Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: a9w25lfNorxWYmuYbFs2G9C2w1OAOHPch0j/P/oxpK8=
Subject key identifier: 3F:2A:CE:88:0E:8A:0C:FC:99:C8:D1:AE:19:25:6E:0F:A8:19:5B:79
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019A145FEB7742EEE88170BC874A02BCD136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 16F3
Signing time: Fri 24 Oct 2025 04:00:21 +0000
Manifest this update: Fri 24 Oct 2025 04:00:21 +0000
Manifest next update: Sat 25 Oct 2025 04:00:21 +0000
Files and hashes: 1: 4AoUOv0FI3bJOWNB03o-fqag36g.roa (hash: lE0wM7qhSogQ0qa/Rafsku4glOJqw2l70ocwo2WeE/c=)
2: 5tesipqYkRXRRWnVZJDo92wLa7o.roa (hash: sefnYYGAGevYCEP5NBJ+Xnm/tUS4YEP2waf49250BH4=)
3: ArxGq_kltFKX5YUm3DRNAjYGQGc.roa (hash: 5XM5lzW30JX9FmEqPAciFGZ+SNFRk053GOf+9YREVN4=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: 7Ig7QagzOLAgNyvgYt8XHvybCcI3XaExdJFahy4tzU4=)
5: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:5f:eb:77:42:ee:e8:81:70:bc:87:4a:02:bc:d1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Oct 24 04:00:21 2025 GMT
Not After : Oct 25 04:00:21 2025 GMT
Subject: CN=3f2ace880e8a0cfc99c8d1ae19256e0fa8195b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:51:88:37:2c:b8:47:82:38:16:25:93:a1:
a3:a6:ad:75:80:79:ec:01:f2:fd:b1:d2:03:42:b6:
ea:ea:31:77:9f:87:46:ce:50:55:e1:5e:66:db:9f:
0e:19:7b:26:9e:c4:dc:94:cc:47:bc:5e:fa:cb:0b:
f9:c6:9c:d4:ce:16:57:f1:d7:f5:37:d0:be:12:ed:
89:56:1b:1e:38:01:42:f4:50:4c:6c:2c:84:dc:50:
33:b4:83:00:47:8b:1c:9b:66:97:1e:21:61:54:5f:
fe:f3:7a:7a:a8:c4:1c:25:93:44:3b:0c:43:3e:f4:
5c:75:ab:2b:07:ab:4d:67:04:21:64:4d:21:3b:ff:
2f:89:40:c5:db:10:03:e8:f5:32:e5:37:6a:a8:66:
58:53:2b:64:26:89:52:48:aa:bd:97:33:4b:f5:15:
19:c2:b4:57:6c:dd:39:a2:e9:4b:36:66:e3:5a:e9:
38:e1:94:5a:99:e8:d3:93:57:64:6c:8d:05:98:cf:
7a:d3:3f:39:bc:2a:ff:7a:e1:e3:05:7b:f5:50:25:
4f:e0:8e:77:21:ca:36:18:43:59:d1:e0:bf:d8:b9:
f8:4a:8c:a8:2b:c4:18:e8:c2:4c:df:0b:3a:db:58:
78:6a:b2:aa:f8:72:f1:9b:f4:22:f2:05:ec:48:d6:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2A:CE:88:0E:8A:0C:FC:99:C8:D1:AE:19:25:6E:0F:A8:19:5B:79
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3c:fd:b7:97:39:70:88:5a:47:6a:8a:2a:c8:0f:19:93:bb:
3b:3d:f7:5a:24:c9:12:1f:fa:12:5d:ab:9d:e7:b2:03:a0:64:
7b:4d:6d:d9:48:0f:e1:cb:00:ca:72:03:ec:02:9a:46:dc:e5:
e1:0c:78:11:88:2a:ae:53:b2:be:cb:15:b3:9f:66:9c:db:c8:
8b:06:70:cc:52:73:6f:b9:80:e4:02:4f:aa:c6:1d:0f:ab:39:
45:ca:58:80:a4:20:80:f3:9e:e4:87:cc:e4:dd:2c:78:82:f0:
43:40:95:f8:05:86:af:9f:91:b5:5a:be:c3:c6:3b:73:17:4e:
19:4d:01:c3:97:c5:15:c8:18:41:ae:24:68:68:b2:a5:39:51:
11:16:49:3a:f2:a1:59:4f:28:9c:13:15:41:2a:37:1c:09:2d:
4b:cd:31:d8:40:37:aa:2c:d3:4b:ef:5d:99:5a:e0:ba:8c:86:
ca:26:f4:bc:44:02:1f:d7:5d:73:52:68:e0:6a:65:3e:70:5a:
d2:06:8c:16:34:6a:65:e0:90:c3:b7:3c:6f:b8:80:2d:e3:af:
e2:10:f3:17:cf:64:dd:01:0f:78:23:d0:c2:00:40:46:03:c7:
5d:10:fc:3f:b5:b4:be:b4:e7:0e:3d:82:57:3e:f7:7d:92:4d:
06:d6:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:46:41 2025 by rpki-client