Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: rVPlY9nq3AcrLAzsY48FJ9bHrB8cns3GAF5NYuYujos=
Subject key identifier: 56:19:73:82:38:6F:A2:A0:2A:3C:C0:21:13:7D:F8:4D:DD:27:A2:92
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 0199FE0FEACAA37DE5021305F502DE1FFD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 20:01:19 +0000
Manifest this update: Sun 19 Oct 2025 20:01:19 +0000
Manifest next update: Mon 20 Oct 2025 20:01:19 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: ifTFXPLwX1UqX7b3EH6ZL6Tcj7BqyCp6qBA7c/xGBQ8=)
2: Pt5jCGzvovgNs5CdDynFwkh2QzQ.roa (hash: nVdxdKNGSJEZ6402xd/EQ5NSj2OrYk/HxmlnqTUvP6Y=)
3: c_ThGFbqhteIloHLISS2D3Is-B0.roa (hash: dWKCcE+KdsbeTu7uVlboc1SJNBL/6lqMpvChZHMYdHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:ea:ca:a3:7d:e5:02:13:05:f5:02:de:1f:fd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Oct 19 20:01:19 2025 GMT
Not After : Oct 20 20:01:19 2025 GMT
Subject: CN=56197382386fa2a02a3cc021137df84ddd27a292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:22:b3:f3:aa:40:d9:fa:7d:40:88:f4:07:
00:21:57:2a:8a:26:8f:9e:e9:42:cd:8d:2b:05:f0:
c1:92:3b:c5:c6:07:c0:bc:8e:75:66:92:fa:9c:dd:
cd:9d:1a:45:47:e5:ad:00:ca:bb:ef:0c:f7:d1:a1:
ab:f8:6a:1c:c2:6a:df:e0:04:98:ee:a7:91:3c:80:
f8:bc:2a:b2:69:5b:f7:30:46:83:ad:e6:d7:d6:56:
c5:17:99:a2:f8:00:15:43:3c:97:49:bb:32:22:5e:
fa:77:5a:80:ae:00:d8:92:8c:88:0f:e7:57:ba:f2:
0a:e2:02:4b:9b:b1:7d:db:63:9d:4a:60:49:4b:c2:
4b:06:57:98:3e:23:ac:c5:7e:0f:da:0f:9f:56:40:
c6:41:e9:49:18:cb:d4:f2:9d:6f:45:1e:63:df:4a:
34:35:b6:32:a9:27:d3:83:41:9f:35:ae:d8:50:64:
58:95:6f:f5:c6:21:da:0b:11:12:65:31:c4:4c:b1:
1b:05:1c:7e:3f:ba:60:11:43:2b:a4:2c:87:e3:c3:
87:7f:74:49:4f:5b:d3:63:aa:67:0e:73:af:a5:29:
8c:a7:e8:ee:dd:b6:34:ac:de:7c:b6:fa:19:d8:b0:
69:a6:f7:e7:8f:e6:63:b7:e6:23:6f:58:33:9c:ee:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:19:73:82:38:6F:A2:A0:2A:3C:C0:21:13:7D:F8:4D:DD:27:A2:92
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3c:57:75:06:ff:34:d6:d1:86:fb:aa:62:7f:cf:6d:7e:ca:
45:0f:bb:21:5f:31:cc:ea:b0:14:cf:10:3e:9e:98:18:01:a3:
45:29:36:fd:11:65:e8:6d:a1:a4:17:2d:f4:c4:f9:c9:72:50:
ba:2f:58:59:93:d8:6a:44:2b:a0:d3:73:5b:b6:22:5e:e3:2e:
59:8e:ee:d3:11:94:cd:45:e4:33:1b:c1:d5:38:01:0f:2e:3a:
b9:33:fa:5b:cf:70:d2:c8:2b:e2:b7:2c:a9:33:d7:ba:75:f5:
58:b2:37:eb:73:3c:0f:99:3d:ff:71:be:2f:bb:28:de:cd:9b:
f9:20:fa:3b:0f:b6:35:ca:83:7e:57:9b:b9:8b:84:7f:c9:49:
58:21:25:b1:3f:e2:d1:0c:d0:72:06:33:f4:b9:6a:b7:f1:d6:
19:76:3c:45:7e:74:bf:79:8b:6c:96:7e:ed:96:f5:42:51:30:
cd:b3:11:b5:80:26:61:76:db:7b:b2:9a:08:e6:f0:e1:72:b5:
8f:cc:41:3a:5d:b2:b7:86:60:1c:38:6c:32:ed:b4:84:bd:50:
2f:01:21:14:46:23:28:fe:97:6f:06:95:65:c8:07:81:bb:19:
32:d9:b6:14:fe:00:9b:e5:5e:ef:ca:08:11:53:6a:02:53:ce:
a1:e6:f4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:25 2025 by rpki-client