Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier: r1Y2IGv9P5NDqTh/KWAqO48oS3Cs/cehRhXpxUxcOGY=
Subject key identifier: AC:44:C3:40:38:4B:B8:F9:F6:EC:AC:99:EE:0B:33:D0:F4:2F:9B:F9
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 0199FC58B76C3A1F2DF4AD9EEF5D3A3C3F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:36 +0000
Manifest this update: Sun 19 Oct 2025 12:01:36 +0000
Manifest next update: Mon 20 Oct 2025 12:01:36 +0000
Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: 5WyXAoSGRShUt9MRVFYu+2nLwgW0lvgzVHjyMMsVAlE=)
2: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (hash: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b7:6c:3a:1f:2d:f4:ad:9e:ef:5d:3a:3c:3f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Oct 19 12:01:36 2025 GMT
Not After : Oct 20 12:01:36 2025 GMT
Subject: CN=ac44c340384bb8f9f6ecac99ee0b33d0f42f9bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:a7:7a:a5:a0:39:c9:ac:1c:43:82:46:b9:
7b:bd:2f:76:37:e6:a0:04:58:dd:85:31:14:56:78:
e6:2a:55:25:0a:37:ea:98:58:b6:dc:ae:7e:0c:22:
33:7f:e7:5f:c4:36:f6:2d:cd:28:d4:fe:d5:6f:cb:
84:ac:f4:4a:f1:7a:f1:7f:88:09:f4:fb:82:ca:e4:
54:8f:04:ee:5b:8d:e3:9a:15:8f:e1:05:9f:6b:13:
fa:b5:27:61:ae:88:f4:d0:b5:73:b0:b0:ab:7a:f3:
ad:ff:00:4c:f0:8a:96:99:cb:11:02:04:53:89:1c:
c3:61:a6:02:69:96:d4:db:50:b1:0c:14:43:de:9e:
39:df:7f:46:1c:1f:96:ab:70:9f:38:37:e8:35:d8:
af:3f:eb:8c:9c:df:95:c3:b6:44:e9:f7:d8:58:5c:
6e:2d:63:e6:af:a9:66:b1:8b:b9:de:27:14:bb:bb:
a1:53:99:01:cf:aa:ab:98:88:03:ac:5b:6a:a7:02:
c8:1e:49:ef:55:b2:cb:d3:f3:38:d8:2f:99:a3:57:
76:e5:92:ef:45:d4:b0:db:2b:0f:fd:9c:01:7a:77:
d7:ae:19:53:87:d7:b3:e4:36:52:76:e3:f2:c6:87:
cc:74:81:8c:42:e1:70:e2:79:37:c6:7f:bd:6a:90:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:44:C3:40:38:4B:B8:F9:F6:EC:AC:99:EE:0B:33:D0:F4:2F:9B:F9
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c9:93:9e:e4:20:63:02:5a:ca:30:26:cb:8d:0b:da:bd:ee:
b1:db:5a:49:38:28:5d:7d:59:0d:70:67:9f:2a:34:1a:cd:e8:
e7:9c:85:96:7a:70:aa:d6:73:81:0d:98:ea:f5:b7:48:3d:5d:
38:b3:c1:5a:0d:9c:52:95:b1:dc:98:78:ca:e1:43:c8:14:9b:
4c:00:f1:60:9a:12:95:cb:2d:4d:5a:fc:f6:25:1e:29:67:ef:
75:ce:77:6b:23:e4:3b:a5:35:d5:79:c1:30:13:e0:4c:e0:18:
8a:b0:18:6b:02:47:18:83:75:cc:0c:94:11:eb:93:60:56:19:
0b:a2:9e:83:7f:71:5d:99:82:15:00:09:27:e2:5b:02:f0:7a:
44:d2:30:a1:6e:79:4e:42:84:f7:6b:29:ff:41:3f:f3:13:c2:
52:b3:0d:46:8d:d6:d3:0e:1e:74:46:65:37:50:9a:90:a9:8d:
fd:e7:a5:b4:36:0c:11:ee:16:be:47:06:ad:54:23:59:b3:01:
79:03:3c:9d:bd:a4:19:af:e6:e4:be:ac:cc:05:d3:1b:23:7f:
ec:63:2e:2a:c1:7a:9d:98:7d:e9:a0:9f:8c:49:dd:e5:ef:7f:
68:57:f0:c8:f7:8e:ea:15:cb:69:5b:7d:4a:0b:f9:06:60:a0:
61:a9:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:35 2025 by rpki-client