Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier: kJ4ncl3m2Syzx/prescVHnoSqdbMOXBVqmHiUJcM/gw=
Subject key identifier: A5:19:E0:6B:C5:EB:80:60:4C:FA:49:5B:63:77:E5:24:2C:B8:11:76
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 019A299E3AC877E18AA4F37EA9EED58AA56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 07:00:26 +0000
Manifest this update: Tue 28 Oct 2025 07:00:26 +0000
Manifest next update: Wed 29 Oct 2025 07:00:26 +0000
Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: 1fu7P2VBACeqKMgwQ6heyRULwHQi4LWZeGRoxEJGzHw=)
2: uxMrGXP4FNtk4vhqO5cU5mQf3-A.roa (hash: hNIkM7+jAO3rAd67WrBtFJIrTsZ1lPQ5IhBNiYcTU/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:3a:c8:77:e1:8a:a4:f3:7e:a9:ee:d5:8a:a5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: Oct 28 07:00:26 2025 GMT
Not After : Oct 29 07:00:26 2025 GMT
Subject: CN=a519e06bc5eb80604cfa495b6377e5242cb81176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:e7:e3:2d:4e:54:6f:b2:a6:4f:6a:81:d6:
01:eb:43:96:19:25:52:7a:b2:c9:25:50:ee:2b:54:
45:18:15:ff:99:37:69:98:f8:40:be:6b:7d:08:12:
c4:93:07:7e:99:17:24:fb:62:77:2a:90:5b:df:3b:
4f:ca:24:e2:21:ab:5d:3f:c9:84:62:ec:39:13:84:
3d:5e:f5:27:e2:1a:9b:bc:60:bb:d7:99:9f:57:fa:
7c:ef:f7:4f:4e:c3:ad:3b:f1:35:cc:44:2d:14:a4:
d9:59:0e:13:dd:2c:52:c4:d0:65:b5:bf:40:9d:8e:
c5:97:33:31:3c:8e:1a:10:59:e6:2e:59:76:41:6e:
92:22:23:72:64:31:56:bf:52:4b:53:e8:e7:27:7a:
56:17:50:ff:85:d7:ba:47:7a:12:f5:df:90:fc:25:
ab:13:0c:ca:89:27:c3:46:3e:28:61:f4:af:f0:01:
46:c0:14:ca:11:4f:22:a2:11:35:87:36:74:7d:40:
7d:aa:5d:02:fb:b1:25:09:51:00:f3:28:2c:28:31:
29:fe:bf:1d:48:35:5a:7c:db:d6:fb:9d:aa:9c:5b:
24:ff:4a:95:e5:10:3e:24:3e:b6:a8:36:ce:b7:af:
28:3e:09:4a:c2:5b:b2:7f:74:64:3b:af:35:9e:02:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:19:E0:6B:C5:EB:80:60:4C:FA:49:5B:63:77:E5:24:2C:B8:11:76
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2f:d8:37:c5:ac:c3:82:ef:78:28:ec:3a:0b:25:48:02:d4:
d5:45:7c:ee:9f:0d:62:53:0a:3d:da:1c:46:45:68:d5:f3:7e:
00:54:87:fb:db:04:df:3f:f3:48:b5:44:9e:62:ef:9a:b1:7e:
9c:93:ca:51:49:ac:a1:6e:e6:50:a9:97:4d:74:a6:19:f6:17:
be:92:f2:b2:5c:8c:19:65:51:94:ef:a0:f5:ea:d0:e8:33:b9:
ff:8d:c0:37:0e:e6:1c:39:63:1e:fa:e8:11:22:e8:2f:1f:68:
36:e8:bb:99:d8:4f:ff:1e:5c:c5:57:25:7a:86:3d:f7:32:dd:
cd:98:6e:b8:65:21:a3:de:05:78:df:10:33:c4:1e:6c:a9:88:
b6:d1:0c:44:7c:42:53:db:15:91:cb:3e:f5:8a:b8:39:87:cf:
5e:c9:05:d9:6d:8d:f7:8d:7e:a8:79:f9:17:2e:9b:58:33:69:
d0:6e:fe:4c:ba:83:8c:ee:03:bb:b8:4c:de:61:0c:4a:e7:1e:
d4:9b:00:04:eb:c0:e4:a5:59:a6:9d:da:4e:e0:2a:4f:d9:46:
2e:60:b2:1c:d1:ea:ef:43:3b:77:25:da:54:65:9f:b6:2f:71:
7d:ce:81:e5:81:d7:04:ea:d3:66:7a:ed:99:ea:2a:7c:19:15:
5d:d7:66:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:48:19 2025 by rpki-client