Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier: vDseE8pwpFCGCgMmkwEK409QgPAa+/XsFAB38RmB3pw=
Subject key identifier: 76:3F:82:03:C9:14:22:F8:69:28:1C:F3:AA:24:A5:C1:99:B5:F8:E6
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial: 019A7149A13916CFE29E3C480C346E48EA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:42 +0000
Manifest this update: Tue 11 Nov 2025 05:00:42 +0000
Manifest next update: Wed 12 Nov 2025 05:00:42 +0000
Files and hashes: 1: KRxKu_3sSaUePuuh1zhKvtRict0.roa (hash: +EX1LptbVJc4+7RpbLy829R4rw7CqCxrczXwQWpCdMc=)
2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: Ou3KgnL3wlv0YGGwFHHlNUYlfNgfcyQV+JIO9r7FrXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a1:39:16:cf:e2:9e:3c:48:0c:34:6e:48:ea:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Validity
Not Before: Nov 11 05:00:42 2025 GMT
Not After : Nov 12 05:00:42 2025 GMT
Subject: CN=763f8203c91422f869281cf3aa24a5c199b5f8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:26:63:33:6d:61:48:1c:fa:c1:01:e2:a0:
18:aa:4b:3e:2b:86:a9:98:20:11:a2:2a:cf:1b:5e:
41:37:64:29:86:af:e9:8d:f2:87:89:d3:2f:46:76:
22:96:af:95:48:b3:05:17:55:a8:2f:ad:91:9e:f0:
87:7c:b0:31:71:8b:6e:6a:b8:47:10:25:cd:8f:39:
d7:d0:9c:25:01:b2:95:3f:e8:a1:b3:c5:2d:c2:e8:
dd:11:e6:02:63:c7:ef:27:a3:13:d9:55:b6:d5:46:
e3:a8:ff:0d:71:74:14:8b:fa:c4:b8:98:9f:f5:21:
07:c6:f6:59:53:e2:4d:54:31:57:41:39:f6:a3:bc:
5f:1b:92:a6:52:2e:be:53:3e:95:b5:0e:35:0d:29:
45:46:95:30:86:a9:bc:a4:f4:5a:c3:b1:be:e5:26:
57:30:67:20:89:55:45:6e:68:0c:2a:fd:7d:df:05:
78:c5:66:b3:df:ca:7f:74:83:db:86:5d:4b:41:cd:
ac:c3:64:f8:69:f6:9d:a7:c5:8c:a6:dd:20:56:6f:
76:6c:0d:48:9d:b5:3b:20:7f:14:4c:e7:e8:53:5d:
e1:8d:8e:29:83:b5:2b:82:c3:a1:9d:77:d5:6b:27:
ea:97:e0:86:9f:8e:25:32:52:d4:41:35:2d:21:60:
e3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3F:82:03:C9:14:22:F8:69:28:1C:F3:AA:24:A5:C1:99:B5:F8:E6
X509v3 Authority Key Identifier:
keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:27:e4:a3:cc:89:f0:90:c2:d9:9f:0f:f3:9a:cd:37:61:1b:
33:a0:c4:e1:6b:2c:87:67:2b:93:6d:92:e9:86:5b:7c:8a:38:
61:ea:28:f7:62:00:71:51:c6:17:74:e7:fb:55:b6:e3:51:6a:
ec:d9:ce:b3:18:d2:3c:8d:67:70:15:79:f6:c4:b1:b9:cf:0b:
d0:42:a9:0f:4d:0c:52:be:44:9c:cc:c5:5d:00:35:b5:96:05:
4c:44:f0:75:e7:5d:ab:62:6d:93:ed:a6:15:8c:85:60:ea:8b:
b3:5f:41:b4:ac:f5:60:77:8e:b6:92:f6:73:c5:de:25:72:db:
37:62:2d:47:62:2c:55:56:93:93:5c:2f:a6:3c:cc:89:3d:c2:
c3:76:b7:55:a6:70:cc:0f:f0:07:ae:a6:ad:7b:7f:9f:77:6c:
2f:a5:d1:ee:8d:32:6a:2e:bc:09:ca:ac:85:39:ab:56:b0:e4:
b9:f6:bd:31:31:c0:8b:c4:a9:f7:bd:5f:4e:01:ea:28:cd:0b:
60:c1:16:23:87:8b:ea:06:5f:80:73:64:a9:89:50:49:34:52:
93:f2:a8:65:f3:d9:4b:16:57:0c:0c:a5:16:10:83:eb:85:26:
dd:96:f5:8c:73:b5:6d:1d:d4:5e:75:e4:02:98:d6:30:63:24:
8b:d6:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:41 2025 by rpki-client