:01:9A:1B:A8:C9:9E:35:90:46:22:84
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:33:3e:c5:4d:b6:53:a2:91:0a:b0:41:f4:ee:05:33:84:e4:
b0:c0:ce:2a:65:50:85:b7:9c:4b:a2:a2:c6:a3:b5:35:a2:1d:
74:22:09:3b:a4:9f:7e:1c:7f:18:d0:e4:21:68:1c:6b:bf:2b:
98:4e:37:58:19:20:65:86:d8:b6:7f:30:7f:61:bf:9c:23:ca:
c5:90:2a:71:c5:d5:1b:e0:f5:27:db:59:4a:64:de:01:d0:da:
fd:d6:85:d2:71:54:5d:b8:1c:3c:cc:e6:1e:46:d9:3a:c5:d7:
a7:46:05:5a:7e:6b:99:42:58:5b:f2:c3:a1:2d:06:da:15:ec:
dc:dd:86:48:ea:25:45:40:ce:1c:93:19:e8:ca:30:a7:a4:8d:
17:0e:aa:38:9d:77:f0:c1:87:ba:06:37:55:f5:ba:41:17:11:
0b:d6:15:77:26:14:83:87:bd:e2:59:bc:5b:35:c3:51:0c:9c:
4d:11:5c:15:54:24:d8:2d:cb:1f:ec:29:f2:6c:24:85:e3:a9:
e4:d5:ed:85:ba:5b:4e:12:61:0a:13:46:b0:95:21:71:85:c6:
8a:f1:78:52:95:e7:ee:72:f6:cf:65:49:73:4a:9f:64:64:fb:
65:d1:53:e3:be:3d:74:88:98:78:a8:01:29:0e:7c:98:c8:b2:
04:fd:24:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:02:51 2025 by rpki-client