Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
File: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft (raw, json)
Hash identifier: ccf7CjIbovynJZSus/kx+fc72s3Xkob5Wp9A4SwwDxU=
Subject key identifier: 4B:C0:D1:2A:85:67:28:72:EA:05:BD:8A:9A:7B:C7:44:3E:DC:2B:BF
Authority key identifier: 28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
Certificate issuer: /CN=285feec87d1959340872f8f79831202f24c80c9e
Certificate serial: 019A4E4FA32D04A9635CF31F95A49EE33128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:33 +0000
Manifest this update: Tue 04 Nov 2025 10:00:33 +0000
Manifest next update: Wed 05 Nov 2025 10:00:33 +0000
Files and hashes: 1: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl (hash: vEkV/RPV0CniwW7Y+tN1Mim2+rv1BDya/2ssvxVipdQ=)
2: dufDt0AmSEl5MX84gmoizwQiTsk.roa (hash: aXEbp58hPoSuyC6IS1AxqUQLOo+BHH3jFCGl+xNSnf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a3:2d:04:a9:63:5c:f3:1f:95:a4:9e:e3:31:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285feec87d1959340872f8f79831202f24c80c9e
Validity
Not Before: Nov 4 10:00:33 2025 GMT
Not After : Nov 5 10:00:33 2025 GMT
Subject: CN=4bc0d12a85672872ea05bd8a9a7bc7443edc2bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:fa:b1:f0:66:69:ec:18:0d:e5:25:87:4d:
4b:28:6e:6b:bc:85:37:0a:c0:16:11:b7:d3:19:51:
8d:82:fe:43:0d:4a:76:e9:c2:5e:7b:42:bd:1a:f9:
2f:e9:c6:95:8e:6b:be:39:6b:49:e1:96:0f:76:77:
9c:5d:d4:55:e2:31:33:29:95:fa:99:c5:33:50:5c:
12:66:ec:56:13:0e:d8:40:57:2d:0c:bc:7f:7c:1d:
36:fc:66:cf:f5:8a:87:d8:60:4f:64:6d:ec:17:ef:
7a:e4:b8:9a:ac:eb:b2:b5:bc:6d:d2:0e:89:6c:61:
d0:50:fc:b7:a4:10:2d:6f:35:89:46:55:fd:9b:3a:
12:b9:4e:f8:9d:e3:ea:11:66:7e:d3:b8:eb:b1:12:
c3:8b:be:db:1b:2d:94:58:10:d1:3f:75:5d:2d:f8:
56:48:5f:6b:9f:c8:2e:fa:2c:02:f7:0a:56:35:9a:
67:2b:18:18:2e:80:d9:c6:b1:47:5f:ea:03:06:a7:
17:c1:71:f9:7b:e0:4a:9a:3b:a7:ed:96:47:23:ff:
b2:06:3b:8d:3e:9e:2c:42:2c:80:2d:52:85:9e:7f:
34:02:fd:09:a5:cc:e0:36:74:20:c6:65:47:7e:64:
f3:eb:25:dc:a1:cd:f9:96:e0:e6:e2:66:90:b2:c6:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C0:D1:2A:85:67:28:72:EA:05:BD:8A:9A:7B:C7:44:3E:DC:2B:BF
X509v3 Authority Key Identifier:
keyid:28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:30:8b:22:40:e0:97:ed:09:be:3c:79:80:64:0f:02:4d:66:
ce:57:bc:33:fe:cc:aa:7e:2d:e5:40:1f:9f:1b:8f:b2:14:c4:
27:f6:7a:5e:60:92:80:e4:96:86:5c:b9:9a:6c:e2:e4:dc:bd:
88:0d:8b:dc:39:67:fc:90:c2:75:97:5e:8c:b1:b2:5d:41:05:
bf:04:1b:61:d3:99:bc:a0:44:66:2e:4b:d9:d9:a0:27:a0:e5:
3e:85:9f:4c:66:93:53:33:c1:7c:59:2f:55:e3:51:2f:f7:5e:
13:01:4a:52:55:16:86:d5:e4:d4:26:47:39:01:00:21:cc:50:
70:28:69:df:be:e9:7b:63:20:af:12:4e:85:57:f3:40:68:2e:
e9:33:4b:e9:2f:a3:f0:41:94:63:2a:2d:79:a8:7a:c8:3f:7c:
7c:5a:81:62:c5:da:b8:32:65:fd:9b:c5:36:8d:54:38:35:75:
d1:6e:9e:dc:23:93:4f:94:39:d4:d4:2c:8d:82:a2:7e:c3:bc:
a4:43:f4:e2:ae:73:ae:39:2b:89:77:39:47:14:a8:52:fa:fa:
91:05:a8:2a:d0:fa:35:b0:25:2d:b3:d1:ad:6c:19:0d:8e:fb:
4e:4c:11:5e:d4:ee:5e:70:87:26:a9:54:cb:70:e1:d8:4f:41:
d6:1f:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:23 2025 by rpki-client