Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: 3ON4DdM0bqJx3Xr5c66shB7/B5BftKQUa+7rMbbSbHs=
Subject key identifier: 08:5A:EF:F1:46:28:B1:9F:00:C0:DE:FD:C3:B8:EA:BF:DB:EC:CB:BC
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 019A5150C6505D57500F278737ADD6D4EF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 07A9
Signing time: Wed 05 Nov 2025 00:00:39 +0000
Manifest this update: Wed 05 Nov 2025 00:00:39 +0000
Manifest next update: Thu 06 Nov 2025 00:00:39 +0000
Files and hashes: 1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: KJh0gUurQ2JeRbSwS/a46UBiVHDHjmw44HtRXuWSUWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:c6:50:5d:57:50:0f:27:87:37:ad:d6:d4:ef:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Nov 5 00:00:39 2025 GMT
Not After : Nov 6 00:00:39 2025 GMT
Subject: CN=085aeff14628b19f00c0defdc3b8eabfdbeccbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:48:1a:6b:db:ad:9a:f3:69:b7:dd:c0:4c:
2e:57:18:f0:23:3d:45:f0:92:a4:ef:6b:d8:7e:53:
b7:55:8d:40:ae:d7:2b:d9:de:62:aa:c0:20:ef:f9:
5f:3c:ca:71:13:b7:8e:ca:a2:99:ac:57:91:4a:4e:
db:cb:90:b4:f9:b6:95:31:73:26:dd:80:73:22:28:
0d:2b:b8:db:85:b7:ba:ed:ad:ed:b0:b1:ce:c4:76:
6c:b9:dd:45:da:48:28:ef:11:d7:69:2c:a4:0c:32:
ee:02:20:82:20:5d:44:3c:3b:50:04:45:b5:c0:93:
84:07:79:d3:6e:68:0d:ed:bb:2f:bb:d5:e5:50:3b:
e0:cc:23:ed:81:70:fc:06:e9:d6:46:81:96:37:b8:
01:ee:fe:5b:18:8a:f0:c5:7f:e9:d8:3e:4e:a1:e2:
e8:7f:70:47:5d:3e:39:e1:6d:c8:1e:6f:d5:f2:d9:
cd:67:55:05:19:cc:d1:58:1e:a2:89:d5:36:99:f2:
cd:f2:00:93:cb:d0:ff:9e:02:9d:b4:48:a3:74:6c:
8f:3e:40:90:f7:04:83:ee:8c:be:ba:f2:46:e8:bd:
bc:3f:8f:1d:8b:53:69:b2:c0:5c:c3:ce:0d:2f:50:
0b:34:80:37:58:07:74:5d:f4:3f:3a:7c:0a:20:9e:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5A:EF:F1:46:28:B1:9F:00:C0:DE:FD:C3:B8:EA:BF:DB:EC:CB:BC
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4e:7d:81:4f:4e:20:22:0c:fe:cb:10:8b:12:7c:43:e7:73:
4b:a0:91:66:91:b6:39:b2:a3:21:55:a3:ea:16:3f:a5:ac:00:
e9:6d:ba:d7:1a:bb:ea:ec:5e:99:4d:0b:38:76:cd:55:eb:ea:
e7:26:e2:85:ab:c6:08:65:e5:d5:ed:1a:61:4d:24:18:30:1f:
eb:09:cc:28:c6:ab:74:62:cd:69:76:88:08:81:9b:0b:b7:f7:
65:0f:36:42:b2:52:87:49:36:01:79:6a:27:d3:a9:8f:c4:7c:
65:70:3c:1f:74:21:c0:80:4d:ec:31:37:7c:5e:fb:99:f0:4b:
6e:b9:09:9f:e3:98:07:e5:fe:86:58:d3:18:79:8e:3f:76:12:
30:fb:50:8d:53:d5:6c:77:e0:7b:fe:6f:2f:4e:9d:48:ed:c0:
85:0f:53:e1:52:c3:ab:61:ce:e4:7a:c8:32:06:d7:76:1d:9e:
76:07:f3:cf:3b:36:20:e7:91:13:7b:3a:61:6f:ab:df:2b:fd:
76:a6:4c:0a:02:89:f3:9b:bb:f0:60:6c:e8:c2:7f:6e:41:b2:
c5:f9:36:de:15:62:bb:a7:2b:67:79:58:1d:98:d1:7d:3f:4b:
ac:bd:a4:99:55:8b:a5:ae:c0:fb:89:0d:45:49:9e:cb:e0:9f:
c4:01:51:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:51:30 2025 by rpki-client