Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: 9OAvpigK561k8KQQqZQOiH+YjwJiqNR0Q3kI7oYN814=
Subject key identifier: 04:08:99:D7:F5:53:86:66:6A:06:BB:2E:F7:1E:79:B7:C6:2E:E1:2C
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 0199FC8F8C7A209C8CA9241C95555FAB53F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 05D9
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: duWR0zijgeBKPdyrthgttqrs8CBeYevDa90prVFPUos=)
2: uEevp2GUNz1b7rUD1ir2ld6ATDU.roa (hash: QtO8bxI6kXGPk5HpdZyF30S3dseJ+gcUwY5+nGoFUJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8c:7a:20:9c:8c:a9:24:1c:95:55:5f:ab:53:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=040899d7f55386666a06bb2ef71e79b7c62ee12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:84:e3:5b:73:bc:9a:80:d8:95:7d:38:93:
d8:c6:ff:54:d0:8f:e6:54:32:07:90:1a:23:38:7a:
76:dd:f0:c2:d3:4b:cb:c9:31:53:74:90:ff:28:67:
9a:73:38:11:55:ff:2b:e3:bd:6d:a3:dc:09:66:0c:
93:b2:7e:16:a9:6f:4b:67:a2:d1:f3:63:6a:f4:9e:
5b:41:45:46:4e:53:3c:c9:55:c2:0b:4c:5a:74:d6:
08:1c:05:36:f9:3d:b9:b4:b9:3b:cc:0b:e1:ed:78:
60:a6:16:4a:25:a9:7a:29:5f:d8:95:d1:f4:0c:a0:
9f:2c:d6:2d:ef:85:10:91:d9:cc:66:33:2a:3e:9b:
63:0d:5e:6d:d3:13:88:b5:79:9c:f9:2a:3a:28:83:
c9:11:fd:82:49:4e:bc:10:16:fa:de:76:90:a0:82:
4f:0c:4a:62:0f:57:37:c3:d0:16:d2:f0:2a:a7:e9:
cc:51:59:05:7c:1f:c8:f6:ca:6b:10:3b:15:4b:0c:
47:f2:6e:fe:c1:3d:e8:03:b1:29:60:29:53:d2:60:
d8:96:55:3b:27:2a:b9:11:90:07:b6:c8:f6:3f:26:
c1:84:4d:87:4f:a0:a1:b4:44:3b:94:1f:2f:fb:c5:
cd:66:f0:bf:fe:33:10:0e:f0:11:76:90:bb:c0:06:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:08:99:D7:F5:53:86:66:6A:06:BB:2E:F7:1E:79:B7:C6:2E:E1:2C
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d4:52:0b:ec:e0:3e:3b:0f:94:68:8a:66:c8:fa:26:45:49:
69:c6:e6:ad:e4:65:30:de:53:18:dd:07:5f:84:02:48:a7:a9:
65:40:85:37:bb:3e:28:1a:9d:10:45:b9:8b:65:1c:cb:6d:75:
95:10:73:3a:d0:6f:2f:ac:04:b6:8f:c8:e5:5f:18:fa:e5:47:
3e:f3:eb:a6:fa:17:8b:0f:94:4e:9c:98:47:98:1d:0b:a4:11:
71:1d:62:5f:18:c0:ce:77:26:c3:47:1a:ca:b6:19:87:67:22:
cb:88:87:7c:9a:66:62:ef:97:06:2c:ed:60:4f:1e:23:e5:03:
50:2b:cc:e8:c1:b3:67:48:fc:86:58:a4:09:27:28:db:68:28:
13:05:93:72:3c:78:dc:34:4c:65:73:91:ab:10:b1:11:d6:5a:
16:65:8d:f9:44:36:79:51:27:6d:e3:91:22:6e:e2:68:8e:8c:
2b:bc:14:c8:52:05:71:ed:ea:a5:c6:73:f1:fd:9a:69:bf:fc:
36:34:4c:22:e0:a2:6b:2f:b4:6f:03:ab:59:f9:e1:f5:fc:18:
33:ec:9f:09:89:92:83:32:12:ed:19:e9:e9:9e:78:a3:c7:3b:
d6:3d:b0:83:73:17:0c:7a:cf:22:42:a8:93:f0:53:49:4a:3e:
8b:f7:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:51 2025 by rpki-client