Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: YswftwD+zkH5UuJsvBNoj3+DFefYkiSSxtUcDhM7u3s=
Subject key identifier: 34:B2:AB:3F:4F:51:9D:82:82:7C:71:D7:D0:D0:CB:D2:63:DB:A2:6E
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 019A4DE1C0DF0CEFEA580644CFFCEA901203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:31 +0000
Manifest this update: Tue 04 Nov 2025 08:00:31 +0000
Manifest next update: Wed 05 Nov 2025 08:00:31 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: OfJmq13efSIsbVuniZjbvVekxrREwfeFBYAV3pKI0hk=)
2: eoUI00v5kHG-99ELxP-BBcjXoAc.roa (hash: wGk7AZgmxRmrZlb/Q0cgAj09IR2rbdkkeiUHejBRKws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c0:df:0c:ef:ea:58:06:44:cf:fc:ea:90:12:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Nov 4 08:00:31 2025 GMT
Not After : Nov 5 08:00:31 2025 GMT
Subject: CN=34b2ab3f4f519d82827c71d7d0d0cbd263dba26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:c0:d7:32:5d:a0:d5:36:6d:bd:ef:44:b2:
31:68:30:65:2f:92:65:92:6a:20:d3:14:a3:70:9f:
e6:71:6c:57:d2:22:64:78:f8:95:38:9e:42:e1:69:
2f:c4:c5:0a:ef:22:6e:e2:4f:9d:50:5c:5e:8a:a3:
46:b2:05:1d:17:89:36:41:e8:5e:aa:52:e1:31:18:
07:e4:03:25:b6:92:62:59:8d:95:b2:3f:e3:c0:ff:
84:c1:aa:5e:e0:f3:6f:46:5f:3c:d1:50:78:3c:1d:
47:91:ab:9d:e0:09:4d:dc:1f:0b:50:9e:0f:42:1c:
f3:af:f0:0c:06:fb:74:ca:40:43:60:0f:3c:b4:87:
f2:b5:17:a5:05:c7:ab:09:0a:a9:42:48:27:90:78:
c4:7a:20:97:be:69:6e:c6:a3:94:e3:e3:06:13:d0:
67:4a:8f:71:c6:75:80:55:e2:34:ee:ec:71:92:21:
ee:50:e6:38:1e:2f:a5:0f:05:09:b5:69:3f:d2:3e:
e3:32:61:f6:a4:97:3a:ac:d3:dc:47:f2:e2:9d:20:
9c:9a:0c:0d:e9:39:78:e5:e5:11:e0:b4:40:4d:37:
1d:57:f6:08:cf:24:92:be:29:d2:8a:20:1a:c7:99:
bf:4e:5c:30:ac:01:8a:db:06:64:16:dc:8f:07:f4:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B2:AB:3F:4F:51:9D:82:82:7C:71:D7:D0:D0:CB:D2:63:DB:A2:6E
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:48:10:90:ac:30:7f:30:0f:be:b4:9b:35:2c:bb:fb:22:ab:
6c:ba:8e:75:8c:3c:71:8c:01:9d:ee:85:96:ee:85:c1:52:93:
b9:39:99:36:f9:8e:a4:08:7e:aa:fc:bf:eb:be:e9:c9:ae:65:
c6:99:74:d3:7c:1f:19:73:5e:2a:2f:a4:86:ce:31:63:ce:72:
d9:ea:b5:a2:3c:a7:eb:61:41:79:42:b1:86:89:dd:a2:04:9f:
46:29:c4:73:f0:97:bc:5c:2f:d0:16:ae:7f:6d:52:81:b8:78:
bf:1a:26:90:93:8d:d2:fe:7d:f8:f6:01:93:47:91:41:de:90:
4e:f8:66:d4:5f:cd:4d:23:08:4a:41:31:f3:72:27:ff:c9:bd:
0f:e8:c5:5e:5d:e2:9b:19:53:5b:4e:e1:1d:27:61:60:d2:64:
45:fa:49:6c:10:c0:07:af:e0:31:d7:6b:fd:a8:27:d4:3e:2f:
58:37:fa:e6:2f:78:2b:76:e3:fd:4f:da:0e:dd:23:d2:ae:74:
d6:25:42:ec:05:0f:87:fb:f0:95:1a:83:66:8a:08:43:2c:26:
c8:4d:6c:27:71:a5:0b:4e:6a:f1:83:8f:11:45:cf:2e:9e:a2:
26:78:4f:d1:b3:72:b3:4d:4e:a4:cf:d0:4f:25:c3:cf:64:4d:
b0:94:b3:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4cDfDO/qWAZEz/zqkBIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM1NDg2MTk3MzcyOGNlMmJlNTA1ZjcyNzBhNDM2NGQ5
NGU2OTEwHhcNMjUxMTA0MDgwMDMxWhcNMjUxMTA1MDgwMDMxWjAzMTEwLwYDVQQD
EygzNGIyYWIzZjRmNTE5ZDgyODI3YzcxZDdkMGQwY2JkMjYzZGJhMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCPA1zJdoNU2bb3vRLIxaDBlL5Jl
kmog0xSjcJ/mcWxX0iJkePiVOJ5C4WkvxMUK7yJu4k+dUFxeiqNGsgUdF4k2Qehe
qlLhMRgH5AMltpJiWY2Vsj/jwP+Ewape4PNvRl880VB4PB1Hkaud4AlN3B8LUJ4P
Qhzzr/AMBvt0ykBDYA88tIfytRelBcerCQqpQkgnkHjEeiCXvmluxqOU4+MGE9Bn
So9xxnWAVeI07uxxkiHuUOY4Hi+lDwUJtWk/0j7jMmH2pJc6rNPcR/LinSCcmgwN
6Tl45eUR4LRATTcdV/YIzySSvinSiiAax5m/TlwwrAGK2wZkFtyPB/SDzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSyqz9PUZ2Cgnxx19DQy9Jj26JuMB8GA1UdIwQY
MBaAFCmDVIYZc3KM4r5QX3JwpDZNlOaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgt
M2RiNmYwNTcwZDQ4LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgtM2RiNmYwNTcwZDQ4
LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEgQkKww
fzAPvrSbNSy7+yKrbLqOdYw8cYwBne6Flu6FwVKTuTmZNvmOpAh+qvy/677pya5l
xpl003wfGXNeKi+khs4xY85y2eq1ojyn62FBeUKxhondogSfRinEc/CXvFwv0Bau
f21Sgbh4vxomkJON0v59+PYBk0eRQd6QTvhm1F/NTSMISkEx83In/8m9D+jFXl3i
mxlTW07hHSdhYNJkRfpJbBDAB6/gMddr/agn1D4vWDf65i94K3bj/U/aDt0j0q50
1iVC7AUPh/vwlRqDZooIQywmyE1sJ3GlC05q8YOPEUXPLp6iJnhP0bNys01OpM/Q
TyXDz2RNsJSzfA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:32 2025 by rpki-client