Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
File: kd3H2eAtRMa_jGNcHQcV9uicEBI.mft (raw, json)
Hash identifier: 44uZwflKxcruJi7l3MDS4YgM7zycQXSzFwpg7IMVVw4=
Subject key identifier: 74:D6:18:7C:87:60:9E:13:4E:6A:66:28:87:ED:3F:9A:E5:0A:32:41
Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
Certificate issuer: /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Certificate serial: 0199FE0FF2A72D8DE6949854513BCD49066F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
Manifest number: 9E
Signing time: Sun 19 Oct 2025 20:01:21 +0000
Manifest this update: Sun 19 Oct 2025 20:01:21 +0000
Manifest next update: Mon 20 Oct 2025 20:01:21 +0000
Files and hashes: 1: kd3H2eAtRMa_jGNcHQcV9uicEBI.crl (hash: Xqw+9PgAw6+v+sbktKCRu3WmydPTPIeafXMlKzolo74=)
2: s5q2oTWE63BKKJHezuXxV23_1ao.roa (hash: kxGqoLV/rWB0wj/sYCOZiA+1BQk6TjqEiRvVL8/Fnps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f2:a7:2d:8d:e6:94:98:54:51:3b:cd:49:06:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Validity
Not Before: Oct 19 20:01:21 2025 GMT
Not After : Oct 20 20:01:21 2025 GMT
Subject: CN=74d6187c87609e134e6a662887ed3f9ae50a3241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:4d:61:3b:eb:2e:80:8f:e1:8f:a2:4b:19:
0f:50:85:ba:ae:8a:d6:2d:95:04:dc:36:db:a8:26:
78:3d:d8:ab:58:83:af:2d:04:a0:68:f0:1d:c6:46:
7b:db:af:cf:a0:2a:fc:c5:ff:b2:41:3f:e1:ff:bb:
1f:94:31:c6:c9:10:77:77:0e:3b:7e:32:32:40:21:
c7:36:01:36:3b:ea:a4:94:49:e9:c9:6d:d3:18:e0:
ef:5b:6f:7b:7e:72:6e:ba:f6:84:62:68:7a:a5:d2:
b6:ab:22:54:ab:9a:9b:59:c0:e6:3d:7a:2b:fc:20:
bd:06:26:d3:d2:06:28:f3:7e:35:97:88:73:0a:70:
ab:a1:4b:03:73:a5:cc:06:00:f6:f2:29:22:e9:0f:
35:a2:b5:a4:50:5c:14:5a:37:43:7c:2a:ca:e2:6d:
7a:60:90:0f:cc:2e:4a:5f:cc:73:48:ec:76:ba:9b:
24:b6:38:10:d9:42:58:2f:c4:87:5a:af:03:91:2a:
ad:f7:18:5a:c9:13:45:e8:8a:7c:b8:05:ed:17:d0:
2f:bb:ae:3f:9b:32:cb:8c:3f:d4:1e:1d:51:4a:c1:
75:f1:78:e0:80:fc:ab:9e:62:64:8d:85:ce:e3:cf:
76:5e:37:8d:62:b2:de:d0:2a:28:f8:b2:8a:cb:61:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D6:18:7C:87:60:9E:13:4E:6A:66:28:87:ED:3F:9A:E5:0A:32:41
X509v3 Authority Key Identifier:
keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f3:67:a0:87:c9:e6:8b:a4:d7:7f:e7:0e:fc:23:ad:ce:e4:
91:58:a9:06:ef:b6:9f:80:40:ce:5c:b5:31:22:dc:fd:af:78:
39:25:c4:ae:76:32:1d:a6:2c:87:d6:6c:fe:51:ce:43:26:2c:
09:36:1c:47:33:47:20:af:27:26:b1:11:60:5e:9b:f1:77:6d:
9a:90:26:84:9c:72:ed:80:86:1c:31:15:63:4b:bb:68:8e:4f:
08:9f:1a:92:7f:72:ca:09:49:f2:b4:00:8a:9c:d1:a2:9b:6a:
2b:28:7d:42:9a:c9:79:cf:cc:e5:75:4b:c5:2d:44:88:af:df:
11:7f:f1:dc:f8:fb:29:22:aa:a2:34:00:61:bb:10:83:13:44:
8b:c4:be:2b:7e:c3:b5:b0:21:ae:e8:9d:dd:12:c8:70:10:2a:
51:c1:5a:31:ff:cd:ba:eb:a8:ff:17:89:a5:cb:2b:22:23:a6:
55:37:c9:7c:c5:bc:b1:dd:ee:8c:bc:2a:0f:ac:ca:37:81:ad:
d3:48:43:85:e4:0c:d9:13:f2:e5:c1:70:4d:68:36:0f:03:ba:
31:d7:cc:de:79:cb:50:b1:0f:1d:85:b6:80:35:c5:d1:4d:0a:
e5:e9:07:60:9b:f1:50:3b:a2:e9:9c:c2:dd:6f:ed:eb:6b:1b:
b4:fa:84:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:10 2025 by rpki-client