Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: 1qw8YK/N+yb7s+hVOTytwLaa7Ct3KHXZEx2iAbDQDH8=
Subject key identifier: B2:79:06:E2:B9:07:4B:90:B1:AF:C3:1D:A3:25:FA:B4:70:46:CE:C9
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 019A4D3CB77D6BBB62FB4EB3791298CF8B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:15 +0000
Manifest this update: Tue 04 Nov 2025 05:00:15 +0000
Manifest next update: Wed 05 Nov 2025 05:00:15 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: KREncesoICE32/Fn3AaQmFB/JHpcJZKw7OPXiAsONpA=)
2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b7:7d:6b:bb:62:fb:4e:b3:79:12:98:cf:8b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Nov 4 05:00:15 2025 GMT
Not After : Nov 5 05:00:15 2025 GMT
Subject: CN=b27906e2b9074b90b1afc31da325fab47046cec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:ef:5e:92:e7:d7:d3:0e:7c:f2:c6:8a:94:
b4:4c:45:d6:51:02:59:73:83:e1:b8:b0:6e:1e:ad:
64:74:7c:7f:c0:54:34:3d:80:f1:c6:ac:13:d4:18:
10:36:6e:47:ad:f3:0e:a7:f5:34:74:9c:39:4d:b2:
7b:a2:18:a1:3c:ac:10:2f:17:ae:67:ef:45:9a:f1:
f5:f8:14:2e:3d:66:1b:d2:d6:32:a8:25:ce:f1:f7:
6d:5d:95:b6:f8:f3:f9:23:74:b2:c4:ac:cd:c0:f3:
67:90:27:1a:32:a4:6f:82:1f:7b:e9:f3:f7:f3:14:
54:7a:b3:2b:cc:37:ba:ac:c0:26:f6:47:84:57:3c:
42:24:26:fd:a5:7e:db:4c:85:e6:7d:06:25:6b:87:
6e:6e:21:53:d7:23:a7:c6:79:7f:12:ab:ff:d8:9b:
b8:2e:4b:6b:25:47:95:0a:96:73:f0:44:81:7f:3b:
a3:6c:92:cb:c5:03:40:62:29:99:7b:d0:07:01:d1:
e2:e9:bf:6b:af:ca:d9:d7:c7:79:be:a9:cb:35:89:
b2:6f:64:e3:ec:c6:fa:37:2b:d5:52:69:4f:91:e7:
71:83:46:6f:73:e6:1e:ee:a3:b7:7f:94:8d:73:53:
96:c7:d1:23:37:15:7a:e6:1a:e7:42:85:3a:5e:93:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:79:06:E2:B9:07:4B:90:B1:AF:C3:1D:A3:25:FA:B4:70:46:CE:C9
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4c:44:8c:d3:49:cd:a2:3c:f1:d9:5f:fa:5b:f2:a0:5a:63:
21:7d:73:30:a1:1a:05:8c:b7:c9:96:89:06:9e:b4:f1:07:d8:
80:d3:a2:d6:ca:6b:5e:8d:fa:64:19:f6:74:34:d3:31:cb:fb:
64:e9:6f:d5:3e:e6:53:85:b9:a5:cd:4d:66:b5:9b:08:18:a3:
c9:13:83:de:03:2e:01:f5:f4:5b:d6:a5:69:7f:0c:9f:cc:86:
d6:62:7c:cc:a0:eb:53:a2:e6:ee:6f:76:6e:dc:81:9f:1b:8e:
e0:1f:98:ec:b0:42:f2:75:65:b9:da:3e:53:42:4c:c6:77:ae:
b6:53:8e:d2:e0:65:44:3a:85:cb:94:2c:63:92:8b:4f:15:21:
58:c1:93:5b:23:68:53:e3:a1:c7:93:83:4b:30:eb:8a:d0:73:
29:6c:12:21:fc:f1:e8:28:1e:af:3f:0e:44:80:85:60:f1:73:
55:13:f3:2d:0d:83:63:fb:9e:34:e0:53:58:91:1c:41:f9:d5:
fa:68:84:7a:2f:51:16:5a:9f:c7:f9:c1:ec:9e:03:f0:52:be:
30:4c:1d:09:1f:80:a6:5c:75:f7:ad:a5:e7:52:32:87:8c:b0:
76:3b:8a:b7:5c:de:af:f4:31:67:3e:11:cd:7b:59:85:a4:f3:
22:78:d8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:14 2025 by rpki-client