Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: GZXHraUqH8Sj9Fz94CEaTpE8Ps+iDHMTprsDVu2fh4I=
Subject key identifier: 43:59:9C:D7:8A:B8:D5:41:71:40:26:7C:2C:AC:40:46:49:29:2B:AE
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 0199FC21B9CF3B8975D711B2F259431F011E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 053D
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: 9VYK0oHjjTC_b68oAyoNi7RTStA.roa (hash: 95NE4Wq8cotxnefZwzo13t7L9p4u4ZGJ0NIa1wNiJCg=)
2: bq3CHdF3ToMivmK2PU155LcLlRo.roa (hash: E2q6lH9inJ5ZH1jaNhC41RHD+yk7srEkGUdyytaHjj0=)
3: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: QXRojUj7KZVIfVSaExFZ4jmU/CWVdKvpgFQMLsD998o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b9:cf:3b:89:75:d7:11:b2:f2:59:43:1f:01:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=43599cd78ab8d5417140267c2cac404649292bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:9b:0a:e8:d8:4f:ad:2c:3f:88:db:40:d1:
c1:99:0a:e4:e4:96:6c:64:16:aa:59:4c:9f:c4:4a:
44:c1:eb:85:ca:c1:e9:b6:24:27:12:e2:26:44:2e:
03:fa:22:16:9d:3f:a5:df:89:90:27:42:51:89:ab:
9e:2a:dc:91:a5:a0:df:9f:0b:cf:ce:90:06:de:de:
c5:01:cd:b0:2d:2c:70:ce:69:cc:61:c1:af:55:dc:
2f:ae:c9:90:8a:3e:25:ad:87:df:76:93:b3:d8:6c:
72:39:0e:7f:eb:63:72:c2:26:2b:28:bc:7c:f4:3b:
62:7d:5d:d1:39:01:8f:cd:0e:5f:a5:f4:46:90:f8:
64:01:e1:1e:ae:1b:1b:e1:6a:b7:57:db:e4:de:10:
30:d0:e7:58:58:43:c4:65:87:09:79:06:07:19:cf:
98:a1:15:18:dc:4e:29:c4:05:cd:2d:1c:73:14:ab:
02:15:81:d7:c3:65:e5:57:7f:12:4f:76:4d:9f:fb:
80:57:01:74:5c:11:3a:22:2a:65:af:ba:00:fd:6b:
e3:c2:6d:28:7a:6f:2a:1b:90:44:d9:2d:be:52:48:
27:fa:35:59:a5:62:a5:5a:6e:a8:5b:64:93:88:02:
45:f5:6d:d4:fd:52:ee:9d:15:df:8f:58:b1:82:0b:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:59:9C:D7:8A:B8:D5:41:71:40:26:7C:2C:AC:40:46:49:29:2B:AE
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b2:f7:1e:04:78:53:d0:b5:b2:25:cc:8a:79:be:c4:be:9d:
c1:fc:e1:e8:cc:43:42:e0:72:a2:4f:b6:28:ad:34:3a:a4:53:
32:2f:96:06:30:1b:16:47:75:09:27:2a:30:fe:fc:db:da:91:
67:6a:72:65:26:df:4a:2f:10:76:28:db:31:bd:0a:d6:5a:f2:
17:dc:cc:32:e6:fb:cf:14:4e:29:91:ee:4e:1d:8f:c3:3f:6d:
27:3a:50:38:e1:08:eb:8b:18:11:ea:24:11:54:74:61:97:a2:
6f:f5:32:c0:99:49:b9:70:ed:ff:3b:b6:12:2e:f3:71:ae:ee:
e3:57:fe:b1:25:41:50:69:df:2b:aa:0b:53:f8:79:92:aa:11:
11:78:04:28:82:91:7f:7f:af:47:4f:45:13:57:e1:13:95:ee:
ec:da:55:4c:62:01:fc:1e:60:47:99:8f:4b:86:9a:f6:8a:df:
0c:78:9c:a1:53:31:98:fd:60:e3:08:89:a7:a8:e7:c0:47:9a:
cb:35:a9:7e:dc:04:b0:8d:90:1d:68:12:ae:ad:5f:b2:cb:9d:
00:84:e9:5a:f2:44:37:80:19:e4:0e:92:da:26:fe:6f:3e:fe:
e2:51:bf:ae:c1:d8:09:bb:22:c9:fa:eb:2b:f4:0a:e0:74:91:
26:39:49:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:26 2025 by rpki-client