Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: 0tKSLT5zOffyvts5sXwfJhSJYAxJmKNaH8N/ZYgWOuU=
Subject key identifier: 89:04:F7:06:2B:10:5E:54:CF:BC:62:16:E6:BC:53:9B:F7:2C:D9:B3
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 0199FCFD83C6FEA2FB6B3ACCFDADA86B2958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=)
2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: X4aaLLBW7bxc0qUwdhuyn/beZllqCFdoGj4bLwlR3CY=)
3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:83:c6:fe:a2:fb:6b:3a:cc:fd:ad:a8:6b:29:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=8904f7062b105e54cfbc6216e6bc539bf72cd9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:77:db:da:a8:91:c7:25:6d:80:66:53:1e:
d9:14:d7:17:1d:47:9b:07:7c:d5:04:62:4b:e7:9c:
36:75:fc:5e:d0:77:da:9a:79:e1:df:ef:3b:c9:a1:
4d:13:33:02:27:ad:74:a6:94:10:93:09:92:5d:0a:
7e:1f:fc:80:d8:ba:de:05:ea:0c:eb:25:5b:3c:33:
4d:c4:14:c0:d2:cd:89:f1:49:b7:f6:14:20:98:87:
e3:17:c9:59:62:92:64:fa:4e:48:d7:e4:a1:ba:2b:
25:3f:0c:f8:2a:0a:93:ca:e2:d7:d0:7a:dc:5f:a3:
59:d6:22:f1:67:44:c1:8e:ee:f7:91:24:fd:25:a4:
17:dd:68:b2:8b:5d:f1:c6:0d:18:ad:f4:bf:0a:ca:
ef:2c:b5:cf:4a:e4:53:11:35:65:bc:24:1d:12:55:
46:c2:c1:8b:10:70:8a:83:28:fa:0f:eb:c9:81:d6:
67:55:c3:db:44:b6:d2:6b:e6:36:9d:67:16:05:1c:
69:d9:95:8f:40:1a:7c:59:23:22:c3:ce:5c:19:24:
2c:f4:f9:e2:a8:ab:6c:a0:7d:9f:32:31:51:87:5d:
e9:99:72:1c:13:71:26:cb:3f:23:f5:17:f9:75:4f:
bf:eb:3f:ae:bf:b1:8a:cd:2c:b3:91:54:83:8f:eb:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:04:F7:06:2B:10:5E:54:CF:BC:62:16:E6:BC:53:9B:F7:2C:D9:B3
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:62:40:77:db:e2:9a:76:9b:e6:3b:8d:4e:33:4d:4c:d8:54:
ee:2d:00:39:55:8f:86:eb:71:56:d0:d6:20:4d:45:cb:82:cc:
e9:9a:05:9e:7b:f4:e3:cb:50:f8:94:b0:77:eb:8d:71:75:c8:
e5:02:8e:d5:04:92:c2:bf:8f:c1:52:11:3b:60:85:e3:3b:8c:
89:59:f9:db:a9:4c:71:67:38:78:ca:31:f8:f4:69:ec:b9:73:
30:0a:7a:23:27:4e:aa:8a:45:62:0b:e5:60:5d:24:d6:f7:26:
fc:70:be:c1:2b:1f:b1:19:62:87:9b:03:ab:db:8b:05:b4:49:
3d:29:41:44:30:aa:ea:4a:fa:3b:ec:67:a1:79:23:25:85:0b:
c8:8a:4f:3f:fb:b1:7a:f7:f7:c8:e1:79:fe:da:44:1a:99:c9:
43:76:09:e4:33:84:7d:63:be:c4:65:ff:34:4d:49:e3:98:6b:
86:e8:0f:2c:b3:4f:8c:a6:aa:eb:58:94:25:2b:a5:15:fa:c5:
16:a8:a5:f6:96:f1:bb:96:2c:8e:16:3b:18:75:c9:df:63:37:
41:58:1a:b9:43:5a:d8:82:a1:1e:3b:1c:21:fc:e8:ce:50:09:
c6:d1:53:f7:4b:78:65:61:4f:e2:59:77:11:20:12:67:7b:e9:
44:a9:dd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:44 2025 by rpki-client