Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: 8IvLAALuu5pA1oS6MBwlWb331BJVN+54v6KLITgQkPc=
Subject key identifier: 1D:A3:1E:94:61:17:69:7B:9F:DE:11:BE:C2:AE:57:42:3A:3E:78:C4
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 0199FB7CB488F47AE59F9AB1DBC551522B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 15BA
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: VL2jUaliaUfY5Ftu0/LuIce1cp6U1v1rE/NXXEkAQYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b4:88:f4:7a:e5:9f:9a:b1:db:c5:51:52:2b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=1da31e946117697b9fde11bec2ae57423a3e78c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:9a:b5:86:08:98:1d:79:02:7f:be:5d:f3:
d5:bd:89:5f:db:d3:7f:a8:5d:84:c5:16:bc:9a:26:
74:d8:80:3c:85:de:69:1d:a8:8a:30:33:95:f0:70:
95:81:9c:55:d0:a7:ac:de:20:14:43:ca:38:09:92:
62:bc:88:d8:c9:f1:8c:73:3d:f7:a8:6a:fb:04:1f:
49:59:72:d4:e8:5c:2a:15:86:38:b2:ac:21:bc:0d:
55:f1:99:8a:ec:c3:88:f6:af:a1:74:cd:9a:23:14:
bc:e4:d4:04:22:94:94:37:d8:a0:a5:b1:ce:aa:b6:
c0:c8:a4:b6:b6:79:a8:52:28:fa:0e:92:1f:fc:a0:
f0:1d:6f:98:f0:b0:4a:d4:3e:da:b0:d6:fe:23:67:
32:d4:3a:5c:e1:d5:33:6f:52:07:c4:2e:2b:7c:0c:
5e:59:73:d8:9c:bd:3f:f2:2d:51:13:c0:86:08:b8:
52:fe:3d:f8:66:65:0b:e0:e5:9f:0a:09:30:61:f2:
4d:2f:4a:bc:7e:b7:62:c7:b9:8b:29:d7:fc:cf:53:
78:0a:56:9f:34:e1:b3:7a:08:f0:55:46:38:42:03:
ba:02:f5:1c:ed:40:1f:9f:ce:83:3c:79:62:e6:c8:
dc:ff:7b:40:8c:77:c5:61:55:41:a9:08:ae:e3:d1:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A3:1E:94:61:17:69:7B:9F:DE:11:BE:C2:AE:57:42:3A:3E:78:C4
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d9:0e:2a:be:ca:4f:cc:20:59:74:85:43:4e:93:d1:4c:21:
54:d2:d4:66:ef:cd:1b:98:b6:2f:10:f6:d7:51:99:4e:fe:19:
d1:f2:35:cd:2b:99:1d:1c:2c:2e:84:12:c6:56:0a:f3:f1:b1:
6b:25:12:69:b2:fe:cf:da:ea:73:7d:39:ed:30:e8:70:7a:45:
d7:a1:1f:b1:77:bf:a4:64:cf:85:84:19:c3:f8:e6:24:e2:1e:
85:7d:f9:d5:ae:aa:45:38:2d:87:ba:37:c1:43:77:e8:74:76:
86:f8:fe:24:8c:6a:c9:14:bf:be:78:81:06:a5:6b:b7:14:63:
8f:b0:93:9e:ad:69:21:e4:b0:7f:44:6f:18:99:0c:b2:8f:46:
4b:36:87:dc:68:2e:6a:65:72:19:aa:69:a0:e6:4c:98:aa:de:
e3:83:11:ff:6e:bf:df:2e:4b:1a:70:dd:12:fa:29:16:79:de:
3c:0f:9a:95:15:51:4a:ca:18:25:df:00:0d:1b:de:7c:43:eb:
52:6d:34:f5:20:3b:54:6a:17:d6:54:64:c3:6e:ae:d3:10:64:
d2:86:1f:c1:55:01:53:70:fd:ea:6f:f7:fb:d7:39:50:69:2f:
36:44:be:68:8d:61:a6:11:70:ca:f5:80:41:79:56:56:b6:1d:
eb:42:26:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:42 2025 by rpki-client