Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: F08kwoNIQh0qjGAgFoN0YzcNsWnsbEti1de4nAEWSFM=
Subject key identifier: 4B:58:D4:49:8C:71:62:23:7C:86:0F:2C:05:10:2C:3C:AF:80:28:A5
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 0199FC58B3DFFADA2A83241C38DAF7BD64CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: M9X2HfUwm7Vm09NIJneSYBSIW5H7TX+GkuLzKqatUUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b3:df:fa:da:2a:83:24:1c:38:da:f7:bd:64:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=4b58d4498c7162237c860f2c05102c3caf8028a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:24:56:e8:1b:24:f0:c8:9c:cc:7b:d3:0a:
0d:5c:e4:75:9c:20:9e:a2:2c:1e:25:f0:c3:d3:8d:
9d:f0:bb:16:23:29:30:d4:c9:9a:30:ff:fd:2a:6f:
69:69:ec:13:84:b0:61:17:6a:97:60:e2:44:9f:f3:
a0:e3:10:c1:6f:2a:50:43:f0:bf:f8:33:89:48:91:
3e:44:da:2a:1e:91:a1:63:11:6d:f6:0f:50:d9:53:
d8:9a:1f:3d:3b:7e:0f:2b:a4:6c:41:5b:30:d7:c4:
91:db:22:ab:b3:24:81:24:85:1e:95:87:f8:19:40:
06:3c:78:52:4d:ac:b6:a9:8e:33:59:58:68:db:39:
f8:d1:64:79:16:39:2a:d4:5e:91:82:a6:fa:2e:fb:
fc:fb:a9:bb:f9:f8:e2:31:0e:4c:67:7b:dc:ce:5a:
7f:d8:05:19:62:20:04:99:e1:42:f9:f6:9c:de:88:
87:99:78:14:b7:9e:79:59:a2:4a:4e:23:9f:ad:1b:
97:af:e6:e0:35:0a:17:b1:e3:e9:2f:c3:88:53:71:
4e:bb:fa:f7:87:e1:9c:cc:00:3c:5e:26:dd:6f:5d:
00:0c:2c:ff:9e:25:ae:6d:34:83:81:e2:78:86:0d:
1c:92:4c:fa:e7:51:e3:a0:25:90:0b:93:13:69:b2:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:58:D4:49:8C:71:62:23:7C:86:0F:2C:05:10:2C:3C:AF:80:28:A5
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a1:30:e6:16:27:8a:72:16:f6:a7:d0:c7:89:b9:2f:fb:dc:
c9:d1:d5:d1:d5:73:ae:36:33:f5:ba:54:aa:b0:14:67:c7:31:
b0:ef:4d:08:09:6d:ab:48:5e:0e:24:b4:4f:84:90:d8:29:4e:
b8:f6:0f:0b:79:90:c9:1f:a0:04:d1:b3:9b:b8:f0:95:e3:34:
e0:bb:9d:99:86:1f:28:3e:2c:39:91:70:10:9c:ce:66:43:25:
90:64:10:0c:ed:2b:9f:d9:3e:a6:8c:2e:9e:ab:33:39:42:ab:
31:ac:af:13:80:2d:c6:ea:60:09:4c:70:23:33:a2:8e:3e:30:
25:d9:5b:09:c8:60:6d:33:8e:8a:0b:40:b9:87:34:ee:cc:0f:
8a:e4:aa:80:ff:ba:ec:05:c4:e7:3a:dc:4e:33:75:65:b4:d1:
c1:e3:4a:2b:61:a4:80:c3:b5:5a:06:a6:27:e6:f2:e5:b6:8e:
7c:df:66:9e:46:40:cf:97:2a:53:e0:84:b3:47:51:34:7a:fe:
3e:63:00:42:59:78:07:8f:63:e3:ca:f0:5d:16:30:08:b1:32:
a4:9f:ea:59:58:97:c7:34:d1:94:6d:c5:b9:94:85:78:5b:79:
3f:c7:fc:f2:69:93:51:98:85:f9:66:12:c5:ae:b0:98:95:39:
5e:f9:ed:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:16 2025 by rpki-client