Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
File: KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json)
Hash identifier: 6NElJ+23fyCVfnxtt3KTgvSwlnCdt3vi5XeAnxe0Jnc=
Subject key identifier: 45:3A:9E:87:E4:34:B1:25:B5:0E:DE:52:0D:68:6F:7A:D2:6D:16:B0
Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Certificate serial: 0199FB7C9BCFD61C986EE7FAD262028BB258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: CWGhSuH7Prq7nBeXCwJSQ8R7MLY.roa (hash: kJD3A5DYARZjtb9aiv1WyX0nnGUXwOPoDx5EHff3F+I=)
2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: TZJSvviAxLma14so7ji2oYRsTe5J4ls3mkbrum/cX0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9b:cf:d6:1c:98:6e:e7:fa:d2:62:02:8b:b2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=453a9e87e434b125b50ede520d686f7ad26d16b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:8f:a3:be:f3:c3:96:37:6b:88:d6:14:fd:
fd:1e:98:d9:17:70:1c:27:e7:b3:45:5b:f6:84:5f:
1b:65:a5:86:c8:76:a5:5f:0a:30:51:49:16:59:2e:
f1:7c:84:56:9d:5d:51:14:95:19:c8:37:db:ac:2e:
0c:00:79:d2:53:c5:71:9e:70:d2:2e:a8:71:47:7e:
ff:fc:8e:45:72:05:b6:b0:91:e5:d1:e4:21:38:7a:
63:1c:f4:62:61:5e:f4:d6:b0:e2:81:28:7a:1c:76:
77:5b:1c:dd:af:7e:fd:2d:91:72:47:72:f3:02:7b:
d2:ec:a0:6b:14:95:63:02:4e:4b:db:9e:ea:31:b8:
12:15:de:10:f2:11:0c:4e:0e:55:3e:3b:ec:3e:68:
55:be:c1:62:fb:df:81:4d:15:ba:d3:73:32:b4:6b:
76:ad:f8:0b:f5:21:ed:97:27:fa:45:86:5a:04:a8:
7f:18:79:e8:e9:cb:27:d0:19:34:be:de:3c:e7:8d:
f2:6d:e5:7f:1b:17:33:b1:25:57:9d:34:3d:6a:a5:
14:7f:fd:b8:1f:05:1d:2e:a4:9d:d3:69:90:72:3a:
02:6e:8b:2e:8e:79:c4:d1:a6:6f:f6:ac:d8:d3:95:
95:93:33:a0:97:3d:29:01:40:38:83:00:28:ea:15:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3A:9E:87:E4:34:B1:25:B5:0E:DE:52:0D:68:6F:7A:D2:6D:16:B0
X509v3 Authority Key Identifier:
keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c3:14:8a:e0:56:d6:8a:63:06:e4:e6:47:c5:54:de:42:8d:
24:f6:c6:70:1a:d2:5e:b3:88:a7:22:3c:dc:eb:4a:be:c2:99:
af:8b:a2:2b:00:ec:b8:89:95:ac:b7:e4:7d:d3:ca:2e:79:a5:
67:8d:de:21:ec:19:a6:14:96:81:07:18:37:f7:6a:22:14:4e:
3d:12:13:5b:39:78:b8:08:2b:bc:dd:c6:fc:f9:83:56:5b:e6:
c9:62:73:be:be:cf:3e:6f:bc:a5:b8:20:73:ae:38:cb:fc:ae:
67:ab:4b:db:91:00:9e:95:41:5f:67:d0:f9:60:97:c9:40:8f:
cd:e1:40:22:ce:08:6c:25:63:6f:85:89:76:7f:be:b1:d3:73:
3a:92:f4:5d:c7:fa:63:85:9a:3b:96:ce:5b:3d:5c:86:73:84:
e5:80:d4:05:b5:0f:0d:90:73:63:54:83:aa:2c:73:a6:b3:4b:
49:3e:c1:57:3a:1c:45:e4:6c:63:11:fb:8f:a0:a2:89:b8:82:
87:f2:57:b9:e2:29:bc:5d:3f:84:78:2e:b3:9d:f5:56:02:d4:
ac:cc:96:98:c7:a3:c2:83:37:c5:88:86:a4:0e:52:0b:95:7b:
9a:0d:6a:79:36:b0:42:24:07:ad:81:34:e3:ec:6d:9a:40:00:
eb:1d:37:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:48 2025 by rpki-client