Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft (raw, json)
Hash identifier: Ztn7D6IjJKAnGbQ0fblInZkcF3KSHygDm+Fg0PlrG/I=
Subject key identifier: D6:FC:13:8F:16:63:9D:33:E6:24:16:1E:F8:DA:2F:D3:79:DE:09:DC
Authority key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
Certificate issuer: /CN=91362d3c0953e8c933f0092a589b75494904f962
Certificate serial: 0199FA6A2773320BE05A0C83CCFE2FAC5BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
Manifest number: 1592
Signing time: Sun 19 Oct 2025 03:01:24 +0000
Manifest this update: Sun 19 Oct 2025 03:01:24 +0000
Manifest next update: Mon 20 Oct 2025 03:01:24 +0000
Files and hashes: 1: gF4h3hPUiQwbrFzucTsw-cGzGHQ.roa (hash: EmUyYOWtfES7R4OmRJxOMl7sM7cF9x8yLjgV5Oo/MqY=)
2: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl (hash: sRu3OUNUkD2HeAp0RLfyT0bK9nBGcV0RE9FAFfQr6a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:27:73:32:0b:e0:5a:0c:83:cc:fe:2f:ac:5b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91362d3c0953e8c933f0092a589b75494904f962
Validity
Not Before: Oct 19 03:01:24 2025 GMT
Not After : Oct 20 03:01:24 2025 GMT
Subject: CN=d6fc138f16639d33e624161ef8da2fd379de09dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:d5:3e:e2:8b:95:d4:59:92:3b:87:44:a3:
4f:ba:e4:a8:ca:ab:de:20:90:00:77:e3:65:ee:46:
7a:8e:c5:87:1a:75:76:6a:a7:0f:5b:1f:6d:eb:1b:
11:c2:83:37:56:48:cc:ee:80:87:fe:15:1f:67:dc:
17:09:e1:e7:a9:c7:1f:47:a1:fa:86:a9:c4:02:4c:
11:64:95:8f:08:0c:9f:d1:3b:70:a9:54:96:7d:6b:
08:07:2e:82:ad:bb:52:55:66:d3:a3:7c:9c:e0:25:
1b:64:6b:eb:30:12:b9:55:dc:ac:9b:92:93:87:e8:
a1:59:6e:2a:77:34:e1:70:9d:ca:f7:63:3e:df:38:
e8:f0:67:e1:4e:af:da:3a:38:c3:a7:5d:07:c5:fb:
d8:c7:0d:8f:4f:85:cc:68:61:25:96:77:cf:78:b8:
a7:f8:a0:88:16:cb:54:66:7f:64:c4:22:0b:3c:1f:
05:b6:da:12:4b:bb:cc:07:58:b0:bd:dd:cb:e6:48:
73:e6:94:75:ae:c5:30:38:e8:a5:86:a8:af:43:fd:
b9:f9:f2:73:f8:15:6c:f5:c6:cc:e2:02:03:81:a5:
2c:4d:21:14:6c:a3:93:b0:a9:1f:28:36:1a:94:2a:
33:da:13:80:f4:e3:a1:98:b8:c2:ed:f0:25:77:9e:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FC:13:8F:16:63:9D:33:E6:24:16:1E:F8:DA:2F:D3:79:DE:09:DC
X509v3 Authority Key Identifier:
keyid:91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0b:fa:8e:1c:4b:7e:82:9f:36:fb:d3:db:ce:ea:40:82:d5:
b4:e4:da:c8:23:ec:b6:2c:37:a2:d7:95:03:31:bc:44:d8:eb:
2c:49:4c:3d:83:58:e3:e8:db:2a:16:91:c9:de:a9:62:b9:ee:
6d:7c:ca:00:59:df:68:9c:e3:40:bb:fa:f2:bb:3c:5b:85:7e:
ec:5f:0d:85:ca:47:4a:ac:36:cc:29:85:5c:22:58:8b:46:09:
42:9d:74:3d:34:e8:df:fe:f3:69:38:e5:f8:7e:a3:25:43:ef:
20:94:de:79:95:b9:2e:87:75:b9:f3:ef:b8:b2:0f:c5:d2:fc:
d5:d0:77:3d:5f:65:f8:40:4b:d8:ed:dc:dc:b4:3f:9c:76:2b:
36:64:be:39:be:c7:5a:ef:3a:06:be:6c:b8:ee:b4:7a:5f:18:
38:2e:f8:f8:a7:89:27:4d:16:31:71:c0:ab:87:73:88:20:98:
ff:c5:29:86:88:60:63:8f:ea:f4:03:fe:66:8c:72:58:be:42:
1c:db:64:21:ab:16:65:a9:80:a7:1e:8e:23:a3:81:c5:be:40:
d0:3d:36:02:45:98:06:5e:96:0c:46:97:0d:b7:d7:2b:0c:26:
ee:0e:ef:b6:ed:dd:a8:28:a8:aa:96:e3:56:be:89:04:02:f6:
e3:36:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:40 2025 by rpki-client