Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
File: kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft (raw, json)
Hash identifier: +kpBRIPLIkxGgcVtn7xv+ODVPzuV5EoeynUpdBeZhy8=
Subject key identifier: 71:41:98:38:AA:F8:C7:C0:9B:D2:05:F5:6D:31:AC:6E:7E:9D:13:23
Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
Certificate issuer: /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Certificate serial: 019A4FD01D144D762257B621529F7375309D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
Manifest number: 163B
Signing time: Tue 04 Nov 2025 17:00:30 +0000
Manifest this update: Tue 04 Nov 2025 17:00:30 +0000
Manifest next update: Wed 05 Nov 2025 17:00:30 +0000
Files and hashes: 1: 6fnAZ8W2MGF8ZNrQkh_nCxeTpv4.roa (hash: VVdXTpC74ZKSlf0OaYeG4sfAbOWwASAnFr5UUxM1yrQ=)
2: jwF2Fe8ZjLBRTo3L_7TINNi10fQ.roa (hash: Ap/raQBvujEIQc3hDUBU94DRN1La9dL+OAKrqJu5rbU=)
3: kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl (hash: u9QZtwghNa+XRSrAREGVlF6p6oAyYNd1zl7CRs7CHUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:1d:14:4d:76:22:57:b6:21:52:9f:73:75:30:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Validity
Not Before: Nov 4 17:00:30 2025 GMT
Not After : Nov 5 17:00:30 2025 GMT
Subject: CN=71419838aaf8c7c09bd205f56d31ac6e7e9d1323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:3e:0a:03:31:99:5b:b5:77:ca:97:fd:cc:
3d:f6:e8:38:4b:40:91:96:bd:24:5d:2e:04:0a:86:
f8:f9:e8:82:ff:1e:bd:65:28:19:75:7a:40:8e:c8:
dd:d5:9d:23:2e:a2:9b:ec:e3:e3:92:09:d2:51:71:
70:ef:44:4d:70:c5:8a:d2:87:98:3a:ac:0e:ff:22:
ea:c7:b3:fc:48:63:48:bf:51:5d:5f:63:e6:7b:87:
da:b4:58:17:56:20:d3:37:54:33:92:2c:e6:19:a1:
0b:5d:94:0a:f5:72:cb:3d:da:e7:37:cf:1a:e9:e1:
dd:cb:15:75:5b:eb:c4:22:97:ef:48:bc:1a:bd:47:
a6:85:ff:ec:2c:a3:59:0e:ed:94:ed:49:8f:a0:39:
62:0f:ff:23:65:90:1d:05:64:4a:aa:f6:3e:ba:74:
0f:1b:49:c3:5a:58:d3:c5:3f:44:9a:4a:9a:28:d8:
47:fb:d6:03:5b:b2:10:64:d3:fb:69:21:95:8e:13:
42:56:24:8b:08:5a:18:a7:1c:67:4c:ba:94:a1:3f:
ca:ee:2d:4e:8c:8c:93:f2:34:8a:a9:73:26:8b:14:
f6:c9:f2:3b:4d:16:dd:4b:71:6f:f3:2c:6d:d6:b5:
78:9d:57:51:98:94:c8:fa:64:67:f3:c0:fb:ba:99:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:41:98:38:AA:F8:C7:C0:9B:D2:05:F5:6D:31:AC:6E:7E:9D:13:23
X509v3 Authority Key Identifier:
keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e7:ad:f2:a3:19:8e:d7:fa:83:52:ad:cc:42:63:f6:33:89:
11:4f:c1:2e:bf:ff:88:2c:67:b5:77:17:aa:ce:d9:32:50:5a:
7f:87:89:9a:0f:de:6f:36:6f:5f:85:46:c1:1c:2f:32:14:da:
9a:4d:a5:4f:42:6d:d0:9c:d9:47:78:ac:a9:0d:fd:65:13:9e:
cf:e6:bd:5f:41:80:85:50:40:18:27:7f:15:5c:a4:ce:cf:90:
39:3a:da:b4:9f:ba:1f:54:1b:9f:1b:23:45:98:81:2e:4c:02:
dd:e2:22:f7:6e:e3:2f:4d:cb:8b:d7:c4:27:fb:2b:e2:53:79:
17:a5:05:96:1e:6f:97:c8:7a:79:03:1e:a4:4b:75:ec:58:8c:
6a:65:44:45:20:f3:9a:0d:d8:b7:7b:b0:60:10:54:95:89:f9:
a6:52:6f:33:f7:7a:cb:89:ec:49:03:df:da:98:59:f7:0e:83:
24:9e:8b:34:d3:6f:0a:46:20:aa:e2:d4:d8:15:40:34:a6:cd:
bf:94:0a:de:5e:57:bc:37:67:59:2a:b7:2b:9c:61:e1:64:b6:
da:ff:73:e7:f0:95:02:0e:86:6b:ca:35:f7:ca:8c:c8:e1:05:
d6:e2:75:df:fd:71:fd:ec:58:39:15:8e:d7:df:35:4f:ca:66:
01:9d:c6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:03 2025 by rpki-client