Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: KrO/e86/SV79qbvVfhl4O3tmc8zia9svv+dr8apLlEk=
Subject key identifier: 2E:12:FB:AD:60:EA:89:DB:93:F8:D9:2C:0D:42:21:83:F6:22:66:61
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 0199FC58F5BD54AF0135C44865BD0B0099FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 0FF2
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: GWLdQp63HdvOf4msAVGTJwa7Pc0.roa (hash: lF9IocpGAD+RCCazxV1bkIzHwzFIWOektkqyFGjVilw=)
2: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (hash: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=)
3: ZcvBTfoXIkdWjCXtigYCRkxwU_E.roa (hash: OrUuvu33nOrNM9H7GJKTSRXbyuxdfvDLNi4s7scTDWk=)
4: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: 7lhIlIZa5JLbLRSocn/wE11Dp0q8C02zulGeNqR5ZLw=)
5: r816-sGxaSURDTSpC0B66tGRbZs.roa (hash: Cpfj6jfuACJLukpFk9QhkAV4pZmQtjlQ3iLHO8mpk3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f5:bd:54:af:01:35:c4:48:65:bd:0b:00:99:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=2e12fbad60ea89db93f8d92c0d422183f6226661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:b1:ff:cd:c8:30:0f:3c:67:40:0c:3b:6d:
84:4b:f1:5a:ba:19:b7:44:06:4d:64:ab:99:76:f4:
51:89:4e:c6:d9:b6:71:a6:d5:18:df:74:2d:d4:80:
1e:91:73:57:98:e3:41:58:ad:b3:cc:cd:af:ac:2a:
e3:8e:83:e6:45:52:7b:bc:40:1f:a5:e8:38:ad:ff:
ab:21:a9:dc:8c:93:27:eb:82:26:c1:93:a5:e9:5e:
c4:fc:fb:e6:b2:dd:b8:03:c0:1f:31:00:b7:63:dd:
51:c5:ad:f5:2e:25:39:37:90:55:63:5f:b0:02:92:
23:16:53:dc:21:3a:b7:ad:82:77:27:05:bf:0e:3c:
36:80:17:6f:31:ae:27:e6:3d:a3:b7:4e:37:bc:c2:
ca:8c:0d:f3:07:50:25:a9:8a:09:14:08:fe:5d:7a:
48:b0:21:26:38:f8:60:28:61:55:fd:8a:94:85:1f:
fb:3b:84:62:39:41:ef:10:4b:3f:b7:bf:fe:d1:cb:
5d:ef:94:a0:fe:43:d3:e3:7a:78:64:2a:85:19:7d:
be:ee:3f:28:4a:b5:6b:07:59:18:e7:4e:ca:f7:79:
53:ae:73:d7:f1:c1:a7:bb:02:0f:ef:43:26:65:b3:
a0:7c:c9:2a:ad:15:e7:53:4e:9b:65:f8:99:9e:29:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:12:FB:AD:60:EA:89:DB:93:F8:D9:2C:0D:42:21:83:F6:22:66:61
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:59:11:70:7d:dc:6c:c2:82:03:42:18:ca:62:9b:67:e7:f2:
19:24:8a:e6:f5:bc:3b:ae:cd:76:62:c5:67:a8:ee:69:b1:ff:
b5:b0:d9:c9:df:c2:b1:97:e2:be:38:56:96:6a:a8:f8:74:f5:
43:9c:8e:81:4f:27:58:7c:1a:28:11:69:dd:3b:60:6c:48:d9:
2f:16:9a:42:b3:f6:3d:6b:0a:11:96:ea:79:c5:5c:2a:93:fd:
e4:94:51:48:ec:25:8f:f8:a5:3c:e8:fa:3d:fd:b6:f0:0d:90:
f8:00:81:98:6e:78:9f:dd:28:d3:c0:d6:d0:ec:d8:77:83:7e:
ce:ea:cf:b6:9c:7d:f2:4a:db:f0:eb:f1:91:f5:57:19:ce:ae:
65:42:20:09:d4:41:56:2c:9a:64:8a:8b:ff:90:18:a3:2f:c4:
da:a2:ea:2d:2c:4b:a2:96:2a:3d:07:73:da:5f:6a:bd:6f:61:
c0:49:3b:e3:1f:08:f5:4b:e5:45:a5:ff:0a:2e:1d:f5:df:03:
1d:df:83:42:09:64:f4:02:48:b9:ea:95:7a:2a:45:34:13:50:
22:fe:bb:1f:57:ca:26:4a:a9:d8:db:df:67:63:f2:0e:a9:ac:
db:0d:7c:b7:ac:e4:48:d2:26:cb:e9:18:10:fc:25:13:28:c9:
c4:09:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:03 2025 by rpki-client