Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier: mL86ixqTKz7mRfPbDUulz/cJFBTvFdYsnydpJBeMB4U=
Subject key identifier: C3:D4:1D:E6:CD:AF:C9:C6:59:89:E1:8A:FE:F3:77:43:10:7A:A2:CD
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 019A4F2B95576308C77C20AD356CE6BBB14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 14:00:47 +0000
Manifest this update: Tue 04 Nov 2025 14:00:47 +0000
Manifest next update: Wed 05 Nov 2025 14:00:47 +0000
Files and hashes: 1: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: qPUXd8e9MeZFDquIgdAkUG5s6PlPA79pi3eJeij320E=)
2: VL0JqwmqF16Z9vYeG0MjePH-HaI.roa (hash: pSsEMVRtkWy4MtHaQ+2yZDRrd+dgM8mCSpJI0iLDlbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:95:57:63:08:c7:7c:20:ad:35:6c:e6:bb:b1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: Nov 4 14:00:47 2025 GMT
Not After : Nov 5 14:00:47 2025 GMT
Subject: CN=c3d41de6cdafc9c65989e18afef37743107aa2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:53:c7:ea:15:79:11:51:86:0c:a3:88:1d:
f2:8e:bc:94:0f:1b:ac:da:94:1d:51:e1:63:de:67:
46:83:1c:8c:0f:90:d3:b4:0a:ec:54:09:58:0a:f0:
90:e7:f3:1b:1e:67:b6:40:3a:e9:6b:88:e8:ed:6a:
35:1d:a7:ef:a2:9c:6d:b4:fc:69:18:46:bb:d0:8c:
8e:39:f4:d2:32:3b:ad:bb:a1:fc:24:0d:c7:5a:76:
da:80:37:93:76:85:42:f6:c9:de:3c:f5:dc:8f:5e:
38:14:23:d4:35:87:27:eb:3b:3b:3a:4b:91:94:fc:
ea:d9:46:e6:d4:44:29:8e:98:32:59:30:10:5e:90:
65:86:41:e6:e3:6f:3f:64:6e:d4:ca:0b:bd:6b:35:
2b:48:07:bd:b5:22:f8:1a:7d:99:d5:0d:db:10:ed:
c6:f8:f4:c3:3c:32:5c:3a:4d:99:2b:ea:08:b3:f2:
4a:98:f8:79:e4:99:64:21:bb:04:7f:02:c1:ad:ca:
d4:6c:47:53:6a:77:b1:54:21:48:47:53:bc:30:a5:
4d:64:dc:84:a8:2e:06:2f:2b:05:65:5a:c6:21:8d:
36:12:c5:cd:ab:b9:bf:85:3f:9e:a5:23:34:51:12:
5a:7d:eb:85:df:e1:f4:76:9b:34:38:9c:45:12:0e:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D4:1D:E6:CD:AF:C9:C6:59:89:E1:8A:FE:F3:77:43:10:7A:A2:CD
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f0:99:e7:54:97:8e:6e:8a:bb:1a:79:58:b1:9b:dd:2b:78:
52:1d:5a:80:b3:79:b7:e2:db:fb:10:8b:e4:eb:42:d5:94:29:
39:4b:4f:56:20:0f:92:c7:f0:a4:ff:99:e6:95:81:2e:03:c8:
89:9d:15:23:1e:0c:98:6e:ed:7b:9c:b7:36:74:c7:c8:ef:e8:
70:bc:1c:21:33:b8:28:3c:6d:d4:16:89:ae:0a:a9:46:7f:47:
2b:2c:e5:90:b9:87:f7:ba:41:50:a8:b4:83:36:b9:78:ba:87:
8e:34:96:a5:92:ce:9c:e1:ab:af:7e:6d:44:bb:e9:82:96:8f:
3a:39:42:4a:38:84:48:d5:29:78:76:f3:d3:36:fe:e4:72:94:
d2:bc:14:30:6f:6b:cf:67:04:f5:67:a8:24:9d:10:9e:b7:78:
5d:fd:64:61:3a:9f:32:d1:a5:d7:23:4f:d6:86:9a:a5:9b:47:
2e:10:7f:07:c0:80:ff:fa:c6:e0:eb:a1:66:a7:f5:51:72:ad:
6b:44:c0:c2:9d:88:76:b3:96:7f:58:e2:f7:b5:a0:3d:bb:95:
71:e9:e6:43:1b:bf:66:13:ff:ea:57:f8:f7:c2:f4:7d:24:15:
62:1f:4b:24:bb:61:30:eb:32:2f:1c:ab:41:84:ef:73:33:5b:
8f:20:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:27 2025 by rpki-client