Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
File: KVYK0P3bQyabfm1bSEMopHbw6mg.mft (raw, json)
Hash identifier: 66R8o7JCNJIU5S5oJe4FGF+a7AZ9qZAli7SRe9m75Fs=
Subject key identifier: 26:FC:42:F7:AD:88:CB:8C:4E:76:64:E8:15:FA:DB:5F:56:1C:80:70
Authority key identifier: 29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
Certificate issuer: /CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Certificate serial: 0199FB7C7FB6A5A23C02EB489C1FA488B4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
Manifest number: 040B
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: HILr7pn8NThVCSH-A_rn05fyBNg.roa (hash: eVrxL2QWFmMtU5x6MqzXrb/DJHPKJPjLI8zuxMiz1ao=)
2: KVYK0P3bQyabfm1bSEMopHbw6mg.crl (hash: iX+OfIngVxv+FYHFAGpi1WIl5PR/buW7fTwTY2L4EBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7f:b6:a5:a2:3c:02:eb:48:9c:1f:a4:88:b4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=26fc42f7ad88cb8c4e7664e815fadb5f561c8070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:c1:fd:cb:65:43:63:9a:4b:ae:89:ca:c6:
62:1c:32:18:bc:0b:c3:a5:a5:d1:b1:9c:3e:90:7c:
5e:b3:f5:0e:0e:d3:95:71:91:60:c9:d3:c6:e2:8d:
c5:a9:07:19:9a:52:ab:85:0e:ae:7c:4a:05:8e:6f:
8c:7d:d4:5f:4e:7e:d2:5e:5d:33:e4:72:0a:78:d0:
bd:e0:1e:0e:66:35:39:c6:dd:2c:c8:82:ec:83:34:
16:f7:8c:3b:7b:75:52:99:74:79:ef:bf:a6:3c:be:
b8:76:5b:0f:e3:87:a9:62:ed:17:57:f1:17:17:fb:
01:e6:bc:64:a4:94:35:97:67:de:eb:3f:e3:be:4d:
1f:1d:2f:2e:e2:cd:bd:e3:41:31:e4:d7:9e:8f:c0:
7a:6f:e5:8d:d2:a1:c7:5e:a4:87:fc:68:30:0e:46:
bf:09:e5:46:b3:b7:a3:b9:04:1d:32:02:18:9b:de:
28:0c:24:13:5d:44:b6:11:76:bc:07:8c:42:89:f0:
86:e0:05:c4:a6:da:f0:b1:7e:c4:bf:a8:bd:19:70:
68:48:cb:1a:70:21:93:01:27:01:60:91:1e:cd:74:
e5:d4:98:a9:fa:82:8b:83:a2:3c:c5:fa:4e:1f:01:
b2:02:e3:48:c2:8e:78:09:69:7e:d4:34:93:1c:d1:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FC:42:F7:AD:88:CB:8C:4E:76:64:E8:15:FA:DB:5F:56:1C:80:70
X509v3 Authority Key Identifier:
keyid:29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a0:f3:79:ea:cb:6d:17:94:38:e6:89:50:c8:c3:52:2f:50:
92:d4:89:a8:a5:0a:f2:4e:5b:11:7a:74:2e:24:cf:ed:c8:70:
64:b2:d3:89:8e:20:6d:26:24:89:9c:8a:33:5d:da:df:bc:86:
5c:25:86:7b:ab:e2:f7:83:27:15:12:2f:fd:fb:e4:31:e4:36:
48:38:d6:38:3e:fe:6b:d6:64:12:1c:54:f8:ef:f5:21:d6:95:
6a:42:a6:ab:4a:99:a2:ac:fc:f0:78:ba:59:cb:92:e2:1f:c9:
8a:3a:5d:30:a7:e7:ff:9a:8f:50:69:09:6d:ae:4d:af:25:7f:
ac:4a:ec:85:35:eb:66:4a:21:79:e9:00:b8:c4:55:ec:ba:16:
8a:4c:5d:04:94:83:19:65:82:b6:23:24:e4:5f:75:64:7b:51:
ee:a0:74:64:48:08:19:18:9c:f3:72:43:61:10:e9:70:b1:c1:
50:8e:c2:5f:6f:67:cb:73:c3:c8:bf:56:1c:ac:26:ba:00:ee:
2a:bc:0a:d9:a0:13:ba:8f:b4:dc:cb:6a:79:19:fc:fb:01:14:
40:d6:29:1e:40:34:1c:4b:e4:55:ce:9c:7a:71:8b:0e:15:13:
2c:44:47:09:43:7b:06:c5:71:82:78:c5:49:0b:c0:e4:f5:e1:
85:8e:c5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:06 2025 by rpki-client