Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
File: klA6rxJq980DHKw84eOYwXS4LgI.mft (raw, json)
Hash identifier: AhTY9HyoiC6NgtoSyDd6y3qqFlqJoikceSmL1gYmwDg=
Subject key identifier: 98:72:B0:EB:70:92:97:CA:BC:45:BF:3B:2B:31:66:0E:F4:FD:83:44
Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
Certificate issuer: /CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Certificate serial: 0199FB7CF2FB072E161C7751283DF2991AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
Manifest number: 0E45
Signing time: Sun 19 Oct 2025 08:01:33 +0000
Manifest this update: Sun 19 Oct 2025 08:01:33 +0000
Manifest next update: Mon 20 Oct 2025 08:01:33 +0000
Files and hashes: 1: LyKlqkZe1vL0FqTF3iiSvFK7hTQ.roa (hash: 2Vj99SsHB7IFNM1FIg40rxpKy12rqtdylkU9a0vtpMc=)
2: klA6rxJq980DHKw84eOYwXS4LgI.crl (hash: hjafqQ87Y4ultKaM5YX1HzxjPzIMvooVJpE+TLU7PZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f2:fb:07:2e:16:1c:77:51:28:3d:f2:99:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Validity
Not Before: Oct 19 08:01:33 2025 GMT
Not After : Oct 20 08:01:33 2025 GMT
Subject: CN=9872b0eb709297cabc45bf3b2b31660ef4fd8344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:c4:08:b6:38:81:91:3a:37:81:ef:dc:58:
86:9f:94:8f:91:8d:b8:48:85:14:70:8f:bd:fc:05:
5e:7f:34:3b:38:2c:32:ed:95:ef:5a:46:ec:13:3a:
36:5e:4e:b2:6d:7d:29:8b:a4:51:59:06:9b:2a:dd:
78:46:a4:f3:f8:8e:cf:ae:08:11:e5:c9:28:1b:74:
6e:a4:94:af:e4:cc:1f:1c:77:9c:7b:a4:e8:c9:8c:
6d:c9:76:91:1e:06:a1:3e:6a:22:bf:27:a4:31:39:
8c:cb:b9:f3:fa:b5:19:ab:d6:e9:2c:1d:9b:53:c5:
27:d9:5e:6b:11:eb:7d:93:b0:39:a0:1a:81:f4:41:
c4:a5:5d:b2:6c:80:f5:b2:0d:e4:b8:d9:01:f6:1b:
6d:b6:8c:9e:37:f1:c5:60:80:fd:85:f2:d6:79:37:
33:3d:65:34:c1:df:21:17:c8:2e:f0:bf:2f:1e:11:
8c:5f:5b:cf:43:2c:fe:7a:3e:b1:25:75:6f:c2:6c:
a9:2f:a2:37:b1:17:09:5c:8d:07:82:1e:41:21:41:
98:35:e9:44:ff:26:34:1b:56:d5:9e:71:42:bb:98:
36:d9:9e:1a:47:74:07:ad:7d:2b:5f:79:82:6f:5e:
63:06:ca:ae:59:21:dd:c2:3c:7a:af:72:4f:6e:e0:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:72:B0:EB:70:92:97:CA:BC:45:BF:3B:2B:31:66:0E:F4:FD:83:44
X509v3 Authority Key Identifier:
keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b5:08:a3:46:d7:3d:15:dc:bc:c0:a2:42:c0:3c:c6:f7:cf:
3f:d2:6e:9c:49:a1:3d:77:eb:9e:41:97:07:c5:fb:0b:57:33:
7b:91:49:d7:98:b1:d3:53:5a:b4:aa:8d:53:78:e9:e4:2d:0e:
3e:ba:0e:1c:9a:2b:3f:a5:40:6d:da:00:70:b3:65:50:b3:c6:
87:33:66:83:84:aa:d2:93:da:2f:48:1f:49:f4:67:53:13:d0:
d9:33:ac:48:e2:59:42:3f:b3:c6:2b:5a:3c:88:99:d2:24:ec:
07:5d:13:4d:74:76:f5:02:ff:15:34:0c:b4:2a:ed:b4:09:f1:
f7:ff:15:c4:2b:e0:22:6c:77:9e:89:23:2e:14:02:59:3d:23:
1d:02:71:c6:73:57:a5:0f:fa:a4:b6:d1:92:6d:d5:d3:0c:46:
3f:c0:0b:93:59:78:dd:5a:66:56:f5:c7:34:e9:2e:95:17:1a:
49:98:b0:eb:13:5c:b0:f6:87:b7:d1:5a:25:58:db:c2:6f:8d:
39:f3:19:57:60:dc:ba:be:d0:37:c3:e7:8d:1e:ae:e6:ca:9f:
7d:7e:f9:02:18:5b:5d:85:77:74:a7:70:fa:bb:25:1a:49:cb:
19:16:13:00:3d:07:e4:8f:fb:2a:92:27:3b:47:ad:c2:58:32:
d7:6f:fe:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:34 2025 by rpki-client