Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: O4N86WqKXcNlQ+z0V1+3PUNFb54709eSMg8gh6NTWN4=
Subject key identifier: 8E:4B:CD:66:AA:81:83:B0:F5:85:ED:F9:42:94:BF:54:2F:9A:B1:30
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 019A2E56F9BC1849E19D47C334C0D92E9CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 16FE
Signing time: Wed 29 Oct 2025 05:00:43 +0000
Manifest this update: Wed 29 Oct 2025 05:00:43 +0000
Manifest next update: Thu 30 Oct 2025 05:00:43 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: vh4+MXaap0cC4F3tMWtSASCDYBNuBnDPadfxh7EbGxI=)
2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:56:f9:bc:18:49:e1:9d:47:c3:34:c0:d9:2e:9c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Oct 29 05:00:43 2025 GMT
Not After : Oct 30 05:00:43 2025 GMT
Subject: CN=8e4bcd66aa8183b0f585edf94294bf542f9ab130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:16:ab:fc:af:78:5c:ab:cc:df:ec:b6:79:
38:8d:79:9d:0b:62:5a:03:0a:2d:7d:4d:00:f5:a1:
61:8c:bf:fd:1f:e6:ed:6a:ad:d4:56:70:7b:fa:b5:
7c:5c:20:e5:5f:a3:2f:47:0c:87:b5:0f:a9:d2:f8:
35:75:c8:07:7b:e3:5c:e0:8b:54:49:0e:0c:85:9d:
d6:3a:97:d1:fb:28:7f:56:fb:2f:59:92:5c:88:25:
58:f8:a4:82:9f:af:1d:43:1a:40:ee:8a:35:e1:cd:
6f:71:72:df:67:77:7e:b9:e2:38:b8:9e:fc:db:30:
f7:79:ce:ec:37:9c:be:b7:93:ce:cc:d7:1b:92:3e:
83:d8:c1:c7:0a:cf:1e:b7:eb:b3:74:59:29:db:92:
72:69:72:5e:be:44:35:25:2c:32:4b:00:51:14:61:
58:f3:cd:1c:17:04:9b:12:70:f7:14:6a:7b:90:52:
27:f7:8f:98:6e:24:b2:59:87:32:19:38:c8:4d:6f:
9a:ea:74:f0:6a:a3:2e:c5:1e:6a:44:54:76:41:f9:
17:3e:62:d8:45:3b:86:e9:bb:bd:94:8e:6c:71:ea:
13:26:8a:cd:f0:35:12:14:d1:6c:11:31:af:7b:d6:
f9:8d:02:81:57:76:d6:e8:4a:01:8b:b8:1f:40:11:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4B:CD:66:AA:81:83:B0:F5:85:ED:F9:42:94:BF:54:2F:9A:B1:30
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:83:6a:1c:c6:b0:6b:3b:98:82:9f:0b:20:72:95:22:49:06:
95:7f:95:3f:25:e4:ce:c3:90:17:54:62:a2:49:97:6d:4e:79:
82:fb:bf:57:2f:7f:89:9c:57:79:2f:c7:a2:64:91:3d:3e:a6:
53:fa:d1:b6:12:2d:20:59:25:29:0e:e3:a7:1c:b7:6d:6b:41:
63:6c:a6:de:13:0e:0a:a9:70:15:1e:76:c0:72:e0:3e:ef:dd:
89:a3:5b:60:a9:a6:f6:fd:6e:fd:58:de:e9:e1:10:90:af:53:
8d:f7:56:38:f5:a4:8c:82:fa:60:5d:29:1e:53:7e:b5:5b:72:
b9:de:0c:ff:75:d1:e4:92:7b:e6:e9:9d:71:40:8a:fc:b6:9a:
4b:80:1b:73:38:53:f5:d6:32:54:f7:af:55:11:de:1d:be:8b:
c4:39:d6:84:99:54:b9:6c:3c:c4:04:d7:11:b5:01:d4:1b:99:
d0:63:43:19:ae:cc:e1:9f:30:12:3c:6d:91:dc:07:3f:6d:73:
2a:3c:74:0a:56:f6:7d:51:a3:c6:5d:53:ce:5f:b7:a7:74:af:
b4:40:eb:38:fa:2c:34:85:78:2f:de:d3:22:2a:07:66:e1:6e:
28:57:a1:9e:66:27:dc:a0:5c:4a:d9:bd:42:d9:87:96:84:9a:
e6:1c:e7:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZouVvm8GEnhnUfDNMDZLpy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNlZDc5NGFkYWZiOTFjYjgxYTk2OWViOGE5YjI5MDVm
ZWUyZWMwHhcNMjUxMDI5MDUwMDQzWhcNMjUxMDMwMDUwMDQzWjAzMTEwLwYDVQQD
Eyg4ZTRiY2Q2NmFhODE4M2IwZjU4NWVkZjk0Mjk0YmY1NDJmOWFiMTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7cWq/yveFyrzN/stnk4jXmdC2Ja
AwotfU0A9aFhjL/9H+btaq3UVnB7+rV8XCDlX6MvRwyHtQ+p0vg1dcgHe+Nc4ItU
SQ4MhZ3WOpfR+yh/VvsvWZJciCVY+KSCn68dQxpA7oo14c1vcXLfZ3d+ueI4uJ78
2zD3ec7sN5y+t5POzNcbkj6D2MHHCs8et+uzdFkp25JyaXJevkQ1JSwySwBRFGFY
880cFwSbEnD3FGp7kFIn94+YbiSyWYcyGTjITW+a6nTwaqMuxR5qRFR2QfkXPmLY
RTuG6bu9lI5sceoTJorN8DUSFNFsETGve9b5jQKBV3bW6EoBi7gfQBHJIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5LzWaqgYOw9YXt+UKUv1QvmrEwMB8GA1UdIwQY
MBaAFCrD7XlK2vuRy4GpaeuKmykF/uLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYt
MDg5YzFjM2Q0MzU3LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYtMDg5YzFjM2Q0MzU3
LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoNqHMaw
azuYgp8LIHKVIkkGlX+VPyXkzsOQF1RiokmXbU55gvu/Vy9/iZxXeS/HomSRPT6m
U/rRthItIFklKQ7jpxy3bWtBY2ym3hMOCqlwFR52wHLgPu/diaNbYKmm9v1u/Vje
6eEQkK9TjfdWOPWkjIL6YF0pHlN+tVtyud4M/3XR5JJ75umdcUCK/LaaS4AbczhT
9dYyVPevVRHeHb6LxDnWhJlUuWw8xATXEbUB1BuZ0GNDGa7M4Z8wEjxtkdwHP21z
Kjx0Clb2fVGjxl1Tzl+3p3SvtEDrOPosNIV4L97TIioHZuFuKFehnmYn3KBcStm9
QtmHloSa5hznyQ==
-----END CERTIFICATE-----
Generated at Wed Oct 29 14:49:03 2025 by rpki-client