Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File: KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier: 2RtImL86jmDGbW/1oL8RxDTRVGwSpZnKPpoJJz3pQJQ=
Subject key identifier: DB:33:34:17:3E:CC:A2:9B:61:58:6A:5C:01:FC:35:22:AD:16:75:76
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 019A05FF9ED174E1AC9CFC6612FB15700BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number: 16EB
Signing time: Tue 21 Oct 2025 09:00:29 +0000
Manifest this update: Tue 21 Oct 2025 09:00:29 +0000
Manifest next update: Wed 22 Oct 2025 09:00:29 +0000
Files and hashes: 1: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: qmWUXlcCrMXi4rmE4UOS39XB+Tb5+mRQXDuIhIHxoNM=)
2: iinwbjaCpK6V8_stsXvEKtBkl8w.roa (hash: M1V1vtHFjPXfduw3ijubEwFy3tYmjuQ7qndUwyTCfGk=)
3: uJWKugGWqtQl6VVyKAzx1i_N0aA.roa (hash: BJfTtZgXbkNAvLFFTKLvaiDNDprXBJ4/kR9lJ8wjqSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:ff:9e:d1:74:e1:ac:9c:fc:66:12:fb:15:70:0b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Oct 21 09:00:29 2025 GMT
Not After : Oct 22 09:00:29 2025 GMT
Subject: CN=db3334173ecca29b61586a5c01fc3522ad167576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:dd:95:e3:99:14:43:14:6a:b2:d3:18:8f:
28:92:b2:68:f0:52:46:45:9c:29:a4:a7:71:b9:cb:
11:86:b2:d6:b5:73:ff:65:20:46:6d:ce:2e:4d:f6:
cf:5d:81:48:bd:64:22:bc:9c:be:74:ee:4d:a0:f6:
b7:e8:89:f5:17:41:8f:0e:48:6c:09:25:99:cf:b3:
b3:56:b2:ba:02:64:fa:eb:3d:3e:95:a3:f7:fb:db:
0a:84:d9:d0:9d:45:91:81:8a:ed:0c:0e:93:27:a6:
bf:69:8c:0f:19:47:de:1f:d5:38:aa:0b:87:55:71:
01:8d:4d:c7:3b:f7:67:79:8b:f2:54:4c:87:77:61:
15:26:8e:64:bf:9d:51:11:e7:78:1b:60:fc:8d:5e:
3e:cb:45:c3:56:4c:5e:6a:b0:a6:f4:35:27:90:80:
b4:c5:04:bf:08:72:0d:07:e5:21:a8:58:d0:da:eb:
f3:f2:b7:8e:95:21:0a:70:b2:8a:56:2d:d0:08:a9:
d9:bf:13:3c:f0:fa:2d:0b:63:b5:16:31:e3:81:a0:
60:bb:2f:a7:2a:ae:84:ed:bc:4f:64:3d:99:5a:e6:
fb:c6:b1:42:0b:02:26:eb:11:23:89:57:f6:ca:ef:
f5:f3:da:b7:d7:59:68:b6:53:8c:7d:ce:02:c6:5d:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:33:34:17:3E:CC:A2:9B:61:58:6A:5C:01:FC:35:22:AD:16:75:76
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e3:c3:6f:a4:c1:75:66:4b:eb:fc:6b:b3:58:3c:93:74:a9:
c6:4a:2c:db:24:c3:fd:06:96:f7:58:ba:8f:ed:b3:e4:e0:b2:
c5:3d:ee:73:ef:0f:7c:ce:7e:91:a4:6b:a8:a7:00:2a:9f:51:
2f:dd:27:9b:4a:cb:7a:39:bc:62:9d:d9:52:c0:63:60:66:7f:
0b:15:f7:0f:ca:e9:00:b1:75:84:98:87:98:7d:5e:71:97:fc:
9e:ff:c5:26:65:04:b1:c2:10:0f:2a:9d:3e:c6:93:4b:0d:a2:
1a:f6:cc:e3:c8:53:7c:10:5c:e3:73:7d:95:57:17:5a:98:36:
8e:d0:e5:77:4d:82:2e:d0:fc:8e:61:e5:9c:dd:fb:76:89:42:
a4:18:c8:5a:b5:36:00:dd:39:81:39:4a:c2:93:b7:9c:fd:e5:
21:63:6c:a5:92:9c:4f:19:f9:69:db:3a:14:b2:a8:a9:2d:ca:
4f:99:81:23:bf:54:59:20:62:1d:c1:40:da:e1:67:ad:63:ad:
3d:3b:94:04:7e:26:53:7d:83:7f:8b:2e:a0:99:b7:e9:21:a6:
3f:82:c1:ad:46:b1:05:72:ed:ea:b5:bc:b5:40:b4:3b:f5:c9:
0f:c4:a1:99:14:8c:df:ef:f2:cb:de:fc:63:db:67:03:f6:16:
7c:9f:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:30:19 2025 by rpki-client