Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: YeQUwJNoiH70k6ojM+BjFEQVqavToWZtA7s3Yj8eXgk=
Subject key identifier: 77:D7:20:4A:27:E7:F1:D9:FB:2C:27:F3:42:21:9F:28:80:5F:1B:8A
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 019A53080A09C47B9A99A16BFAE3AEB545EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 08:00:26 +0000
Manifest this update: Wed 05 Nov 2025 08:00:26 +0000
Manifest next update: Thu 06 Nov 2025 08:00:26 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: rYvfVg35QILl18tri9oKq5F+5T8vNPoPzRDQLimq2B4=)
2: Pt5jCGzvovgNs5CdDynFwkh2QzQ.roa (hash: nVdxdKNGSJEZ6402xd/EQ5NSj2OrYk/HxmlnqTUvP6Y=)
3: c_ThGFbqhteIloHLISS2D3Is-B0.roa (hash: dWKCcE+KdsbeTu7uVlboc1SJNBL/6lqMpvChZHMYdHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:0a:09:c4:7b:9a:99:a1:6b:fa:e3:ae:b5:45:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Nov 5 08:00:26 2025 GMT
Not After : Nov 6 08:00:26 2025 GMT
Subject: CN=77d7204a27e7f1d9fb2c27f342219f28805f1b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:0a:de:e6:3b:2b:f4:e9:f4:a7:ff:3f:46:
6c:0d:c2:c3:a9:c3:d5:03:95:0d:29:37:16:72:64:
3f:3f:9a:68:5e:21:4e:2c:d6:4b:8e:62:13:41:98:
90:33:43:89:96:aa:3c:cc:fa:75:16:6d:71:84:ae:
11:6e:b2:00:a3:4c:a8:fd:eb:9f:6d:f3:ef:8d:ab:
50:61:42:f4:b1:6d:10:57:bc:7c:c1:46:1c:d8:d5:
7f:bb:94:f0:93:58:85:50:2b:43:6e:4b:0a:73:32:
76:16:cb:52:bb:76:a0:e2:89:f2:64:1a:be:14:a3:
d5:24:53:fb:c9:5a:00:20:29:30:af:54:37:f3:9e:
8d:e8:5c:75:f5:85:92:8b:76:e1:20:bb:1e:ad:ad:
48:ca:7f:65:7c:db:7c:d4:8d:a4:48:c1:cf:58:1e:
cb:46:4f:fb:b4:8c:45:24:98:60:8b:f7:6e:64:bd:
8f:31:cf:c8:a3:2b:b0:96:30:6e:d1:12:27:41:03:
7d:bd:42:38:b1:0f:03:8f:35:b1:5d:19:dc:ac:fa:
83:86:be:bb:33:d3:27:d0:c4:59:a6:63:10:54:70:
5f:7b:35:02:c2:df:dc:a3:41:ac:7f:46:5c:64:0c:
c6:12:a0:8e:d2:25:db:a8:62:70:76:e0:97:d5:2b:
73:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D7:20:4A:27:E7:F1:D9:FB:2C:27:F3:42:21:9F:28:80:5F:1B:8A
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9b:7c:71:ed:fd:d9:66:6d:c5:fa:12:74:86:e3:a7:01:a2:
dc:ad:6f:50:ac:62:d6:a9:78:46:6c:04:a0:dc:46:a6:05:07:
93:9f:5d:52:24:42:a4:a1:9c:fb:bd:cb:55:ab:4e:3d:7d:64:
61:12:fd:f2:e2:e9:1c:27:3e:e5:33:9f:9c:d8:1c:37:89:49:
c8:34:d4:45:93:6d:bc:41:f2:63:f6:05:fc:5f:1e:22:2e:23:
e4:45:94:82:53:fd:fa:8c:fb:aa:a9:76:94:7a:07:eb:8b:ca:
1b:99:31:dd:a1:c6:0c:38:a4:68:a7:a8:0d:e9:fa:d7:31:c1:
ea:f8:bc:75:2c:a7:3e:79:a1:15:0e:25:42:3d:73:02:20:ad:
6f:99:29:22:55:84:cd:fa:19:a2:bb:97:f2:93:dc:d4:95:a1:
f1:1c:18:c7:ae:b8:ef:d5:d3:18:2c:67:c8:74:70:f1:55:ed:
c5:02:65:49:34:b8:71:b3:16:85:64:ec:2c:94:6b:31:d3:ec:
52:a6:4c:9e:e3:f2:d3:00:c5:8b:be:fe:1a:04:53:c6:d1:58:
ed:03:48:55:d6:fc:83:c3:b3:29:b0:45:a6:28:d1:b1:dd:79:
7c:49:17:29:4c:b2:0c:97:94:df:cf:3b:91:b4:f0:ba:5a:6a:
9e:e4:15:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:58:50 2025 by rpki-client