Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: s3/X0L5DBWGvBtIWLFGzjl+Q32A1h7gfHFiO5sigkuw=
Subject key identifier: 43:04:24:17:3B:D4:9A:E4:DF:8C:76:C6:D2:84:61:4A:82:E2:27:07
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 0199FCC6210AF3A73BF237D1E769E0FEC082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 14:01:06 +0000
Manifest this update: Sun 19 Oct 2025 14:01:06 +0000
Manifest next update: Mon 20 Oct 2025 14:01:06 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: 5rpUfNc2faVvbW/R+cuUHXHQyPw0SJ5PvicaM7BA+Xs=)
2: eoUI00v5kHG-99ELxP-BBcjXoAc.roa (hash: wGk7AZgmxRmrZlb/Q0cgAj09IR2rbdkkeiUHejBRKws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:21:0a:f3:a7:3b:f2:37:d1:e7:69:e0:fe:c0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Oct 19 14:01:06 2025 GMT
Not After : Oct 20 14:01:06 2025 GMT
Subject: CN=430424173bd49ae4df8c76c6d284614a82e22707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:34:04:b0:4c:49:41:cd:8f:a0:02:5d:55:
13:8a:8d:22:aa:c8:46:94:2c:23:f9:21:3a:da:3a:
39:ff:c7:98:cc:2f:fb:c4:ca:2b:21:6f:18:ed:53:
a2:0a:6d:78:a3:44:f6:95:22:93:d4:4d:b3:22:6b:
2d:de:aa:84:ae:e3:63:b1:fb:0b:b2:1f:14:85:55:
36:de:7b:fd:75:28:bd:40:77:62:73:8b:8f:96:f1:
d7:43:4c:fc:b2:b6:64:cd:37:8d:56:73:1f:7f:99:
3e:8b:04:af:52:a1:c5:3a:d9:32:8b:19:de:b2:45:
4f:20:08:01:e3:ce:4c:7e:47:a6:07:67:b9:e1:8d:
22:40:a0:6e:c6:02:d2:13:94:b5:61:56:de:c4:40:
58:f6:a0:6c:eb:1e:43:15:43:e8:11:1d:e8:e9:4a:
0b:15:c7:55:ea:b3:c8:fb:84:26:4d:06:30:cd:e8:
86:87:90:a5:12:7b:25:dc:fd:e2:ce:1d:f1:82:07:
80:73:18:2b:cd:21:54:63:96:7c:e6:81:cc:af:44:
8a:e9:fd:86:e2:5a:b3:26:bc:2a:86:da:cd:70:57:
9f:c3:34:02:c2:d7:41:a7:56:e4:e8:b6:73:a4:85:
8e:00:f7:e5:be:de:64:33:0c:8a:b4:0f:ed:de:d1:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:04:24:17:3B:D4:9A:E4:DF:8C:76:C6:D2:84:61:4A:82:E2:27:07
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:df:97:29:6d:9f:2e:ec:85:85:86:fb:c5:02:bd:91:a6:4a:
05:7d:c6:e7:dc:c3:05:a7:c8:b5:fd:c1:85:af:67:03:44:82:
0d:21:5c:b8:77:5d:19:ec:7e:34:1c:a3:11:81:65:3d:f0:dc:
d8:2b:72:be:c5:a3:9e:a5:82:68:e8:b3:56:ef:e8:c0:1d:63:
e6:e8:3b:85:40:ab:39:87:66:3d:d8:40:1e:dc:58:c1:4c:0f:
3f:25:2e:a6:df:06:51:0c:b1:f1:fa:73:1e:42:75:e0:5f:56:
66:54:2c:35:53:59:7d:88:4b:bc:a2:fc:9f:c9:93:5b:c7:15:
b0:d9:51:ee:1f:9a:c1:28:ad:d0:ba:41:cf:18:9d:c2:32:23:
43:81:c1:07:91:60:d7:f3:72:77:92:e9:a4:f4:3d:6c:00:ab:
0e:ac:21:e6:85:5e:71:4c:49:de:a5:44:56:f0:e7:cf:c8:89:
73:cf:ba:62:ee:db:2b:8c:aa:88:67:6c:25:ac:e0:36:45:71:
43:34:c5:dc:f6:67:f1:e2:5c:58:20:11:eb:97:96:21:ff:d0:
69:32:5e:ac:f9:d6:2e:56:ef:6d:d2:3d:b2:d7:31:bc:ae:71:
7e:86:e7:ba:ed:1b:75:65:05:f0:18:4c:0e:23:0e:3f:f1:cc:
28:f7:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:14 2025 by rpki-client