Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: 5tt7ewcx3AaKP7E29ZWBLl/BVjPFRFT0f7n70wmbqpE=
Subject key identifier: 91:53:9A:D3:45:02:E6:82:26:A9:3B:E7:66:56:8B:43:3F:F6:E0:68
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 0199FD3462164CF822CA1BE07B0ED3BC3C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: yil/XJSH12xW54wmlmB1gicfy62hr13dfRKvsIABw7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:62:16:4c:f8:22:ca:1b:e0:7b:0e:d3:bc:3c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=91539ad34502e68226a93be766568b433ff6e068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:73:8f:ca:b1:07:a2:81:32:06:c7:b9:e1:
84:18:5c:82:ba:b0:af:59:c0:53:d7:73:03:f4:ef:
d4:48:6c:ef:15:8b:4e:b7:54:df:54:1f:e2:3b:d8:
cb:d4:18:7b:22:1d:20:6a:84:fe:9c:aa:8e:79:a9:
38:e1:4e:83:93:39:e3:60:b7:21:a3:d3:3d:30:63:
3a:03:4c:74:5e:5e:0b:1a:4e:ca:81:a3:76:f1:c0:
ae:ef:eb:0f:b5:c6:41:b7:66:5c:4a:f4:81:1c:3b:
77:7b:a4:bc:ee:08:4d:b2:d2:cf:91:4c:6b:3f:06:
8d:d3:79:f2:b2:55:75:29:33:55:97:13:20:1b:96:
96:79:84:42:79:a7:ee:0e:09:74:e4:91:c4:26:ba:
ed:31:76:78:0a:c5:78:ca:63:8c:ab:62:34:db:36:
5c:28:7b:d0:64:cd:95:2a:3c:b9:0d:77:f4:a6:03:
c9:d4:6e:9d:48:4b:b6:09:18:4a:81:1d:7f:8b:c0:
7a:10:03:ae:46:66:fa:5c:69:cd:1a:25:db:5b:c8:
b3:e8:b3:b8:e5:ad:36:7a:da:c2:57:c1:f1:01:47:
b8:36:f8:27:23:ad:4f:cd:de:6e:5d:7f:37:20:4b:
b9:2c:85:9f:60:fc:6f:10:08:b2:a2:7d:e9:4c:27:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:53:9A:D3:45:02:E6:82:26:A9:3B:E7:66:56:8B:43:3F:F6:E0:68
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:19:55:71:64:3d:70:84:6c:85:18:76:72:05:c5:4d:0c:6e:
54:19:1c:3d:ad:0c:61:4d:39:e6:3f:b8:a8:03:b1:84:1d:65:
8b:b3:f6:a4:97:28:2b:eb:91:90:3e:a3:c9:16:86:ae:0c:ef:
70:f8:fb:3f:23:d6:59:ce:81:99:3d:d0:ab:ee:72:5a:69:c3:
1e:15:af:56:8d:1c:ee:6a:3d:57:57:ad:d7:5f:7e:d5:86:20:
85:a8:66:ad:d7:81:d8:39:ef:73:6d:a9:5d:c8:76:f3:ba:c6:
ab:ab:2f:98:ff:f7:49:70:25:cb:a0:40:4d:ed:b6:7a:8a:12:
9c:63:75:34:32:e8:3a:21:39:2d:76:4b:d0:bd:c0:22:2b:0b:
40:ba:77:ec:f9:84:bd:d1:a5:5e:4a:94:d9:7b:31:68:59:2a:
23:b7:59:5a:84:80:cc:d0:95:ab:82:f8:2e:be:55:6b:7c:df:
df:8b:5f:12:80:47:c8:4b:04:59:31:fa:75:c6:2e:81:97:fa:
26:8a:47:84:6f:92:4a:34:01:af:15:0a:5d:eb:fd:21:f2:7e:
68:0a:c7:bd:79:1e:1f:65:41:30:52:93:17:9c:62:eb:d1:20:
3d:00:00:71:ae:5e:84:31:4d:ce:6c:de:dc:97:84:3f:1e:02:
90:50:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:29 2025 by rpki-client