Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: d7eQllDxIzd7NNIB49bg0M1BkHtRWHTwbc1Yf+QCxFU=
Subject key identifier: 0C:15:88:51:22:D6:DB:2D:B2:93:2A:6D:05:DD:76:4C:36:F8:C2:74
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 019A71EEA56E0AFCEB8DC4BB8DDE7D7CDAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: UOU/Z4jnNaZu/QISGBJO8nwU6jHgGziWCyMsCHcN64U=)
2: Pt5jCGzvovgNs5CdDynFwkh2QzQ.roa (hash: nVdxdKNGSJEZ6402xd/EQ5NSj2OrYk/HxmlnqTUvP6Y=)
3: c_ThGFbqhteIloHLISS2D3Is-B0.roa (hash: dWKCcE+KdsbeTu7uVlboc1SJNBL/6lqMpvChZHMYdHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a5:6e:0a:fc:eb:8d:c4:bb:8d:de:7d:7c:da:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=0c15885122d6db2db2932a6d05dd764c36f8c274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:33:48:57:00:f4:5d:f9:60:b8:4f:e9:e8:
5b:f9:de:8b:06:f9:37:a9:de:2e:7f:a0:c7:5a:bb:
c1:df:f9:cb:48:a9:db:07:50:26:c6:19:d1:8b:8c:
2f:ca:97:1b:d9:fa:33:3b:cd:86:df:91:dc:2c:4d:
33:76:c0:5d:55:25:45:7d:87:b1:f2:d4:5e:77:ae:
be:b9:61:56:ae:17:66:15:f0:4e:7a:12:8b:b1:0f:
01:88:b2:2d:2d:aa:d4:d6:9a:06:b0:f9:3b:49:52:
c3:73:27:72:9a:59:3d:be:59:a8:4b:f6:f5:6b:4b:
5a:40:f4:7d:ee:4e:67:7a:38:a4:25:b6:0f:1d:0b:
54:a8:a5:d4:93:b5:84:82:6a:a4:da:39:8c:11:51:
53:06:3d:9e:b5:35:05:0d:ce:3d:b0:51:1d:cd:0a:
b8:a9:72:15:4b:73:2c:10:6e:61:dc:8e:8f:ff:bc:
99:4c:cc:6e:d7:21:aa:09:ff:8b:69:0a:86:b4:31:
df:c7:b8:98:da:44:e4:91:53:ec:f5:44:97:28:84:
58:e5:73:8e:16:81:43:40:54:bd:34:ec:f0:6b:79:
36:11:3b:c7:2c:b5:b5:0d:3b:02:9f:b3:25:2e:31:
98:6d:7d:13:8c:24:6a:bf:ca:b4:66:f5:6e:bc:59:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:15:88:51:22:D6:DB:2D:B2:93:2A:6D:05:DD:76:4C:36:F8:C2:74
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d6:fe:34:56:aa:64:49:e8:25:20:31:48:56:ef:c7:07:e6:
8c:74:8e:68:3a:83:a1:aa:53:7b:0f:3e:5f:65:64:0c:0f:38:
6b:63:f9:cb:02:51:46:63:05:05:9e:7c:b7:6e:37:34:5d:99:
98:d1:4a:36:89:e8:a7:b3:32:35:7c:60:bd:9f:49:e0:1d:df:
7d:62:d1:e3:4b:4a:23:5f:28:f0:51:7b:ac:74:21:21:2a:7d:
db:9f:f4:02:ee:75:42:83:ed:38:7a:17:45:fb:e1:4c:c2:bb:
fe:d8:4f:9f:95:4d:30:09:f0:dd:31:fc:2f:79:33:ee:80:c0:
d4:e6:d7:c0:4d:f2:d2:b2:61:0b:ba:cf:88:0f:b1:cf:2b:84:
a9:a4:ce:8a:c6:1a:e1:3d:fd:34:e8:47:be:61:10:12:7f:39:
8c:d5:18:60:20:67:2f:a5:08:6b:3d:45:56:c0:b4:54:f8:2a:
86:95:56:6d:b4:85:97:78:c5:9a:d4:28:f2:ae:31:d8:fe:34:
16:d5:7d:f6:78:8d:71:53:72:98:77:6f:39:75:d2:6d:f1:e3:
6f:f4:48:5e:d2:4e:9c:b9:02:93:3e:89:77:60:28:70:f6:7d:
15:68:bb:05:7e:a5:ba:84:82:93:3e:c8:2d:4a:bd:58:bc:3f:
69:4e:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:01 2025 by rpki-client