Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
File: KBZKV1f91XJaYIRPKufvc7EHpMA.mft (raw, json)
Hash identifier: nV7gEfWicsXkCGUkq5jdeb3cAK+EgeiwrSkf6COAW+U=
Subject key identifier: 5F:A4:97:C9:B2:D5:7D:61:7F:55:BB:BA:D5:11:76:C3:65:0A:7D:3B
Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Certificate serial: 0199FEEB8F449D37EC1BBE657D9DCF1DDD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 00:01:14 +0000
Manifest this update: Mon 20 Oct 2025 00:01:14 +0000
Manifest next update: Tue 21 Oct 2025 00:01:14 +0000
Files and hashes: 1: KBZKV1f91XJaYIRPKufvc7EHpMA.crl (hash: L5cICpVUUCqvB8XGbTi/RIZt8ZKIFnVOn6IL/EyS5Zs=)
2: MhHg4JFChvahbVNUw3bJFSkkmEg.roa (hash: 4DOu8CWNY1OjDP1XSPeR4I2ZieWWV4v3/yu30qnq/P4=)
3: jPXAyTxRg6IHrumUsMVZCICaKwI.roa (hash: yu/3MPqNqBbwh5Kh6v8tYgtrr60bnzQOIu7M1/9ZqhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:8f:44:9d:37:ec:1b:be:65:7d:9d:cf:1d:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Validity
Not Before: Oct 20 00:01:14 2025 GMT
Not After : Oct 21 00:01:14 2025 GMT
Subject: CN=5fa497c9b2d57d617f55bbbad51176c3650a7d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:e7:e9:5f:11:4c:31:7f:bc:34:dc:31:00:
e5:0b:c8:a5:d3:42:22:56:c8:cd:7b:d8:90:90:46:
5d:1c:77:7e:36:80:c9:9f:54:d1:92:8e:12:ac:9f:
6d:9c:50:9b:ac:97:e1:7f:66:1c:51:61:19:a0:e3:
f0:f5:72:23:19:11:b3:df:61:8d:61:86:65:d7:af:
73:60:73:67:81:b7:5e:6d:72:de:8d:43:e7:b1:9a:
e6:6f:37:62:3b:18:31:67:d5:ea:61:83:9f:67:e8:
6b:57:6f:a1:21:a3:b1:12:db:16:b5:ec:e9:34:66:
b2:dd:be:1f:c0:09:36:af:3d:13:38:34:c2:a8:1a:
25:27:04:62:f4:69:eb:a4:ce:f5:f6:5a:43:55:44:
44:bf:9a:1a:a0:8d:ba:00:e6:cd:6f:9d:b3:ed:88:
7a:d2:02:35:16:6d:0e:fa:f1:e6:b8:2d:44:fd:b9:
d1:85:98:8f:18:7c:44:d8:73:49:a8:b9:03:99:42:
90:ab:b7:0a:ea:90:17:e1:a3:1b:eb:65:b4:02:7a:
bc:f7:45:59:cf:ff:7d:30:28:55:39:04:4a:92:24:
b8:89:6d:75:e5:57:57:fa:37:9f:71:c0:88:c2:be:
c7:62:83:7e:f3:3d:73:d4:c1:c6:86:74:1c:72:e1:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A4:97:C9:B2:D5:7D:61:7F:55:BB:BA:D5:11:76:C3:65:0A:7D:3B
X509v3 Authority Key Identifier:
keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a0:63:98:a0:e7:5e:d1:1f:fe:7e:a2:69:ce:c7:48:38:40:
c1:5b:32:ec:4e:de:1f:69:93:24:d7:de:a6:c9:88:cb:e0:5c:
e5:b1:9a:de:bf:21:39:40:dc:60:04:73:fc:ca:11:07:e4:55:
59:fa:b9:d3:e2:f6:17:9c:6a:08:84:10:d0:67:44:79:be:fa:
38:17:b8:ae:55:41:62:a7:94:e2:63:ff:bd:20:47:f8:8a:d2:
0b:16:cb:15:12:98:a9:9c:66:80:f2:1a:9b:c7:9d:20:aa:ff:
d5:ca:87:f4:ce:d2:e4:40:7f:91:5b:80:6a:46:ac:a2:79:6d:
62:18:ad:9f:09:18:c4:b1:19:8b:b4:4e:8a:71:33:9c:a6:1e:
51:62:3c:d1:90:b3:5d:96:c8:89:34:39:70:c8:3f:0b:e7:e2:
68:ca:2c:fb:4a:c2:58:fe:d9:e8:8e:90:7b:c3:37:53:ae:6e:
6a:9a:78:41:20:51:aa:f8:d1:1b:e6:6e:d5:9f:ad:98:78:53:
3b:b5:39:40:4c:9d:ea:cc:79:f7:e2:e2:fe:bb:e6:aa:f4:5a:
b8:32:65:f3:41:96:a8:dd:00:9f:ee:02:80:3e:a1:d3:59:a0:
76:f3:05:68:f6:b8:9c:e8:9f:10:ec:72:44:90:9e:4f:56:fc:
e8:36:89:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:38:33 2025 by rpki-client