Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: rq3LplaBaLLJN78mEs+jutaghZOWKt0fVgn6sVkoH84=
Subject key identifier: A7:F7:1E:8B:FE:DF:E5:06:07:D0:10:49:92:9B:E6:92:55:86:FA:E2
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 0199FD3454AD5FB832F58930F6062F30D95D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 0998
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: PREVDyEb408mqa9BxzP0AsRzJeg.roa (hash: aYqJv67l6Fq1t+h1omQ5wjXrKiL4xcndOuCQgkoKKGY=)
2: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: mjZ+n2EY3H3Frjw8sue+Wb49VQOSQwRUMuwrvTnpUPg=)
3: p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa (hash: jnU5hIXXGhayItcaB6AV8Aoaha2Knjux2sAEHQkirvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:54:ad:5f:b8:32:f5:89:30:f6:06:2f:30:d9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=a7f71e8bfedfe50607d01049929be6925586fae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:77:d8:2d:dd:6f:8f:23:d0:22:7e:c1:ed:
cc:d8:e9:e1:e8:31:c0:b7:ef:54:2c:5b:83:33:be:
34:e9:63:f8:80:0a:f7:b7:34:06:70:75:55:b9:76:
5b:a5:24:82:f2:3a:88:79:55:87:d8:c9:27:97:32:
82:32:0a:f4:c5:2c:5f:8b:25:c0:d5:73:03:b7:e1:
c1:c3:06:f4:c7:0a:18:75:85:dc:77:21:5b:7f:c2:
55:b8:3f:7c:45:70:1b:2f:46:68:ce:99:a2:b3:9a:
9e:fd:14:3b:b3:12:4b:81:16:3a:90:8b:db:1c:2d:
b9:a6:51:3a:a8:35:75:01:31:cf:00:2f:b7:e1:60:
f5:90:0b:15:91:3d:36:8d:59:37:f3:17:05:61:73:
6d:32:69:40:1c:3e:9d:98:da:13:cc:0f:72:2c:28:
55:a0:d7:67:d8:a2:e3:70:b9:ae:5c:94:c1:e4:0f:
06:27:2b:5f:6e:ec:d1:9e:c1:eb:57:05:2b:46:72:
d8:33:05:80:a1:67:2f:c2:45:80:25:92:e8:93:4f:
ed:b0:42:e6:7d:d8:0d:ec:36:5a:e2:86:70:ac:22:
0d:6b:86:2d:87:b2:ce:39:53:96:22:80:4c:9c:8d:
24:2b:80:b3:52:8b:d0:d5:8c:90:9a:40:5b:80:44:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F7:1E:8B:FE:DF:E5:06:07:D0:10:49:92:9B:E6:92:55:86:FA:E2
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c5:da:25:b4:06:f3:14:25:4c:59:9d:9a:8c:31:c8:d7:51:
c4:f4:3d:14:70:0e:c4:4f:13:26:ac:b3:b1:3f:ab:96:f0:88:
b2:c5:7c:05:f1:2b:5c:90:d6:64:4d:98:2d:9c:cd:a6:77:15:
59:02:98:fe:61:4b:cf:e3:72:c0:81:6d:17:1b:d8:d6:13:a9:
b2:22:89:99:0d:bf:06:5c:b9:7e:cc:c9:9b:fc:2a:eb:00:3f:
5e:8b:20:9a:c5:fd:93:a2:29:ee:75:d1:d3:9a:21:dd:d4:01:
e8:2f:77:9b:5e:f4:37:af:0a:4f:36:13:d0:12:4d:23:e1:8f:
fe:c8:1c:36:13:55:0e:ee:50:f9:5d:0c:e5:cb:ac:bc:2d:06:
68:b1:46:6e:20:8b:af:31:43:e4:49:59:e5:21:92:49:73:4b:
41:dd:38:8f:9f:49:7a:56:63:88:46:3e:03:e5:a0:ff:a7:e5:
2a:78:89:22:8f:21:cf:56:f0:e6:26:fe:e8:e1:3c:1c:85:e7:
86:66:da:9c:c0:83:36:30:bc:21:6c:56:c1:af:3d:d4:f4:bb:
ac:3f:b4:71:90:e4:c3:89:ea:46:08:41:a3:d9:85:58:e7:86:
96:bf:86:8f:6b:7b:52:d5:34:a1:9c:d4:88:b2:cd:26:44:4e:
90:e8:41:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:35 2025 by rpki-client