Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: eVvK/MVK2CJj11yzksU3IsE8rN/ZgWQrGqKesJYoOcs=
Subject key identifier: 5A:93:59:07:D9:F7:65:25:16:00:DB:BC:5B:DE:BA:62:C8:5F:C6:A4
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 0199FC58E9AE39DE96B695D667BA21268D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 14C0
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: dohe9DgMsBDLK98QWoRPdGgHGhkBHpj2moL2vXWRTfE=)
2: QKIPUY8W9rG1LSw1ZEyZOELoapA.roa (hash: Z80mVuvHDatSxJ6yGfprXykxFLoYcEum7C9B/uFuICg=)
3: ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa (hash: btG37/wBYGxhtViE0Hi1ryp1c5dcgao2x4gq6RXDb18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e9:ae:39:de:96:b6:95:d6:67:ba:21:26:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=5a935907d9f765251600dbbc5bdeba62c85fc6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:a7:85:fc:15:40:90:d3:09:9b:4e:c5:10:
4d:b1:b4:50:78:fe:af:96:0a:b0:e5:0b:af:48:fb:
9d:f3:d2:3d:8b:f6:7a:2b:3e:7a:a5:10:01:2d:c9:
5b:46:70:49:82:4f:7f:c2:06:70:dd:f4:5f:ed:1b:
76:28:e7:aa:72:ed:b1:10:7e:99:70:0b:b2:4a:87:
e4:47:c9:52:50:c5:43:0e:d7:68:6c:a6:76:1b:80:
f2:5d:ae:6a:43:15:33:c0:cd:79:77:9c:f1:34:9b:
cf:2d:3d:b3:7b:a3:cb:0b:c0:8b:b9:cf:7a:75:c1:
fe:44:c8:71:87:d9:93:8c:b7:56:43:e2:39:5e:0a:
e5:f0:09:19:c6:d2:93:79:7f:39:6a:f6:94:67:92:
55:db:62:33:7c:6c:9d:6f:a3:b6:cb:ae:52:5f:80:
0a:20:dc:9b:68:30:b4:5c:db:9e:e9:1e:25:3c:55:
62:01:40:b6:7f:8d:38:ed:3b:da:68:85:a2:8b:c7:
3c:4a:db:d3:44:59:3e:7f:9d:5f:62:8a:ee:ee:49:
b8:5e:ab:c7:0f:c4:f7:7e:a1:f0:10:14:47:9c:1c:
41:ae:e5:cc:e5:39:4d:aa:eb:dd:95:b3:bc:3f:57:
8a:e0:d1:d4:2f:36:7b:59:19:af:7e:28:7e:90:3e:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:93:59:07:D9:F7:65:25:16:00:DB:BC:5B:DE:BA:62:C8:5F:C6:A4
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:82:56:87:00:a5:fe:a4:cb:b3:c7:4e:ca:a5:db:20:c8:f3:
f3:dd:b0:e2:58:b8:da:f7:c2:3d:90:4d:20:f2:6d:f2:3d:ea:
a2:94:34:4b:82:54:dc:52:82:42:e4:00:fd:05:f7:db:b2:cf:
dc:fd:22:f6:3f:6a:26:23:db:cb:b3:3c:06:fa:89:51:d5:99:
32:e1:35:ef:11:82:ff:7e:12:7e:b4:93:f7:89:61:bd:af:7b:
89:fb:be:0b:50:aa:ce:64:58:23:d3:6f:ac:54:33:6a:94:cc:
21:e5:90:ac:69:5e:ca:8a:89:1e:e3:35:79:e3:99:71:4f:11:
b1:ce:1d:c7:25:21:23:35:54:6f:d9:ce:a6:9f:b3:71:1b:19:
33:e2:ea:f4:a4:41:77:9b:40:24:b0:07:58:94:28:3d:a6:ca:
3d:3e:15:ae:77:cb:7f:7e:30:7b:e4:c1:eb:af:ee:a2:ec:bc:
28:d7:bd:d5:25:44:2d:e1:85:46:da:03:b3:fc:88:57:3f:a8:
f4:05:d7:11:f0:b6:87:bd:5f:d6:e3:8f:34:c4:d0:55:b4:c7:
ac:26:30:35:15:84:92:8c:91:26:b2:33:22:9a:f2:12:fb:d4:
d3:71:25:0e:60:0f:25:04:d1:1c:8f:b5:d2:cb:2b:fb:12:ae:
6f:f3:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:21 2025 by rpki-client