Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: cLS3KhnFqAoqrmy2EzJR2DHyMx9spqDItuTWwP/C5z4=
Subject key identifier: BA:19:43:A0:23:B7:91:AC:02:68:B1:BC:54:79:EF:73:AC:9D:5A:B8
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 019A4F2B3FD151326EA5E188C8FE1BC71769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:25 +0000
Manifest this update: Tue 04 Nov 2025 14:00:25 +0000
Manifest next update: Wed 05 Nov 2025 14:00:25 +0000
Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=)
2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: 2wx+XmtsSlljJYGj8h7dcE9uLjGIcEewjQKzf9rWnmA=)
3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=)
4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=)
5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=)
6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=)
7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=)
8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=)
9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:3f:d1:51:32:6e:a5:e1:88:c8:fe:1b:c7:17:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Nov 4 14:00:25 2025 GMT
Not After : Nov 5 14:00:25 2025 GMT
Subject: CN=ba1943a023b791ac0268b1bc5479ef73ac9d5ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:f1:35:38:42:bf:66:c4:21:ea:83:e0:0a:
76:1d:ae:7a:ce:fa:71:cc:75:5b:99:96:51:6b:41:
71:b8:71:79:a3:48:44:a8:4e:ab:c3:6a:90:f5:7c:
de:ae:1a:40:bd:c2:8f:25:d9:58:c0:3c:e6:df:3e:
ff:93:3b:e7:96:39:6c:fc:77:4b:05:e6:05:b0:5f:
05:58:59:86:a0:b6:70:01:ca:c5:87:0d:cb:a6:a5:
3e:6b:96:2a:06:ce:36:c1:9c:3e:a5:b3:60:50:d8:
1c:b2:54:17:80:ab:8f:13:bb:62:df:44:08:a0:4a:
20:43:2c:a4:7f:1e:f9:3a:50:ab:52:2d:6d:5d:50:
fb:1d:3c:d4:75:85:15:b4:1a:6f:56:33:13:78:df:
bb:33:77:3c:d1:fe:c2:ab:62:ac:b8:c5:82:da:08:
ba:b5:b1:f2:d2:d9:6a:52:9d:28:f6:d9:96:03:57:
c1:35:4f:62:e8:81:9a:c3:9a:d8:33:71:fb:d9:b5:
8a:05:a9:86:36:ca:4e:4f:56:72:6d:92:2a:53:a7:
94:bf:b8:47:55:5a:00:07:b4:a5:f4:94:2b:63:4f:
9d:5d:8f:3d:90:84:ed:2b:40:38:f9:f4:8f:41:28:
74:67:12:5e:a2:89:b8:ef:63:5c:a9:ad:70:57:82:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:43:A0:23:B7:91:AC:02:68:B1:BC:54:79:EF:73:AC:9D:5A:B8
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:df:a5:ad:5e:35:f6:29:2f:54:e6:03:8a:4e:01:8f:94:6c:
a7:f7:9b:06:96:84:80:22:a0:9d:ed:cf:69:8d:8f:fd:0a:ce:
9d:a1:75:da:ad:16:bc:c8:d9:9a:d4:04:78:1b:fb:48:3f:72:
19:24:e3:08:a8:f4:8b:27:56:6a:e9:1e:81:61:a9:b9:d9:a2:
87:15:83:da:45:fa:7d:4c:89:f6:bc:5b:99:44:d7:37:85:d0:
2c:25:34:90:17:d4:3e:b6:20:26:1a:be:3a:3f:cd:db:74:04:
f1:9d:10:03:68:d3:71:7b:b6:2d:05:dd:ac:6e:fa:d8:57:b7:
2a:71:4d:10:6a:d0:b0:6b:91:b3:9c:7a:84:ff:74:41:58:81:
63:2f:b9:4e:ca:84:be:2c:f1:a7:83:be:ce:37:75:62:c0:80:
a6:97:43:25:aa:c6:1c:d5:11:95:4e:a5:8f:52:29:5f:21:07:
38:cb:9b:17:47:97:77:89:d8:76:97:4b:fa:9f:86:0b:b8:bf:
22:ad:d1:64:05:34:28:0f:af:ca:76:85:c4:76:34:67:81:9a:
43:eb:e7:a2:26:e8:6e:47:9a:bc:63:f4:53:ff:d2:a7:12:19:
b5:e1:15:3d:cf:02:5e:8b:65:d4:12:12:68:90:f9:47:8b:85:
5c:1e:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:15 2025 by rpki-client