Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File: kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier: m242YIq5vr6WqmDYqNjwBv3K/Vu5jT4yaz5MPms5OyI=
Subject key identifier: 5B:ED:4D:AB:A8:0F:71:FE:FB:2A:C8:A4:13:93:F7:94:EC:AA:0A:AC
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 0199FD6B261F19312BFE0E869054EB0E48AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number: 1528
Signing time: Sun 19 Oct 2025 17:01:21 +0000
Manifest this update: Sun 19 Oct 2025 17:01:21 +0000
Manifest next update: Mon 20 Oct 2025 17:01:21 +0000
Files and hashes: 1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: nGx+doqkCi/iU0vh47lPdei76WxLpnaCDtvRRdrQCYY=)
2: pOvhTWtU4kelyPZ1fpMoPO101II.roa (hash: WJ4/oAtZUHsxbOhd3cJHFGOETOXNUNiMfn725elzUrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:26:1f:19:31:2b:fe:0e:86:90:54:eb:0e:48:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: Oct 19 17:01:21 2025 GMT
Not After : Oct 20 17:01:21 2025 GMT
Subject: CN=5bed4daba80f71fefb2ac8a41393f794ecaa0aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:5b:b2:11:b2:41:cb:73:00:39:52:e0:73:
0d:ec:7a:09:58:be:4e:42:c1:bb:c3:01:4d:0f:3d:
e9:44:19:e8:96:fa:1a:86:e0:5d:cc:51:d2:30:42:
3f:e6:56:db:0b:b9:f4:73:05:44:2c:4d:04:de:b0:
a8:86:ad:12:86:87:3e:d5:42:d3:62:0e:91:af:42:
70:c2:c7:ea:27:a8:eb:4a:86:ea:fd:57:af:dc:87:
fb:ac:53:fc:10:e9:6d:d8:52:70:c7:24:e3:1d:dd:
88:de:2d:0d:05:a2:6a:9b:e3:3b:86:05:45:32:98:
d4:95:2b:09:6e:4c:15:dc:a7:5b:05:31:ff:fe:3c:
c7:96:c1:53:2e:43:96:7d:97:b4:20:b9:76:48:8a:
dd:f3:ef:4f:e0:e2:d8:92:01:3d:fa:44:d7:28:ab:
97:4c:63:cb:77:a4:c5:1e:22:6a:5e:03:57:44:c4:
bf:08:7d:9d:4e:e7:f5:a8:cc:b3:2f:6c:c2:ed:92:
2d:4c:7e:07:40:c1:d0:30:2a:a8:eb:bd:fc:3c:cd:
e4:27:b3:be:43:90:48:10:2f:6b:d2:4c:92:31:38:
1c:77:07:20:34:ea:36:39:00:43:9c:d1:4c:95:5e:
f0:b9:8a:af:39:a3:5f:db:11:26:d7:a3:37:eb:5a:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:ED:4D:AB:A8:0F:71:FE:FB:2A:C8:A4:13:93:F7:94:EC:AA:0A:AC
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5f:6c:76:d1:8c:c4:e1:f0:df:cf:5e:dc:2e:1d:51:7d:d1:
43:32:18:cf:65:2d:50:02:9b:74:69:96:f1:7d:b0:f5:42:dc:
ac:ce:a5:3f:97:91:b2:e7:27:67:06:d4:78:30:b2:e8:ae:f2:
6a:56:a3:2c:44:fb:bd:17:c8:6c:3d:ab:97:d8:28:d0:aa:30:
33:d9:b9:63:63:c9:e0:ba:52:1a:40:dd:c4:74:30:4a:eb:33:
d4:75:1a:0d:bf:2c:f9:d9:79:14:c6:85:46:93:0a:58:c9:a9:
1a:0e:6d:99:10:98:96:f3:3a:89:a8:0b:75:aa:50:63:b9:66:
4f:a7:2e:6e:55:31:a2:56:ac:0f:22:43:04:64:11:30:01:5c:
88:4b:3b:cd:97:5c:3e:c7:ce:30:30:bb:3d:34:39:46:a6:3e:
ad:29:6b:c3:de:88:6b:bf:af:94:4d:ca:c9:5a:34:95:94:42:
2e:3d:45:8c:f4:53:0e:ad:65:4a:cb:b9:fa:0a:98:ca:ee:1e:
7c:86:ec:3e:36:46:c8:07:54:b5:91:6a:07:d5:52:eb:e4:c1:
51:f4:7a:0a:ac:e8:b0:60:a3:54:13:29:5d:93:bf:8f:91:58:
b8:5c:21:70:dd:43:5d:ad:79:ec:72:d5:3f:f5:1a:a9:64:ab:
4e:d9:4c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:19 2025 by rpki-client