Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: +PmEoLbH6D7vI+dGLk4h1255LRpO+R7B5JD39H8we94=
Subject key identifier: B1:04:5B:7A:39:95:71:D6:D8:3A:87:19:A5:79:1B:49:D9:1C:B2:F9
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019A232E216514DBE02FD6473E8D0E485316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 01:00:16 +0000
Manifest this update: Mon 27 Oct 2025 01:00:16 +0000
Manifest next update: Tue 28 Oct 2025 01:00:16 +0000
Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: cEd0BwqsvccCcXbb/A3NWtC5NaEHwYbRqHln3oSBs/8=)
3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:21:65:14:db:e0:2f:d6:47:3e:8d:0e:48:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Oct 27 01:00:16 2025 GMT
Not After : Oct 28 01:00:16 2025 GMT
Subject: CN=b1045b7a399571d6d83a8719a5791b49d91cb2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:df:24:53:d6:96:90:3f:05:b7:78:fb:c3:
16:14:1e:f7:57:fc:96:e0:e6:0a:33:88:7a:20:f9:
4d:20:a0:68:6d:4e:df:b9:52:91:f5:4a:62:e9:0d:
c6:be:cc:ab:a5:9f:f6:c7:b2:9a:7b:c9:3e:4a:82:
af:69:7a:60:1a:ab:63:ef:1a:77:d4:03:09:b5:42:
8e:2e:e2:b0:4e:50:04:a3:1b:c8:02:b5:da:bf:15:
9c:d6:c8:ff:cd:63:9d:3c:3c:c7:0a:71:58:bd:aa:
8a:a1:1c:91:c0:56:8a:5a:21:a1:0c:ff:07:f7:d2:
c0:99:5d:63:46:f0:9b:82:35:89:d6:36:38:0c:a9:
7c:62:af:4a:5c:00:32:d4:6f:43:05:09:9a:a0:d3:
34:2d:c0:f9:4d:f7:5b:f6:07:76:d7:79:89:6a:fc:
7c:73:8e:fb:69:9a:22:85:88:57:30:97:fc:28:fe:
29:35:bc:6c:25:be:56:36:e6:73:24:07:d3:ed:91:
79:b9:54:55:c8:cd:33:40:08:07:dd:fd:f9:14:19:
9a:24:4a:0b:f4:70:d3:34:fe:cf:39:94:18:1f:91:
81:fd:6c:a1:10:e7:46:b6:c5:e0:ce:7d:f8:04:5c:
a9:cd:60:6f:6b:e1:5b:dd:04:14:cb:75:4c:6a:44:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:04:5B:7A:39:95:71:D6:D8:3A:87:19:A5:79:1B:49:D9:1C:B2:F9
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8b:3e:91:3c:24:f6:7c:58:11:39:59:29:f5:a4:a3:1f:45:
87:99:d0:fa:af:05:10:6e:28:2c:2b:ba:86:9e:ba:99:91:33:
4f:fb:d8:e3:44:9b:57:69:1d:db:48:37:d2:cf:c0:d2:cd:29:
5f:4d:d4:71:c5:40:a2:66:21:5a:a8:08:a7:9e:c4:b9:57:7d:
e7:be:3b:d6:03:04:89:48:e3:93:70:ef:91:d8:25:1a:60:84:
a8:43:2d:99:1b:9d:4f:34:53:27:1f:93:36:cd:f8:65:88:49:
10:70:21:9b:b2:e6:91:6a:ee:99:cc:3d:9e:7e:6f:5b:4e:6c:
fd:dc:1b:84:df:64:8a:d0:2b:75:24:2e:91:d9:78:04:d4:a0:
f0:54:95:44:a9:71:f3:9c:3b:dc:5d:b2:68:89:3c:6d:9c:80:
e1:7e:bc:b0:18:3d:66:59:bc:c3:ba:59:49:a3:68:66:d9:0e:
ab:30:b4:24:19:56:2a:1c:56:8d:73:1c:21:d3:ca:39:b4:ff:
bc:22:c7:2c:b2:77:d4:cf:00:19:da:09:16:08:d3:d5:39:9d:
52:1b:2c:ff:1c:32:85:09:21:98:49:9f:fc:f8:2d:6f:04:86:
db:84:f3:6b:da:f4:86:31:1c:ca:e2:9c:7d:3b:63:c1:a4:d3:
14:6a:b5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:43:29 2025 by rpki-client