Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: F58VsPCv2msq+bDg9OSw12Ox/qvcbU8zXqWIbhFKUmk=
Subject key identifier: BE:5C:F6:95:76:E5:99:EE:97:A6:43:3A:F6:83:58:42:65:81:1A:93
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019A2E1FC70080ED42DC9F060094EAFB392A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 04:00:25 +0000
Manifest this update: Wed 29 Oct 2025 04:00:25 +0000
Manifest next update: Thu 30 Oct 2025 04:00:25 +0000
Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=)
2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=)
3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: OwMm5MGicEZthDrIs0PK3WbYOm7eBwDxsIIMFgLrJuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:1f:c7:00:80:ed:42:dc:9f:06:00:94:ea:fb:39:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Oct 29 04:00:25 2025 GMT
Not After : Oct 30 04:00:25 2025 GMT
Subject: CN=be5cf69576e599ee97a6433af683584265811a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:29:62:d8:33:a1:27:1e:0e:94:91:26:0c:
89:3f:ce:e1:78:cb:2e:ee:3d:d5:db:40:8c:14:c1:
bd:03:2c:f9:1d:f6:19:50:44:46:12:bc:80:c3:ae:
46:35:8d:75:31:0b:63:bb:21:71:b9:0b:c2:2d:c7:
f6:e8:cb:e8:ec:18:9b:53:24:28:df:81:36:f7:1b:
79:3a:06:89:c4:72:c9:5b:52:74:ff:0c:80:05:50:
6d:3b:84:2e:1e:bc:23:c2:75:6c:6c:c2:ba:9e:2f:
36:0a:0c:06:ed:c0:ce:d6:3d:32:ab:91:1a:53:a6:
85:77:f4:90:df:df:ca:0b:c3:4f:05:0f:62:6b:a7:
cd:69:e5:a6:15:c1:96:4f:03:14:26:97:3d:f7:a4:
12:bd:a7:c4:63:0b:6d:b6:69:71:47:f3:c0:34:33:
c2:19:69:22:82:c5:39:71:06:d3:50:a5:d5:2f:e7:
44:2a:52:6c:83:e0:a7:48:a4:dd:0f:ef:3d:6d:bf:
74:15:eb:ee:a9:a3:f6:74:45:fc:89:75:11:d5:04:
62:84:65:12:33:30:e2:45:33:eb:19:e7:e0:f7:92:
eb:82:a4:2c:00:a3:30:e3:f9:e0:cf:f1:96:30:5a:
76:1f:c8:03:36:85:b0:13:c7:80:72:63:f3:a0:df:
5f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5C:F6:95:76:E5:99:EE:97:A6:43:3A:F6:83:58:42:65:81:1A:93
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:99:b0:64:10:13:5e:3a:69:35:2a:c2:c0:87:67:64:e4:21:
1b:95:5a:dd:5d:52:a7:d1:f0:2f:4f:cd:05:03:94:ec:52:e1:
a7:de:a8:ef:41:05:b9:bb:89:d2:0d:50:22:cf:52:89:21:fa:
3f:80:90:5d:d1:e4:dd:58:45:ff:6f:35:47:d2:7f:9f:2f:14:
82:a6:5f:57:42:ca:46:2b:e5:e5:38:12:9c:5d:f8:3a:d3:5a:
90:24:5d:b9:52:03:44:c9:48:55:d4:1f:87:96:a4:e2:66:ff:
b1:bf:7f:01:3d:4e:6e:f4:95:38:0a:3f:ef:e4:cf:46:63:97:
a5:49:31:69:ec:8a:b9:07:83:d5:e5:2b:4a:13:2f:90:ca:4b:
a8:62:2e:4a:54:ba:0d:e5:f6:23:ac:35:6a:3b:61:a9:ba:d4:
38:74:47:dd:15:33:3b:73:81:45:32:68:51:41:ee:8c:68:b5:
e5:92:6f:ab:dd:61:77:3b:f6:51:2c:77:03:ff:ea:d9:4b:00:
43:0d:f4:94:c0:24:ac:d1:90:bb:4a:07:03:23:72:60:98:f8:
6d:29:1d:88:88:77:42:67:bb:80:42:20:31:18:0b:a1:44:7f:
7b:a8:ee:c4:26:c6:6a:7e:1e:8b:6e:e3:d0:6b:9b:2b:87:a0:
4e:59:80:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 12:50:43 2025 by rpki-client