Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: zwOkmeFUznUCFjUOMjZh1/YPWBJYRVbo494LcDv1Pho=
Subject key identifier: C4:52:38:F5:B9:27:17:F1:84:5D:8F:2D:C9:63:34:41:87:90:A7:E9
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 0199FC58F01ED1BAE931D90BFEA3CC9B49CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0AD6
Signing time: Sun 19 Oct 2025 12:01:51 +0000
Manifest this update: Sun 19 Oct 2025 12:01:51 +0000
Manifest next update: Mon 20 Oct 2025 12:01:51 +0000
Files and hashes: 1: REM4mLJG7EnsBgBtsv162D0wKhg.roa (hash: lvlcTJIeXHpqeTqGfZTwiMwS8+bWAY5YDqELcR5epC0=)
2: Tkqht9ZvM7aeuWPx5RB29sIJQsY.roa (hash: GjW60rpkATBwTZcA2wdYPAVMSlJOCTBR0jsl1OrgYgE=)
3: XddNSlbeSdL2BDOBSBtXKwmbrLQ.roa (hash: YTwv2DMMu/UpDiaZkqxeVtYaDul2+Oka8KEh6z36NkA=)
4: b10-uyzSDsE84X1NxkfqXsdCqjM.roa (hash: 656/1JM/Gtv27/XvapYOtDJ81ebQFKIEF9n9ARvTwoo=)
5: bXzPu6L2HXchD9ZujQmLXPM_bDM.roa (hash: KqR406WMI/nRws1aNrGcGP+z2vKLl1H8bxnYaFt2+LA=)
6: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: GE6AcO4mCMPetJOmXniqTWE5hlkyId4MlCogRdrlsjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f0:1e:d1:ba:e9:31:d9:0b:fe:a3:cc:9b:49:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Oct 19 12:01:51 2025 GMT
Not After : Oct 20 12:01:51 2025 GMT
Subject: CN=c45238f5b92717f1845d8f2dc96334418790a7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:93:29:c2:ad:5d:6d:03:80:c7:b7:83:93:
a1:47:03:8e:5b:8c:6a:3d:64:98:e3:9b:fc:c3:c6:
af:46:e2:2b:46:a4:57:4c:1f:08:e4:c1:8e:3e:57:
0a:f8:d6:03:ab:c0:19:ab:7f:a7:51:69:fe:3c:68:
da:51:7c:b5:12:49:69:81:40:b1:74:be:b3:e7:8f:
f6:90:9a:af:0c:ec:41:82:a9:93:9a:b3:b7:52:61:
80:cb:01:e5:94:b3:ed:a7:55:81:1e:1a:4a:cd:70:
56:3b:85:26:6f:30:33:19:d2:74:97:d9:d7:84:5a:
a2:01:a4:76:a4:c2:5d:20:5d:f4:7f:ad:a6:15:50:
51:cb:24:94:bc:ec:c2:51:f6:ca:58:bb:08:4a:d4:
a5:af:7e:7a:f7:93:29:ed:08:06:57:04:42:24:09:
2b:ca:eb:41:5d:4e:b2:2d:61:fe:55:eb:6f:e8:31:
6c:be:fe:da:95:19:ee:38:56:f1:01:45:7e:60:d7:
e4:33:6d:02:01:1a:24:24:87:3c:a5:ac:f0:ed:8f:
8c:4c:77:14:01:16:bb:6a:29:16:dc:e5:02:e6:52:
f0:1d:56:17:9b:d3:0f:18:6c:72:d0:e0:ae:bd:fd:
08:8e:b6:ff:96:e0:49:4a:ed:cc:d7:7c:67:52:d3:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:52:38:F5:B9:27:17:F1:84:5D:8F:2D:C9:63:34:41:87:90:A7:E9
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:20:37:b8:65:91:e3:06:69:a9:3b:4c:d3:7e:fe:87:9f:a6:
14:0d:39:1b:e3:8e:8b:cb:f4:31:91:b4:d3:11:ce:6e:46:a9:
48:6d:23:84:1d:68:8d:a4:31:2d:fb:15:73:af:36:91:6f:f5:
58:17:60:7d:36:90:88:50:18:9a:04:e8:06:f7:90:0e:fe:be:
d6:a5:c8:7a:af:40:33:eb:89:cf:70:ee:55:6e:e7:ea:0c:a9:
05:75:71:b2:7d:bd:48:1b:99:7a:ea:8d:f4:7b:8b:22:75:1d:
87:5d:a5:ca:6b:44:8b:94:ba:cb:1c:23:c9:9f:ce:06:f1:3a:
31:b4:5f:db:a9:bc:67:7d:88:4d:03:59:45:17:f0:eb:94:dd:
1b:f6:21:0b:c9:df:26:e3:aa:da:0b:db:03:d3:d0:79:83:8e:
c0:2b:7c:e0:ae:b2:7a:38:79:5f:d8:04:32:88:e5:11:5f:35:
c0:f3:58:91:ef:63:62:87:86:16:0f:ae:f0:b9:39:d0:8e:75:
2a:2f:f5:9c:ae:b4:c8:f0:6c:79:4e:4e:03:f5:d4:c0:0c:b9:
bf:4b:93:98:d6:bc:f7:8a:d2:80:f1:8f:e1:b6:27:42:7f:e0:
87:7a:68:3e:29:63:4a:64:43:b1:fa:8a:f9:ca:d7:0e:cc:bc:
1a:ff:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:55 2025 by rpki-client