Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: O2SsUMtCUE+bAMGykMptuPQjn7shzU+UrKCn5LIhL88=
Subject key identifier: D1:28:4F:E7:E7:67:AC:81:59:AB:3F:06:5F:E3:8B:3F:AD:0F:AA:B6
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 0199FD33E982A97B98FA1CC5E7F6033C7D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:01 +0000
Manifest this update: Sun 19 Oct 2025 16:01:01 +0000
Manifest next update: Mon 20 Oct 2025 16:01:01 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: LB3tmti3XII5+GDJtIQUk8FtNdUM2fwQi6wR0CRf3E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e9:82:a9:7b:98:fa:1c:c5:e7:f6:03:3c:7d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Oct 19 16:01:01 2025 GMT
Not After : Oct 20 16:01:01 2025 GMT
Subject: CN=d1284fe7e767ac8159ab3f065fe38b3fad0faab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:4e:46:82:fa:8a:ad:98:ac:ae:ac:52:a4:
89:45:f6:7f:c1:c6:01:ae:48:51:cc:e8:25:66:ac:
91:4f:63:e7:16:44:ff:91:d2:2e:c9:2a:7f:9e:99:
2f:c1:a9:c3:8a:1f:41:72:a7:3d:7e:bf:cf:34:5a:
a2:eb:c8:3a:64:9b:34:15:05:dc:13:18:a4:7b:76:
10:6f:53:f8:b5:be:99:3d:48:88:df:ec:34:2c:cf:
9e:26:2a:20:85:d7:bd:19:29:ce:da:2a:a1:c2:25:
fa:3d:1a:e3:d5:3a:44:c8:3b:1a:54:3f:9f:b4:f1:
03:33:8c:23:a8:27:73:de:e2:56:88:08:a2:14:7a:
67:ee:14:78:63:97:11:98:1c:df:ec:ae:f2:4e:e9:
db:99:9d:11:26:f3:67:50:e2:8c:61:cb:58:29:18:
9c:e7:91:a2:c9:30:52:a7:60:a4:a4:5c:9f:f5:01:
fe:b2:0f:fe:ce:b4:b7:ac:4d:c8:38:80:00:ca:c3:
d0:05:06:ac:67:ae:89:2c:04:1b:aa:48:e2:1e:1e:
13:96:7e:df:f8:01:72:ea:da:91:e5:93:fe:9c:d8:
6f:68:81:26:29:42:62:37:eb:ee:e0:0b:1e:ef:e2:
b2:d0:72:fa:92:15:1a:5d:2c:32:9b:f4:8e:c0:ec:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:28:4F:E7:E7:67:AC:81:59:AB:3F:06:5F:E3:8B:3F:AD:0F:AA:B6
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:80:72:90:ff:63:ae:8a:70:b4:b6:76:cf:46:ff:29:77:10:
fe:e4:c9:f1:88:77:f4:6a:f4:2d:b7:0b:60:6d:86:3a:da:52:
aa:68:94:df:92:2d:b1:33:a9:f7:68:98:1e:6a:63:e2:e8:c6:
57:9d:c4:e6:f4:16:55:09:bf:1f:9c:3a:42:33:44:fb:76:67:
3e:27:e9:39:4c:63:ae:8d:1f:57:e9:41:b9:39:9c:74:fe:3e:
b4:b4:74:29:67:a8:c0:1e:4e:33:e4:9e:4f:d4:f3:f3:f0:52:
d0:a7:3d:e0:84:2e:52:02:5e:c8:fa:c3:cd:e2:84:a7:1c:19:
be:e7:86:c2:c9:4b:b8:d8:eb:6a:df:84:3e:7d:b4:d2:96:15:
5b:c7:6b:93:b7:81:b3:47:da:7f:c2:56:27:d9:17:68:51:83:
fa:32:97:43:e4:e4:c9:8e:42:a7:10:a6:79:a0:62:dc:be:2c:
1a:60:63:bd:5a:54:ba:9e:4d:98:b0:b9:ce:c3:b9:f2:a1:fb:
3b:8a:c2:c7:57:2c:56:bf:0a:a5:80:9f:4c:46:dc:84:10:13:
8b:9e:e0:0b:e2:b5:82:0f:43:4b:19:3d:08:1b:31:cf:3b:5f:
5b:33:49:70:b2:3e:ae:9d:b4:06:15:88:ae:0b:d2:d7:b1:da:
bf:31:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:12 2025 by rpki-client