Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: TEQkpwLZMeUEkPe22a8wbaTavZCEVALUfu6VYhjcyEs=
Subject key identifier: 39:9C:F0:F4:BA:7E:75:E5:DA:10:A5:FB:B0:3D:51:E9:F5:BA:23:B8
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019A4F9943ABA41E989BEF1E44E9C9E89040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:35 +0000
Manifest this update: Tue 04 Nov 2025 16:00:35 +0000
Manifest next update: Wed 05 Nov 2025 16:00:35 +0000
Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: awuzZhBA0pmCHc1HIa9O3qRf7TEbSKvjonmlB4g2Eds=)
3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:43:ab:a4:1e:98:9b:ef:1e:44:e9:c9:e8:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Nov 4 16:00:35 2025 GMT
Not After : Nov 5 16:00:35 2025 GMT
Subject: CN=399cf0f4ba7e75e5da10a5fbb03d51e9f5ba23b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b1:3c:89:92:06:d0:4d:64:fc:2a:fc:b6:3b:
bc:46:c8:8e:d3:14:a1:49:de:b8:2d:67:12:08:82:
69:50:27:0c:07:f1:41:49:0f:05:82:59:f2:93:2b:
35:13:a1:aa:a8:37:77:e8:ce:a8:8b:98:d6:70:81:
75:08:6a:04:f1:c2:79:26:d4:3d:9a:f4:ec:6b:ad:
60:35:20:06:6f:9c:3e:12:32:ce:ee:c3:7e:ab:f9:
4e:20:cf:d4:7a:58:64:91:9e:a3:52:2e:59:75:2c:
e3:f3:cc:ce:04:02:61:69:9d:0b:75:64:0e:2c:14:
3e:3d:87:2d:82:f8:fd:9f:c2:be:34:44:4d:fa:67:
31:1a:bd:87:e2:45:11:72:ad:b8:23:4f:31:53:e2:
cf:fd:54:82:0b:ec:f0:df:1d:3f:f8:b0:ba:23:34:
71:fd:38:ad:bd:d7:36:e3:38:ac:45:2c:2c:6f:9c:
62:b3:22:1c:74:3c:9b:d4:59:8f:a1:06:0e:a8:92:
2a:05:c9:0c:b5:85:cb:9d:73:2a:26:60:9b:f3:46:
4d:e6:0b:46:e6:48:27:ce:57:a4:58:e3:c2:77:3f:
e5:92:06:af:2c:50:04:ea:8a:10:17:59:82:87:03:
4b:fc:b5:77:6a:a5:b3:6e:d1:9b:a2:5a:b8:93:af:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9C:F0:F4:BA:7E:75:E5:DA:10:A5:FB:B0:3D:51:E9:F5:BA:23:B8
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:00:94:61:54:75:60:43:11:53:dc:7b:86:97:48:b2:b4:c7:
26:81:a1:e1:e1:5f:2e:5e:fa:f3:2a:2e:7f:f7:cb:91:92:75:
85:17:74:12:c8:1c:25:59:ec:fa:89:4a:f6:ba:1f:b2:1c:71:
d1:99:99:29:24:98:5a:5d:48:ba:84:42:aa:05:db:fc:46:12:
2f:09:c6:46:88:c4:2d:9a:3b:b2:c9:38:e9:36:a6:d8:e7:ca:
1b:c1:90:59:1a:55:46:b1:c7:0c:08:f5:40:12:5e:3c:16:a1:
05:16:1d:b2:ac:b7:58:10:99:97:29:26:eb:3a:bf:37:dc:d2:
f3:2f:97:84:30:0b:94:e1:c8:f1:1c:fd:85:04:fb:1c:6b:05:
64:33:b2:01:81:58:3f:85:0a:fa:77:30:d1:d7:28:05:08:1c:
48:d6:51:4a:a9:99:ef:f2:76:16:71:07:49:8c:45:01:aa:e1:
73:8b:38:bd:9e:80:9e:d3:f9:6a:28:72:29:dc:48:cf:8e:49:
35:d4:71:8c:5a:9e:02:85:5b:c6:54:cc:4a:85:25:91:ab:a6:
a2:9d:21:8e:c8:d5:ff:91:c8:be:28:62:cf:54:ce:c3:19:4d:
53:ef:1a:6d:63:14:97:df:f3:cb:b3:83:8d:d0:dc:74:9d:03:
2c:c5:19:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:49 2025 by rpki-client