Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier: UMzFCQwRdwhiHwsXRJKm8hNbqcfnbPiWVEYeh8O5e6A=
Subject key identifier: AF:B0:B5:A6:61:28:87:F9:04:32:37:75:82:FC:A6:21:EE:37:A0:AD
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 019A0110F9E6845D25CF40FEF9E6BC6B76EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 10:01:20 +0000
Manifest this update: Mon 20 Oct 2025 10:01:20 +0000
Manifest next update: Tue 21 Oct 2025 10:01:20 +0000
Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: ZoAqn6d8dS7WsMuygxCNDer3dEtiel4iuQiph8CaUtw=)
2: uxMrGXP4FNtk4vhqO5cU5mQf3-A.roa (hash: hNIkM7+jAO3rAd67WrBtFJIrTsZ1lPQ5IhBNiYcTU/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:f9:e6:84:5d:25:cf:40:fe:f9:e6:bc:6b:76:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: Oct 20 10:01:20 2025 GMT
Not After : Oct 21 10:01:20 2025 GMT
Subject: CN=afb0b5a6612887f90432377582fca621ee37a0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:a8:0b:7d:1d:17:11:c0:4a:48:5a:0a:6c:
38:11:2e:9b:4b:83:ed:88:e8:a7:8d:53:b2:2e:4e:
d5:25:db:49:16:c3:6d:01:d6:6b:c7:f6:6a:b4:55:
ff:b9:fe:44:ff:22:78:65:63:a3:cf:e0:3a:32:23:
8f:d4:53:36:f9:20:19:05:06:86:91:bb:6b:f7:ee:
17:64:f3:3e:a4:cf:d0:10:b5:49:82:9e:0f:74:b6:
1a:4f:de:81:82:05:d4:a1:25:cc:30:4c:e8:b1:4d:
8c:74:b3:1e:11:43:09:2b:ae:c0:c9:b0:2f:68:44:
bb:5b:b8:14:bc:d8:b6:a2:4b:56:62:07:06:8b:10:
7f:f4:59:cf:df:a5:dc:fe:06:56:2c:45:5e:b3:86:
62:e1:07:ca:8e:7d:19:9d:2e:a9:91:77:29:16:83:
8b:d6:42:63:0e:53:01:3b:07:79:1a:4c:73:c7:d3:
14:8c:8f:5d:a4:6b:33:b4:88:c0:18:68:9f:b5:88:
8a:5f:a7:1a:bd:2e:76:dd:1b:60:7f:24:31:46:0c:
1f:72:98:92:d6:70:3f:f8:3c:54:ab:31:29:9a:f8:
56:cd:ef:99:71:65:bb:82:55:35:0e:cb:eb:01:4a:
e8:dd:c5:78:2c:34:91:be:6f:4d:e3:47:0e:da:c8:
ef:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B0:B5:A6:61:28:87:F9:04:32:37:75:82:FC:A6:21:EE:37:A0:AD
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e5:91:da:07:cb:f9:67:ab:c9:55:da:64:5d:6c:74:fd:f5:
3d:2e:3d:d8:c4:35:45:23:0e:da:89:39:fd:04:0b:07:db:50:
4c:7b:bc:b0:af:e0:7f:28:7b:9c:14:d1:1e:09:f6:bd:20:ab:
98:3c:a0:3c:15:8c:d2:78:2c:94:02:f1:26:36:34:22:ee:b4:
80:46:56:34:5a:36:39:e1:50:35:5f:5b:9f:7b:4c:28:b5:0b:
3f:27:66:53:18:e9:63:c9:4a:40:1b:c1:28:f3:32:2e:f1:3d:
f5:90:6a:4e:c4:50:b4:14:85:93:02:4c:44:53:b7:26:8f:a5:
cc:49:06:e3:da:0a:cc:47:d4:76:7d:1c:83:25:eb:4d:01:a9:
c2:47:ee:ed:36:86:bc:bd:4a:0a:d1:c9:a0:55:3c:38:2b:f4:
20:d0:29:b6:1b:71:25:fd:a7:27:c3:53:59:9d:e7:df:f3:2a:
8a:b3:08:0c:4d:b8:6a:6f:ac:38:b4:43:0c:7f:e6:75:e0:c9:
1e:6b:95:be:6a:b4:cb:27:71:dd:a0:0f:6a:41:4f:ff:47:f0:
6a:46:98:fe:8e:39:16:14:18:92:d5:e3:d0:8e:05:41:d8:ae:
0e:a9:5b:bc:2c:04:af:b3:af:d7:0e:41:1c:b6:18:07:82:ef:
32:28:8e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:08 2025 by rpki-client