Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: 9/p41DdVcMGfbuxrrKLVyVjD+Uos2dRI8yrVi5deJD4=
Subject key identifier: 96:04:94:C0:1F:87:1C:FC:45:68:92:AF:E0:8C:34:40:16:28:B2:3A
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 019A51F580196977CCB8613D8BC1461582F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 0169
Signing time: Wed 05 Nov 2025 03:00:34 +0000
Manifest this update: Wed 05 Nov 2025 03:00:34 +0000
Manifest next update: Thu 06 Nov 2025 03:00:34 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: WJ5MVBclD7r1iy+prw+fh2e8/zf1a77/NBJ5MErkuYI=)
2: lvisyME0LlQajyGS5pMcYDKFR08.roa (hash: 31DzKjH8PvmlicGQvfn7fIzRcBCmYUXLsghB5MjrccU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:80:19:69:77:cc:b8:61:3d:8b:c1:46:15:82:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Nov 5 03:00:34 2025 GMT
Not After : Nov 6 03:00:34 2025 GMT
Subject: CN=960494c01f871cfc456892afe08c34401628b23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:ee:e9:c6:58:d2:fd:59:62:35:72:7a:d9:
ca:c0:43:d7:89:0f:c2:47:fb:4d:46:32:87:46:aa:
40:13:ef:4d:49:44:7e:47:41:03:62:ef:b4:39:ef:
86:55:a4:f8:7d:f2:1d:8d:cd:a5:d6:73:41:84:4a:
75:7b:b0:a2:eb:b8:07:f5:56:fd:f3:15:08:2c:09:
c6:fa:8a:4d:43:1e:79:2d:f3:6d:b7:94:21:82:7a:
79:db:44:91:6e:a3:49:5d:d9:09:90:81:82:81:c4:
59:e3:53:c1:81:8d:5b:32:2f:a3:57:63:e0:ab:be:
1a:87:d4:30:f1:97:42:6c:10:07:3b:e3:41:51:c2:
dc:f0:83:b3:1a:be:cd:dd:45:87:ce:3f:65:1d:3a:
3b:96:c4:48:3d:50:10:56:ea:54:38:a6:32:95:6f:
57:5d:8b:e6:30:14:e2:e4:34:b1:91:8b:4d:52:03:
0a:36:d9:df:41:da:2e:89:b2:a9:ba:7e:f2:6d:94:
97:ac:a8:68:98:e8:09:e7:33:4b:2c:63:b2:fa:69:
b5:5b:aa:91:b7:4d:0e:7f:b7:27:d9:ca:10:04:80:
d7:27:48:d7:b4:9d:ee:c0:b8:68:f6:5a:3c:9b:2b:
e4:56:b4:66:87:11:3c:7e:de:60:8b:12:d6:7e:2c:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:04:94:C0:1F:87:1C:FC:45:68:92:AF:E0:8C:34:40:16:28:B2:3A
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b7:62:2f:b2:c3:40:b6:ef:7c:87:24:cd:32:8e:5f:0b:f0:
3a:34:06:dd:ff:06:2b:ce:99:8a:8a:59:57:c7:3f:13:54:28:
47:dd:9c:cc:68:a4:a5:ed:6a:c3:df:d8:f4:8e:1e:b3:63:db:
7c:29:8e:cc:50:9f:f2:9b:a0:90:40:1c:32:61:36:ec:3c:9d:
6b:3a:5a:17:9b:e5:13:f6:8e:3e:df:48:bf:29:0a:c5:9e:c2:
fd:5e:67:bc:3b:7f:41:11:91:9b:45:85:de:21:eb:55:e3:50:
98:32:14:58:80:4c:07:bd:b0:54:ed:85:db:03:af:87:9a:99:
ec:4b:77:b2:4d:aa:3a:66:8f:a3:8d:c5:9c:11:a5:35:bc:7d:
a6:e7:20:e7:90:71:d1:a3:b2:75:64:59:86:bc:65:b1:f0:72:
57:3e:10:cb:47:6c:09:f3:e6:88:25:2f:c8:dd:52:c2:d4:42:
ba:ec:f7:9a:33:d7:26:da:0e:97:fe:51:6e:8a:ea:ab:5f:5e:
b1:8e:03:a4:d5:fa:7d:eb:36:ff:da:5c:eb:a7:b0:88:70:33:
cc:fe:7f:f7:6e:27:43:ba:b2:d0:f4:4f:0d:b9:e8:b5:20:a2:
55:91:da:b6:2f:1e:27:fe:83:f0:a5:e3:db:8e:98:f7:4b:6b:
3b:10:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:44:02 2025 by rpki-client