Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier: feQI3h45VbJH4F0EEJj4CS6/km8QkcFw4BcDb5zNb+s=
Subject key identifier: F1:D5:DE:C7:4B:C5:91:57:C4:0D:58:1B:71:55:5B:4F:C0:B7:F6:5A
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 019922FADC3AC9323118C69C97B076EA75C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 07:01:29 +0000
Manifest this update: Sun 07 Sep 2025 07:01:29 +0000
Manifest next update: Mon 08 Sep 2025 07:01:29 +0000
Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: GnfOpIvK7o8cPxwdrAipU/eAAM1a+oah/GJi4B2jG7w=)
2: uxMrGXP4FNtk4vhqO5cU5mQf3-A.roa (hash: hNIkM7+jAO3rAd67WrBtFJIrTsZ1lPQ5IhBNiYcTU/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:dc:3a:c9:32:31:18:c6:9c:97:b0:76:ea:75:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: Sep 7 07:01:29 2025 GMT
Not After : Sep 8 07:01:29 2025 GMT
Subject: CN=f1d5dec74bc59157c40d581b71555b4fc0b7f65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8a:45:7e:c3:49:92:23:81:b7:ef:cb:8f:2a:
8b:46:5b:23:88:a8:31:ed:6f:a2:d9:9a:b8:d1:aa:
be:a0:ff:b1:02:7a:52:fe:5c:d6:a7:2f:1c:a8:99:
6a:70:60:6e:98:3e:ed:98:68:b6:d9:7f:4d:2d:4a:
4f:5b:1d:90:4b:51:f1:f0:23:be:57:5f:e2:c1:fe:
67:bf:10:f0:bc:cb:e9:7e:d3:8c:3a:b0:d5:89:3b:
a7:1d:cc:91:ac:e8:c7:ba:23:22:40:f2:a3:58:4b:
87:c7:b6:4a:34:42:96:5b:f2:8c:5a:42:7f:1a:79:
d1:44:aa:68:2f:10:4f:ff:e8:f3:8b:47:f2:a6:b4:
0b:a3:38:fc:5f:ed:1e:06:8e:c6:ac:6a:52:2c:43:
0e:3d:6a:ad:17:6a:3c:94:1c:da:ad:77:35:cc:03:
0d:c6:3c:f4:20:59:a8:64:03:ca:84:d3:d8:8d:e8:
ae:5a:c5:af:c3:ce:b9:60:b9:75:b1:91:32:67:fa:
77:20:d7:0e:c9:36:37:3c:70:9f:0f:4c:75:eb:9f:
39:64:7f:ef:12:67:1d:2b:c5:46:87:f6:56:d9:37:
ef:18:e0:f6:e3:06:b0:3b:75:12:eb:a7:73:5e:91:
f0:19:b7:37:03:ed:e5:16:ed:2b:ca:e7:c0:55:67:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:DE:C7:4B:C5:91:57:C4:0D:58:1B:71:55:5B:4F:C0:B7:F6:5A
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ec:f9:fe:41:95:49:cf:f1:71:30:9b:f6:f0:3b:0c:15:fb:
10:6a:b7:50:78:29:67:14:b8:8d:2f:48:79:66:ad:f5:de:48:
70:e2:01:1d:80:a0:b5:2b:7b:72:1c:cc:04:e8:0a:1a:e9:7d:
08:19:a5:af:f2:94:8d:2c:af:15:88:7a:21:74:52:a4:ca:cc:
af:14:1a:f3:0f:14:66:9f:7e:6f:74:24:bb:8c:8d:dd:58:59:
19:ec:e9:b4:e3:43:41:d8:a4:21:b9:bd:e7:f0:23:ce:cb:4b:
cd:e7:83:98:0e:81:26:94:7b:cd:26:84:3d:c7:f7:7c:c0:f5:
ac:fe:7a:87:1b:d1:29:20:90:38:c3:12:11:06:06:83:00:14:
ff:7b:4b:45:bc:4c:05:0b:b5:e9:32:ba:37:ea:0c:19:da:06:
9b:37:22:f3:96:ea:5e:8a:49:7b:2c:8b:fa:66:ba:47:12:6c:
41:6d:c5:b5:3c:57:60:ad:3c:a5:ed:81:23:02:ba:ef:39:11:
01:5a:e2:27:e4:b9:bc:11:0e:65:4a:ec:71:70:ee:41:2f:46:
22:30:0c:09:f7:d2:87:e7:90:b5:45:39:a1:43:1c:e1:5b:e9:
0e:bb:e7:d6:fd:53:2f:22:a5:15:a6:10:6f:97:c3:a7:92:4d:
24:2e:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:45:22 2025 by rpki-client