Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: KfKVkqdTzQ4E665I1sPepj7M9mtSAgLqO886df3v7wg=
Subject key identifier: B9:36:64:2A:01:A1:5A:AB:95:1A:53:DF:F6:4D:7F:0F:D5:CB:1F:AF
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 0199FE102A8EC3CC048AA16B63FB4C2D1836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 20:01:36 +0000
Manifest this update: Sun 19 Oct 2025 20:01:36 +0000
Manifest next update: Mon 20 Oct 2025 20:01:36 +0000
Files and hashes: 1: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (hash: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=)
2: kDuhU048DTixv805ND5N0u_g9CE.roa (hash: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: rLgWjLYX2kpgpsvj4V4LJOW/V0sqq8SxyvRbFCoBhJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:2a:8e:c3:cc:04:8a:a1:6b:63:fb:4c:2d:18:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Oct 19 20:01:36 2025 GMT
Not After : Oct 20 20:01:36 2025 GMT
Subject: CN=b936642a01a15aab951a53dff64d7f0fd5cb1faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:bc:da:65:43:81:a9:a0:f0:ba:29:57:1a:
87:65:d5:8a:49:b0:69:b0:f4:c2:c3:00:45:69:d7:
7b:d3:e0:48:6c:ca:e4:6b:9c:90:f7:20:dd:02:8b:
f4:31:e1:48:4b:b2:b3:4c:4b:54:0c:f2:b6:69:b9:
0f:04:4c:e6:6f:83:0f:ec:74:1a:d2:59:56:3d:4c:
2f:e6:08:e0:0c:4b:4b:33:cd:d6:c7:50:3f:0f:71:
da:a6:2b:eb:30:93:31:91:7b:bd:92:de:7e:f2:03:
3e:38:27:0e:77:f3:68:69:49:45:de:49:69:d8:46:
0c:75:07:0f:fe:e7:dc:b8:a6:ea:48:13:41:31:c3:
9f:a2:05:3a:63:80:4a:84:f1:df:cb:cc:a7:25:ea:
28:dc:0f:63:38:3a:1d:95:01:5c:88:5d:89:1d:4c:
df:57:e2:a7:03:ea:51:c6:48:3a:0e:b3:e2:ce:5d:
d9:aa:03:3c:6b:3f:b0:d9:40:7b:9d:17:6f:9a:ec:
e5:ab:d3:ba:dd:d6:69:bf:3e:0d:a0:8c:fc:54:14:
8a:0e:ec:9f:45:dc:f5:ef:ce:5a:24:d5:6a:4a:5e:
49:8b:30:37:13:0c:b3:e9:42:13:df:6d:d7:92:10:
c1:ec:5d:4b:28:78:ef:1e:04:c6:71:9d:cf:fe:82:
25:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:36:64:2A:01:A1:5A:AB:95:1A:53:DF:F6:4D:7F:0F:D5:CB:1F:AF
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:22:4b:92:d2:e6:8b:81:95:2b:8a:df:98:b1:fd:7f:50:bd:
cb:bb:71:20:b6:bb:7b:04:2d:ae:0a:af:f6:0a:4d:08:3d:73:
fe:63:c9:d0:1c:6a:ad:e0:51:76:e9:59:1b:1b:d4:61:87:54:
24:8d:20:94:ca:d4:93:5a:61:ce:52:3f:85:6b:17:ea:51:df:
f3:b5:13:a7:e7:74:da:96:2b:49:ce:36:3e:55:74:82:b4:bb:
c7:9b:94:db:49:2b:d4:97:f5:16:ed:5c:d8:86:31:79:d1:aa:
4e:40:b0:e5:72:ef:ae:45:6f:83:f1:23:e3:de:97:81:c2:59:
1c:47:ff:93:58:11:77:5c:07:b1:60:63:d4:5d:12:e8:5a:96:
fb:97:c4:75:ed:c6:82:f5:42:a3:7f:36:02:c3:71:e7:07:c1:
e2:86:ba:97:28:a3:59:fa:dd:ab:50:48:98:c6:27:43:c7:fb:
2a:e1:64:31:77:d9:8e:69:b7:fb:aa:63:40:f4:e7:55:3e:97:
6e:7f:2e:ec:95:30:9f:45:20:08:32:ae:4a:c4:69:ad:29:52:
0d:e9:aa:6e:64:12:c2:69:d8:18:02:e3:3b:0e:0d:37:49:fa:
b3:08:8d:a3:ef:48:79:8b:52:c0:c5:b2:a8:d7:78:b0:d5:2d:
31:45:c1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:51 2025 by rpki-client