Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier: iQwBwafZrz6R9+5P1xwemmxuTC5DdnB6aSUpvdwTQ6k=
Subject key identifier: 09:7F:13:A0:AE:5F:98:36:BE:50:8D:FB:BE:35:73:EE:B8:25:E7:0E
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 0198960092070218176D7D23C7543327CDDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 22:01:16 +0000
Manifest this update: Sun 10 Aug 2025 22:01:16 +0000
Manifest next update: Mon 11 Aug 2025 22:01:16 +0000
Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: oZ0hWi7XVMBhXV9y3/Rg0cujCDMzwdPT5hJmPiAJzQk=)
2: uxMrGXP4FNtk4vhqO5cU5mQf3-A.roa (hash: hNIkM7+jAO3rAd67WrBtFJIrTsZ1lPQ5IhBNiYcTU/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:92:07:02:18:17:6d:7d:23:c7:54:33:27:cd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: Aug 10 22:01:16 2025 GMT
Not After : Aug 11 22:01:16 2025 GMT
Subject: CN=097f13a0ae5f9836be508dfbbe3573eeb825e70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:11:cd:0d:0f:8a:cb:56:0c:fa:15:fa:9b:
6a:73:30:0d:74:03:c8:0b:63:09:8a:28:86:ff:4f:
88:72:4b:ee:f1:61:b6:39:a7:6e:1f:41:fc:7c:97:
fd:a0:85:5a:67:a0:89:93:b5:15:8a:c8:3e:cb:2e:
98:3d:e7:8d:1c:d4:64:ac:c5:1d:47:9e:08:6b:9f:
f9:6b:f5:22:fd:95:42:4a:cb:96:19:11:65:a2:d6:
25:ef:0d:74:95:62:15:71:99:b8:0d:63:67:d6:40:
21:ff:78:ff:90:6a:14:18:ba:25:df:6e:25:56:c6:
94:8a:2c:a1:96:5b:ed:7d:e6:1e:cc:6b:02:a9:e4:
a9:f5:74:78:4e:3f:71:a6:1b:6c:9e:de:38:68:2b:
0e:26:f5:8e:47:94:9e:74:7b:bb:c2:fe:86:cf:2b:
8d:d0:36:6a:f6:56:f9:23:7f:18:a4:f0:00:64:19:
33:06:b8:3b:c2:ea:5d:4f:ed:8b:9a:9f:3f:0d:67:
fd:33:e1:d3:78:bc:07:ac:58:51:ea:b3:aa:3e:be:
b1:a4:9b:5b:59:22:43:95:71:f1:4f:5d:5f:1c:33:
8a:54:95:2c:89:78:a2:a4:6d:45:36:bd:d9:60:33:
58:87:8d:ae:7b:e3:dc:7d:5e:74:49:7b:23:ca:12:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7F:13:A0:AE:5F:98:36:BE:50:8D:FB:BE:35:73:EE:B8:25:E7:0E
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3f:72:3d:e5:d5:2b:39:d5:09:95:2f:b6:ad:e8:aa:9e:0a:
fd:f3:57:7c:79:52:4b:e2:b9:46:8e:1b:bd:c1:ab:2b:e4:0f:
c0:1f:f9:9a:39:56:72:ac:42:5c:92:b1:ad:7d:05:50:5f:ed:
73:a8:9d:b5:ab:b3:41:8b:1d:30:f0:ef:69:36:65:42:a9:bd:
26:20:4e:20:b1:44:a8:1c:12:d4:45:25:08:4b:cb:4e:3e:32:
b5:7f:10:cb:94:a2:a3:5a:c4:92:f1:e9:0e:5e:52:24:e8:c4:
cf:cc:f4:cc:50:c0:72:b5:5d:54:60:d0:94:e4:06:06:78:85:
86:44:ca:87:f4:30:21:5b:f6:b9:ce:94:22:1b:ca:3c:78:ed:
9d:f1:17:df:89:8d:13:11:61:64:8c:90:f4:65:2f:0a:fb:a2:
e7:2f:f0:ab:33:2a:4c:1d:9a:9c:0a:fc:10:c5:c7:3c:ee:4d:
e5:93:6b:f6:88:20:51:be:17:42:08:8c:f5:3c:2b:f2:f6:fd:
23:1e:aa:bf:f9:ad:c4:f2:fd:c7:0a:94:fa:b9:6a:2e:81:06:
d3:ea:e6:19:39:d6:5d:b5:9a:74:10:20:d6:db:5e:1f:13:b5:
09:c8:b6:c2:23:11:32:b3:ea:48:75:4c:01:ee:59:55:02:bf:
86:a1:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:54 2025 by rpki-client