Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier: 0I3RPG8kyvC/z2cbEBge+v9OA8peZATvFUHZFGVnhP8=
Subject key identifier: 15:60:F0:A9:48:3F:13:8D:6A:A1:7F:A6:63:6A:85:3C:2A:47:C3:E7
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 019A4D739D2E82874452E7988147108ED70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 06:00:13 +0000
Manifest this update: Tue 04 Nov 2025 06:00:13 +0000
Manifest next update: Wed 05 Nov 2025 06:00:13 +0000
Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: eLBvtDhngBvyE7DmZgWOUw6YEbSPED4SWOFEtPdW5Fk=)
2: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (hash: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:9d:2e:82:87:44:52:e7:98:81:47:10:8e:d7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Nov 4 06:00:13 2025 GMT
Not After : Nov 5 06:00:13 2025 GMT
Subject: CN=1560f0a9483f138d6aa17fa6636a853c2a47c3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:05:12:49:4a:46:de:06:89:45:f9:54:bb:
14:fd:69:fc:61:cd:8c:b5:a9:1f:6b:59:d6:33:72:
17:77:21:48:41:c6:8a:bc:d9:e0:88:7c:27:cf:aa:
53:ac:8c:a6:7c:1f:d0:8a:f6:db:dc:bb:2b:6d:1c:
75:81:11:33:9c:c2:ef:62:b9:a9:19:bd:14:3a:ce:
ee:e1:95:ec:c1:a6:4d:37:4f:84:4a:ea:14:3e:cb:
ef:b1:46:06:e7:f8:5c:79:0c:42:0f:e1:e7:f3:b1:
8d:57:89:d6:7d:a7:51:2a:24:23:91:51:09:cb:14:
83:4d:d0:35:25:c1:d8:db:7d:e7:78:0f:5a:4e:ae:
76:b6:56:8b:e7:30:a1:1d:de:e4:92:82:8f:ef:f2:
42:db:f4:c3:aa:f9:7c:b4:27:ef:9d:66:3e:87:f8:
4e:61:3a:a3:24:68:a9:82:46:fc:a3:db:78:fe:44:
81:a9:9c:0c:a9:57:1f:f8:e6:fc:69:26:81:7f:e4:
29:e3:db:2d:f3:d9:b0:57:aa:ec:0f:cf:ff:85:a8:
12:c5:cc:ca:de:14:32:5c:1f:ca:22:4d:11:02:0a:
d2:99:44:9b:38:2b:dc:62:b2:e4:24:84:2d:ef:8b:
71:d7:1d:e5:1c:c3:96:ba:f8:f7:dd:d0:d7:97:8c:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:60:F0:A9:48:3F:13:8D:6A:A1:7F:A6:63:6A:85:3C:2A:47:C3:E7
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a8:3c:03:86:23:f4:d5:c4:94:d2:d3:f0:b1:5c:f6:dd:94:
90:56:e4:da:83:5b:2d:83:67:be:15:0d:46:64:50:1f:af:45:
f6:36:7d:ef:17:73:3a:3a:bf:52:3d:e3:01:26:da:67:4f:04:
68:b3:11:39:69:48:53:41:f4:25:98:8f:63:e4:fc:eb:07:fc:
1d:96:01:b0:22:4a:0a:b1:fe:8f:b6:3d:ce:62:11:b4:bb:5c:
a8:87:cd:ee:5a:d8:38:89:60:34:ec:5d:5d:8c:09:4a:71:6e:
29:23:0b:83:ab:b3:30:a5:aa:87:91:2b:e5:34:66:1e:1e:19:
ec:b4:3f:fb:de:87:b9:f4:32:34:9c:42:f8:d4:f6:9b:95:89:
b7:84:1a:aa:3c:bd:1c:d2:9f:2c:e5:1c:28:d4:d3:ad:22:c4:
68:06:d1:d9:f8:ea:d4:8a:0b:17:a9:6e:e4:8f:39:d9:f9:e3:
8a:b4:04:9d:b2:58:3a:b8:54:ac:2f:3f:ec:be:80:e1:78:d1:
a5:26:cd:fb:41:4c:5f:74:2a:4e:3a:a7:82:8f:41:cc:78:29:
cf:72:bf:34:34:de:0c:40:d0:27:83:1c:d0:d9:fe:56:18:e2:
b3:b2:53:a7:06:fd:3c:19:17:2e:91:78:e5:43:0f:f7:14:96:
5d:b6:1b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:47 2025 by rpki-client