Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier: Hqw/dqDYO1ZTVF0GEzO8pFL+V0TkMGq4utLe9i5EFAE=
Subject key identifier: 83:78:01:3B:0B:BB:28:B8:04:4A:7E:0B:C9:32:58:92:1B:E6:E9:66
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 0198D5BBBF4D60AAEAA83ADE6EB9ADEE6B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:47 +0000
Manifest this update: Sat 23 Aug 2025 07:01:47 +0000
Manifest next update: Sun 24 Aug 2025 07:01:47 +0000
Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: N2vEspGKxOI4x4GJZXd/ixhdLn97ZmTUpy0SS2fnCpw=)
2: uxMrGXP4FNtk4vhqO5cU5mQf3-A.roa (hash: hNIkM7+jAO3rAd67WrBtFJIrTsZ1lPQ5IhBNiYcTU/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bf:4d:60:aa:ea:a8:3a:de:6e:b9:ad:ee:6b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: Aug 23 07:01:47 2025 GMT
Not After : Aug 24 07:01:47 2025 GMT
Subject: CN=8378013b0bbb28b8044a7e0bc93258921be6e966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:52:04:ee:5f:52:03:42:4e:b1:1f:a8:68:
35:93:9c:5c:d8:2a:ac:dd:6d:31:a2:27:ec:2e:1c:
d0:bd:a1:97:42:39:c1:b0:01:94:13:a8:4e:f4:26:
a9:68:c8:bf:af:fa:73:a6:f6:41:b7:51:4b:e4:47:
24:be:3c:fc:96:62:78:f5:8e:b6:ee:e8:85:97:01:
d3:8e:a1:c9:49:cb:14:cb:3b:0b:85:55:ac:e4:c0:
88:8a:bc:9d:72:e1:b2:10:c4:2a:9e:0a:e1:e9:d3:
c8:78:8f:d3:34:5b:9e:07:6c:10:f1:3f:0a:69:67:
70:39:e4:fe:91:82:ee:50:83:55:80:ac:ae:3a:19:
a6:f3:58:dc:bb:c4:13:93:4d:ff:de:71:28:46:50:
3e:cb:01:15:6d:45:b6:6e:a1:0b:dc:4b:51:64:11:
8a:d0:29:71:63:d8:ef:66:04:eb:20:1e:45:07:3a:
d5:ce:74:28:67:a5:02:59:1e:5a:74:b1:26:35:3c:
cf:14:d5:58:8d:eb:7e:70:e6:56:0b:f3:17:16:dd:
1b:64:26:1b:e5:5d:b2:4f:8d:05:48:23:33:5d:20:
bb:3a:4b:ee:1a:cb:78:7a:db:7f:88:37:df:5f:06:
35:df:58:f6:0a:70:1d:d3:b3:be:81:78:a5:7e:ff:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:78:01:3B:0B:BB:28:B8:04:4A:7E:0B:C9:32:58:92:1B:E6:E9:66
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:78:91:f9:2d:ff:fb:3e:6a:cc:c8:83:0e:68:db:01:e5:98:
cf:20:e8:04:82:21:fc:2d:48:d4:9b:4e:5b:93:3e:fa:41:d7:
8a:91:1b:65:bc:24:7f:79:34:5e:6a:1b:4d:00:c5:b0:e1:b1:
a8:e2:fb:87:6f:d4:72:f1:f0:28:08:4a:94:ec:11:58:1f:c4:
28:ad:d5:4f:0a:1e:7d:24:4a:50:91:ac:da:f1:22:7b:25:08:
50:27:97:a1:0c:74:d5:46:7e:70:d8:26:75:f1:96:dd:52:27:
36:ee:54:ec:fd:af:c0:09:b5:72:11:63:db:68:4c:89:27:b7:
6e:4e:3b:2c:15:14:25:0c:f9:56:49:65:02:2c:34:1a:ae:d5:
05:ba:b4:2a:f0:c4:2b:e3:84:4c:45:fd:31:9f:b4:60:58:8a:
58:f6:de:de:f6:cf:95:a3:c3:16:51:66:11:4d:83:4c:5f:51:
6e:b5:59:48:b4:35:e1:99:6c:ef:2c:c4:1e:26:7e:46:be:76:
21:78:d9:f7:aa:c3:77:50:ba:76:75:ee:7d:31:6b:8b:71:d9:
cf:1a:19:d9:b3:48:70:86:67:ed:13:4a:10:66:27:a0:09:65:
c7:ba:5b:c0:72:50:4c:be:17:66:7a:7b:bd:2f:57:c6:2a:a7:
b1:50:cc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:08 2025 by rpki-client