Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft (raw, json)
Hash identifier: Sxk6q6irKwU6YtZunjKnrc/mz0szBKLOQdh6sIhEG4E=
Subject key identifier: 81:CB:96:8C:F8:74:47:0F:CF:7C:4C:4D:D9:4F:E1:9B:65:B2:61:87
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial: 0199FEEBB0EF42968A4BBDAC281B050E5CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
Manifest number: 164B
Signing time: Mon 20 Oct 2025 00:01:22 +0000
Manifest this update: Mon 20 Oct 2025 00:01:22 +0000
Manifest next update: Tue 21 Oct 2025 00:01:22 +0000
Files and hashes: 1: i0znYyDIsk78QzCDDCTg60lK9ig.roa (hash: aeDo1wq5VczgcfrDX0J+4eB6IcjwVsRwiJM6vkXROSk=)
2: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl (hash: QdijI0v9GDjH3SiytrzfIdPBS+i1BbR8aMPiahBOTbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b0:ef:42:96:8a:4b:bd:ac:28:1b:05:0e:5c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
Validity
Not Before: Oct 20 00:01:22 2025 GMT
Not After : Oct 21 00:01:22 2025 GMT
Subject: CN=81cb968cf874470fcf7c4c4dd94fe19b65b26187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:3d:8f:29:5f:da:d9:0b:48:b0:1b:7a:f5:
af:32:56:31:84:49:98:1b:62:36:63:29:15:fe:3e:
4e:31:dc:87:86:24:6c:7b:c2:f8:d6:bc:eb:0a:a2:
b2:20:9a:8b:61:2d:00:dd:d6:c8:5a:25:52:b2:83:
77:16:c1:fa:7d:a9:b7:42:fb:42:23:15:96:cf:cf:
8b:8c:d4:95:60:c9:5b:6a:d2:74:5e:5f:54:5d:a4:
3f:ef:4f:7d:fc:02:3d:13:c8:f5:eb:d3:c1:5b:ea:
0c:ad:cf:82:9b:41:5b:1d:b5:87:d3:fa:b5:03:f9:
fa:47:b2:f9:2f:77:b1:05:5f:87:c8:7d:72:60:19:
5f:76:cb:c8:d8:22:3f:15:9e:99:24:62:53:c4:53:
5f:e9:d1:b4:5f:b4:94:d6:c8:f6:e0:27:84:10:77:
07:15:15:fd:91:4a:03:f2:9b:03:59:26:e0:01:73:
48:73:54:42:16:25:63:b6:2f:fd:3f:77:39:ce:59:
fe:bb:78:40:0b:3c:30:8e:c8:29:1d:09:0e:e9:00:
3b:f5:b3:d3:e8:05:57:eb:f3:79:b8:9e:fb:2d:c2:
aa:5e:8c:6f:d3:4b:f4:cb:cf:45:1a:ed:ee:d5:14:
7b:25:23:6a:95:7b:0a:43:6c:df:44:31:4b:2c:44:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CB:96:8C:F8:74:47:0F:CF:7C:4C:4D:D9:4F:E1:9B:65:B2:61:87
X509v3 Authority Key Identifier:
keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:bb:04:0c:be:d2:77:e0:92:a0:aa:90:5d:37:15:5f:6a:d2:
ea:92:43:01:7f:2f:43:a6:38:29:24:c1:c6:f7:86:d1:71:0b:
be:96:92:9c:72:76:29:a5:de:42:5d:30:67:a0:32:93:36:46:
95:8f:9b:c5:02:5b:c5:17:d3:9f:bf:24:4a:d6:5a:37:15:ba:
85:d9:d9:e9:ce:08:62:51:4c:cd:01:24:29:34:52:ef:a3:77:
b5:ec:60:a3:6d:e9:e9:30:ab:20:27:36:b8:da:1b:a5:5c:28:
d4:d5:59:30:db:06:72:dc:10:31:a5:68:d1:c6:6d:a6:c2:97:
81:ea:ab:4e:ca:08:f9:e5:d2:07:bb:04:da:91:21:d0:71:55:
a5:75:42:eb:c4:fc:01:d4:a8:ed:61:b0:c8:20:95:e3:6a:98:
ab:b2:35:c6:fa:55:63:57:24:1c:94:40:ad:e8:10:bc:dc:f9:
df:53:a1:3b:d2:20:32:67:0e:68:a6:7d:a7:62:b0:57:6c:2c:
42:07:18:20:aa:0d:33:d8:55:e0:11:c7:ab:f3:b6:52:ad:b2:
81:ed:7e:d9:06:55:a9:28:e8:60:ec:25:71:19:a7:73:2f:93:
27:6a:f6:03:e6:e8:2d:47:bc:c6:ff:70:07:de:43:9a:20:ca:
43:64:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:23:08 2025 by rpki-client