Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: Xr8m2iJBeAdPbojWgxtzAt8hjUOSGD9tSASXIlMJ+OY=
Subject key identifier: 1F:3A:FE:91:6B:E2:FD:BC:31:2F:B3:2A:6F:0E:60:AC:37:01:B4:41
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 0199FC219F0D6DE5B4E25F429412AF04BD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: KIbg5KDJf+vrYgC9Vtpixq64xYQZbETrRxaIqaRBKY8=)
2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9f:0d:6d:e5:b4:e2:5f:42:94:12:af:04:bd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=1f3afe916be2fdbc312fb32a6f0e60ac3701b441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:29:e7:8f:d6:0a:1f:d2:8f:37:09:41:40:d8:
a6:af:04:ce:27:41:2d:a9:ec:fe:ff:74:7b:bc:77:
ea:91:83:20:09:7b:4a:19:ee:1d:33:64:53:0b:98:
0c:78:20:2d:00:1f:7c:77:36:7e:1b:8b:f5:4e:54:
8e:03:92:9d:b4:53:8a:ce:ff:78:b0:81:b8:3a:0a:
7a:2b:bb:9b:e6:85:75:bb:db:1f:22:55:41:7e:d0:
50:bc:84:8b:77:f9:5e:b8:cf:90:e5:45:5a:f2:73:
96:f8:1c:9f:45:1d:78:35:30:28:71:ac:2a:d2:f9:
32:b8:25:c5:89:6b:69:74:94:57:8c:50:f6:ca:e4:
b4:47:3f:e5:29:f8:db:5c:e5:3f:80:48:3f:81:31:
a6:16:66:8a:1c:12:c1:bc:0e:98:2c:b0:5e:bc:2b:
25:22:5d:5b:f7:29:c2:5b:70:77:c4:e8:8d:16:f2:
df:07:54:1c:2b:c6:90:2a:fa:c2:c2:49:ee:9d:cb:
0c:1b:3d:6a:5a:74:76:8b:b0:57:98:0d:bc:2c:5f:
6f:d2:e4:29:fe:29:79:01:fa:e3:af:3b:10:57:23:
2d:9c:5f:6b:a1:11:3d:dd:d3:59:12:77:90:51:38:
01:3c:61:0b:7f:97:de:71:e4:c9:84:17:dc:7a:2e:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3A:FE:91:6B:E2:FD:BC:31:2F:B3:2A:6F:0E:60:AC:37:01:B4:41
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a4:14:21:46:86:cc:78:d2:8e:ce:41:8b:d6:d1:80:19:29:
9f:f1:ef:e2:ec:0a:c5:a0:c8:1e:49:6b:9b:68:ce:de:5d:f8:
b6:0a:ee:f3:e1:7a:e2:29:94:17:c4:2a:62:6c:9f:ac:13:80:
70:b1:79:2c:ef:cc:4a:43:00:c5:50:af:4b:1d:58:01:17:79:
10:2c:bf:56:e0:96:ad:23:cf:90:14:37:b1:c4:ba:29:01:38:
a7:3c:90:71:ef:f6:ce:18:fa:6c:54:c8:cf:76:5a:b1:90:5c:
a8:2f:b1:2a:21:20:82:b4:03:2f:1a:27:d0:f0:20:08:a9:d9:
09:01:14:b1:d2:19:d4:00:e0:e5:9b:15:ae:34:70:ad:16:ad:
2d:f0:2c:93:8e:2e:3c:42:fe:aa:a4:6f:3d:d2:bb:97:bd:d9:
53:0f:ac:46:37:2e:6e:93:32:50:0b:79:ad:c3:06:8c:91:39:
3d:0e:db:9c:74:eb:58:d0:24:7a:63:fe:b2:08:7b:7e:39:57:
97:b4:9e:78:b6:56:8a:43:b6:57:ab:2f:96:ad:a5:2c:f5:d8:
bd:fd:6f:8f:ef:d7:fc:31:ca:37:43:be:ac:3f:76:57:e7:e0:
af:d3:ba:0c:2c:63:d2:47:bb:f8:25:d5:72:b9:44:4d:30:dd:
f6:e2:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:41 2025 by rpki-client