Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: gRbi+ZIdF2uwTHhboqGJARCMCB2m1UtmyHTDy5SxHvc=
Subject key identifier: 13:CE:9A:06:1E:B3:CF:B0:38:A1:6E:79:93:66:75:73:B2:06:50:D9
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 019A22C06FEBC78F98CDB03E7A6D6148225B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 23:00:28 +0000
Manifest this update: Sun 26 Oct 2025 23:00:28 +0000
Manifest next update: Mon 27 Oct 2025 23:00:28 +0000
Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=)
2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: GcAt6pQxFsakIMfwHI06hEVjYn0o3KKPDtwxpq+BIQw=)
3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=)
4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=)
5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=)
6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=)
7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=)
8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=)
9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:6f:eb:c7:8f:98:cd:b0:3e:7a:6d:61:48:22:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Oct 26 23:00:28 2025 GMT
Not After : Oct 27 23:00:28 2025 GMT
Subject: CN=13ce9a061eb3cfb038a16e7993667573b20650d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:a6:12:00:de:5d:2c:a6:e6:1b:d8:a7:c9:
45:b6:cf:75:af:4b:83:18:2d:f6:67:01:7c:0d:d4:
d5:ca:b9:06:5d:d1:71:c9:98:09:22:06:21:6b:c6:
04:6f:9c:9c:64:fb:02:8f:4b:14:72:a1:38:8f:8d:
29:a4:29:6e:1c:04:8f:c4:d0:5b:9b:3e:c3:5f:8a:
fb:a8:e0:f4:13:48:89:d6:7c:90:ec:d4:42:66:12:
0d:45:ff:9c:99:20:8c:d2:4b:ed:99:d3:4a:21:6d:
1d:2e:87:e8:e2:d8:13:2d:6d:93:f3:97:3f:99:cc:
a7:71:d7:a9:02:b9:aa:1d:95:fa:d2:0f:b9:d9:93:
76:61:50:26:b2:1a:66:e8:1e:5f:a0:19:15:2c:d4:
a5:61:ca:52:d5:6a:20:ac:7b:00:36:be:56:2a:00:
51:d3:1c:c7:c1:90:d0:58:c4:8f:27:87:6a:73:b2:
64:7a:39:1d:55:8f:c2:f7:d2:72:d4:48:67:f1:ed:
fc:98:8b:fa:20:8d:00:7b:f8:65:c6:72:49:2f:83:
1c:5c:97:8c:60:0b:9f:3f:01:97:0f:e6:8a:8b:47:
c7:e4:c1:be:b6:6a:39:6f:ef:a7:d0:95:22:59:2b:
00:84:01:29:c3:69:c9:1d:e4:f4:71:d0:50:02:7d:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CE:9A:06:1E:B3:CF:B0:38:A1:6E:79:93:66:75:73:B2:06:50:D9
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:79:00:da:a3:38:3c:37:bd:24:a0:aa:bc:ee:ad:95:62:d3:
c1:07:9e:3c:49:4f:5d:5c:4a:88:9d:6a:9e:b4:36:39:46:7c:
6f:70:0b:5b:77:dc:f8:aa:41:93:f1:48:87:64:f1:94:03:46:
b9:7f:05:1a:c8:8c:96:66:a4:46:a1:92:15:fd:70:aa:2b:30:
ca:e7:61:ef:ed:3a:4f:34:b0:d7:f9:76:a3:c3:81:4e:1d:a8:
a8:d4:3c:94:0f:dd:5d:e2:d1:20:74:5b:a3:a4:0b:95:d7:68:
ab:fb:94:fd:ae:01:d1:40:45:0d:e6:11:42:0b:0c:5e:4a:65:
30:da:12:0a:fb:e3:d4:bf:48:95:42:50:c6:53:54:e7:67:ce:
7c:d3:05:ee:e3:9d:9f:1d:ee:9f:21:4e:25:34:3e:b1:dd:e8:
0e:99:c6:f7:80:4f:ba:93:87:a2:92:4b:47:6c:9b:dc:93:35:
3b:8d:3d:9a:43:f0:48:14:24:92:9e:84:cb:93:8f:7d:19:69:
1b:d1:bc:1d:c6:46:9b:e6:ad:c7:30:3e:25:48:41:74:c4:f9:
d5:1d:4a:e8:e8:85:4b:b3:eb:b8:fa:43:64:96:26:e4:57:a3:
4b:00:bf:a0:3d:c8:3a:9d:28:1c:69:32:6b:aa:35:eb:db:93:
be:4b:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:37:30 2025 by rpki-client