Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
File: KfUkAji4KPFuYCKeJjNQPwSEZZk.mft (raw, json)
Hash identifier: DuIHl0zfF+IQ5/ezo9dsgF8E8L8aU1Y0hgweVo+CYbA=
Subject key identifier: 8D:D7:1A:30:7C:D6:3C:BF:70:6E:DC:2C:1D:1F:41:DD:92:C4:3B:77
Authority key identifier: 29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99
Certificate issuer: /CN=29f5240238b828f16e60229e2633503f04846599
Certificate serial: 0199FEB4FC095904D05FF75DBD6E4E5A51F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
Manifest number: 03D4
Signing time: Sun 19 Oct 2025 23:01:37 +0000
Manifest this update: Sun 19 Oct 2025 23:01:37 +0000
Manifest next update: Mon 20 Oct 2025 23:01:37 +0000
Files and hashes: 1: KfUkAji4KPFuYCKeJjNQPwSEZZk.crl (hash: ljBDCvKmMGZOm0kxGC+hcDaeYaNz0+QV1WjYd7c4KdE=)
2: ffvaic9mo-Ox_7Jsdhd4jhWeyvM.roa (hash: nAU1XWM3o+xHaVb0+VtmU8Q3s90CIRxbMQo+s7S+UMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:fc:09:59:04:d0:5f:f7:5d:bd:6e:4e:5a:51:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5240238b828f16e60229e2633503f04846599
Validity
Not Before: Oct 19 23:01:37 2025 GMT
Not After : Oct 20 23:01:37 2025 GMT
Subject: CN=8dd71a307cd63cbf706edc2c1d1f41dd92c43b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:46:ee:a7:e5:c1:20:6f:b9:62:ff:54:ba:
2b:ec:e8:f5:b7:b5:34:7b:1a:f4:df:c1:f7:12:e8:
2b:bd:5f:c3:17:fc:d9:53:f4:b5:de:9e:ba:a7:fa:
96:71:d2:4e:b7:7e:24:97:9a:fb:91:35:87:78:44:
3c:4a:99:b0:82:95:0c:f0:f4:5f:06:7a:49:45:27:
60:d0:b0:a9:19:3a:97:d2:f8:c9:0c:94:bf:2c:29:
89:21:21:75:f6:ea:5c:36:a3:6e:50:6c:d4:eb:22:
ca:2a:29:94:00:e6:a3:9c:c3:e4:bf:49:d9:c9:0f:
3b:34:a4:76:58:4f:3e:f3:19:59:06:3c:f8:da:1a:
b1:68:3a:46:0a:18:3f:41:47:1d:b0:db:6c:21:de:
ed:90:9b:98:cb:c2:17:31:17:a5:9f:99:6d:3a:ed:
1d:25:b3:d7:3c:87:dc:5f:5a:4f:57:a1:17:e1:d2:
f3:a9:5f:9d:ce:03:40:0e:21:78:31:aa:1e:e8:e2:
a6:8e:0e:19:04:44:88:67:04:9e:bf:00:7f:aa:8e:
73:b5:65:d9:85:32:3e:2b:71:33:5c:a7:d7:9a:1f:
70:86:18:ab:92:58:76:32:b8:76:6e:c7:0b:d9:f6:
a8:8c:9b:8c:e3:42:40:3d:82:46:f2:2e:ad:ad:b8:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D7:1A:30:7C:D6:3C:BF:70:6E:DC:2C:1D:1F:41:DD:92:C4:3B:77
X509v3 Authority Key Identifier:
keyid:29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ef:af:43:8d:93:46:d3:14:3c:a8:20:3e:55:78:b7:1a:32:
0c:79:62:d4:03:4a:22:64:50:19:7f:ba:ec:b8:06:4a:e2:96:
1d:b0:e4:4f:d4:d6:cf:90:19:d5:12:14:63:ad:71:3e:d8:21:
68:98:a2:16:ea:cc:1f:86:ee:28:9b:ac:d5:8a:85:ec:20:a2:
09:d8:54:c8:a3:a0:bf:e5:3f:18:76:8c:20:86:45:53:da:50:
84:74:83:85:b2:2c:dd:3d:a2:1a:cd:ad:06:c5:ec:90:4c:15:
c0:0b:00:33:ce:e0:40:b2:57:14:3b:15:3c:5d:1f:16:7e:c8:
01:d1:9f:5a:18:50:fc:1a:f1:a1:7d:18:fc:61:6a:c0:6b:c1:
79:a2:f0:17:da:0b:b2:bb:b2:5c:4c:52:3e:1a:d8:aa:32:1c:
58:c9:f0:d7:00:55:56:93:84:f2:b9:44:8b:4f:43:38:f7:bf:
08:c6:fb:8b:7a:3c:29:9c:22:8f:e9:0a:e0:29:83:3b:b7:80:
91:21:5d:9c:1a:d8:23:29:3d:ea:7e:83:7e:6f:db:d2:b4:bd:
65:6e:3a:57:2a:f7:a7:43:c1:d8:34:18:31:33:c3:8d:69:e2:
dd:23:e4:20:2e:ac:4c:41:b1:84:0e:85:36:3e:93:9f:7d:0b:
39:2d:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:05 2025 by rpki-client