Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
File: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft (raw, json)
Hash identifier: fCQlqPqc5Y+/3raWPmDuUQ48XbvQiCH4+Cau0rNBXd4=
Subject key identifier: D2:1D:65:96:7D:91:45:B8:B6:D6:42:EE:BD:C8:3E:0D:E5:E2:69:5F
Authority key identifier: 28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
Certificate issuer: /CN=285feec87d1959340872f8f79831202f24c80c9e
Certificate serial: 019A7112A31456591B3F2E4D35F6B33C6A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl (hash: FR+K/82f1f3FskML3TO9WJASbLwSIMDtavAAYJWf4oY=)
2: dufDt0AmSEl5MX84gmoizwQiTsk.roa (hash: aXEbp58hPoSuyC6IS1AxqUQLOo+BHH3jFCGl+xNSnf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a3:14:56:59:1b:3f:2e:4d:35:f6:b3:3c:6a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285feec87d1959340872f8f79831202f24c80c9e
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=d21d65967d9145b8b6d642eebdc83e0de5e2695f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:ab:9d:1b:cf:a9:91:f3:86:24:07:96:48:
fe:48:2c:c1:4d:0f:08:c4:27:13:18:a1:dc:ca:67:
05:a9:5c:49:a9:db:3e:d5:6f:28:e1:e8:d0:18:08:
6a:58:6c:01:40:20:f9:db:53:dc:cb:a8:ac:75:44:
cc:85:14:a1:ee:27:f7:4d:76:9b:ea:ef:01:26:5e:
72:6c:c9:d7:be:0c:0e:4a:50:d0:00:11:cd:b7:8a:
20:4b:99:29:d1:3d:c3:80:6b:35:5d:39:85:bc:2e:
cb:ec:68:a7:13:f0:d0:f4:eb:3c:47:09:65:f7:4c:
ef:83:95:de:ab:aa:5d:70:16:11:f3:7d:0c:f2:ca:
d7:48:b6:46:fa:fc:4f:9d:3a:27:c9:be:ac:b1:8f:
dd:1d:40:bf:f6:50:d8:2c:4e:12:6c:09:82:03:cb:
f2:0f:2a:28:11:22:23:d3:d3:c4:1d:16:92:de:9e:
aa:47:50:26:e8:76:fc:91:d7:b8:15:82:e3:11:a5:
fb:86:3f:2e:46:05:d4:33:9e:85:3b:69:a7:48:de:
f3:c5:bb:76:b5:7b:3f:31:9d:ab:e0:38:df:65:3f:
04:81:90:00:37:7f:0f:99:fa:79:39:9c:a8:36:87:
c2:38:8d:41:67:4b:35:22:51:3c:3e:2f:09:4d:e1:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1D:65:96:7D:91:45:B8:B6:D6:42:EE:BD:C8:3E:0D:E5:E2:69:5F
X509v3 Authority Key Identifier:
keyid:28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:78:78:ed:b7:f8:81:62:c6:89:91:74:44:ae:2b:72:18:2c:
50:f4:0b:c0:b7:cb:d7:6f:6b:af:c6:fa:48:bd:fa:81:22:58:
c5:0a:2c:cc:5b:34:f4:78:9f:48:0c:85:03:7f:fd:34:12:3f:
50:bd:a0:33:6f:f8:e1:37:b3:20:da:eb:31:55:0b:b8:ab:27:
b6:59:31:88:ff:c8:39:54:13:46:63:f6:6b:93:4b:b8:53:f1:
b8:64:3f:18:34:fe:8a:89:56:18:89:fc:86:8e:96:6a:b9:c2:
df:06:02:54:07:e0:d6:e0:31:c2:1f:a1:14:dd:9d:2d:82:e5:
b2:71:3b:ba:98:75:e0:6e:e2:ee:f2:35:b1:ea:3b:e5:45:8f:
62:af:79:b7:5d:61:4b:08:59:fb:f8:67:e0:4f:08:21:1f:85:
84:83:32:2d:a7:b7:fa:56:36:b4:fc:59:a6:f0:42:db:25:07:
57:6b:e4:5f:12:5b:5d:66:1f:23:5d:bc:95:d3:fa:62:21:81:
48:a3:f0:8e:1c:ec:0c:e0:c3:1c:44:23:57:4b:1c:36:89:f4:
66:c7:bb:90:32:96:76:91:2b:7b:45:0b:82:7d:f7:48:b1:54:
b9:a5:b2:d1:70:19:2b:5d:1e:fc:28:3b:12:88:28:75:7e:f1:
f7:af:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:45 2025 by rpki-client