Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: oTP4G8Oh/MLmjim8M2SUjAu/UBonSuPGMQnMpM6IuAM=
Subject key identifier: C4:9C:29:E7:4B:CD:82:39:87:97:23:A5:7A:CC:AF:38:4B:D5:00:18
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 0199FC5904E66013E1B0A23823536628482A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 077D
Signing time: Sun 19 Oct 2025 12:01:56 +0000
Manifest this update: Sun 19 Oct 2025 12:01:56 +0000
Manifest next update: Mon 20 Oct 2025 12:01:56 +0000
Files and hashes: 1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: qYcoymVlick6NMcE2krPKOKBMfnkNLuN7DJwQG8GI3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:04:e6:60:13:e1:b0:a2:38:23:53:66:28:48:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Oct 19 12:01:56 2025 GMT
Not After : Oct 20 12:01:56 2025 GMT
Subject: CN=c49c29e74bcd8239879723a57accaf384bd50018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:53:92:e1:46:75:c8:0f:d5:7f:88:7f:79:
32:54:df:96:08:ff:cf:b4:83:f4:c9:ab:90:60:49:
6b:11:50:9e:7f:ed:f9:1e:85:6b:fa:a6:98:1b:07:
22:d1:9b:80:c6:78:2c:a3:eb:bd:98:8f:04:7a:65:
ef:3a:e3:97:67:57:db:64:13:31:40:f6:26:fe:18:
da:64:1d:05:13:87:89:73:8e:32:c1:b4:3d:36:d4:
2a:96:85:70:d2:c3:a4:5a:32:fe:46:03:32:9b:6d:
a4:00:da:0a:53:57:27:8c:47:b2:dd:1c:31:6e:e0:
fa:1b:02:98:c4:36:fc:ff:e9:29:12:da:fd:45:ad:
c7:61:08:1f:64:28:43:6f:ae:b4:18:fc:31:86:9f:
ef:bb:eb:4d:ee:3b:a9:95:b4:1e:14:60:06:0e:5e:
1f:f4:2e:c7:72:2a:8d:78:88:a6:b6:42:32:b1:b0:
a4:58:19:be:99:fc:53:c5:8c:71:90:2a:09:2a:a3:
8a:e6:3b:fe:f5:4b:14:da:58:c0:89:4c:62:05:ee:
18:fa:b6:3b:3c:b3:60:b4:3d:2c:5b:b0:17:c7:82:
a5:44:3b:9e:e8:b3:2b:1c:62:1b:36:42:7d:e8:9b:
2e:04:7d:99:fb:b7:92:91:8a:d8:90:34:28:ff:3f:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9C:29:E7:4B:CD:82:39:87:97:23:A5:7A:CC:AF:38:4B:D5:00:18
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:32:7d:b8:3c:30:17:37:1d:d6:b4:ac:88:e3:16:0a:e5:cd:
4a:68:57:c3:33:a6:9d:ca:fd:ae:a7:27:c9:bf:77:1b:b2:90:
e7:56:70:f6:5f:e4:2b:61:99:c1:39:3d:d3:b4:db:42:17:47:
25:43:d3:c0:9a:8b:38:59:69:b0:7b:60:20:d0:67:88:80:71:
40:4b:b6:92:04:fa:9f:56:5a:7d:f8:49:bb:ee:cd:00:aa:30:
ba:63:e9:da:e4:8c:8c:dd:9e:35:4d:28:c5:96:23:a5:2c:43:
8a:50:db:a1:2b:8c:95:e2:7c:3f:b1:e9:e1:f0:33:b4:78:e8:
d5:b3:e0:7c:03:cb:0a:24:ea:4c:8c:db:f1:4b:81:d0:a6:89:
36:af:90:bb:3b:d5:c8:0a:5d:f6:72:ca:79:25:db:bc:b7:b4:
26:ce:42:59:93:1f:d8:8a:ac:f2:ee:24:f1:8a:3d:93:b6:12:
75:21:2b:d1:68:fc:00:a4:77:d2:9f:a9:57:37:9c:c5:3c:33:
6f:49:f3:7a:e6:1f:34:72:e3:6b:51:c1:7f:86:36:8b:87:e8:
63:3b:9f:1b:56:89:1f:a0:b5:8b:b8:b4:a2:89:34:ce:5e:96:
7a:43:69:9d:b6:e9:fa:35:39:0d:9c:b5:02:bd:ef:4f:8d:1a:
29:32:55:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:23 2025 by rpki-client