Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: Hvjtz92304LpBM0qoQjCj3CsJmwwSKdWAiuRlWDHXqc=
Subject key identifier: 64:89:92:9C:A0:D8:BE:B2:D3:E8:F9:EB:01:A1:AA:A7:6A:99:7C:FB
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 0199FB45A5CEC4900280A0BE190E48BD4B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 13EB
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: z1Z3IZ60r9FgB/AZ1sxsfv/y0IvZkFKIcJ+9yaZMRLk=)
2: uSrOots_DMPy38Ek0_9yV10Tzw8.roa (hash: Ypv5LfASDsUldkz8kd27ybD8JIawSksjG/puUQcmBe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a5:ce:c4:90:02:80:a0:be:19:0e:48:bd:4b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=6489929ca0d8beb2d3e8f9eb01a1aaa76a997cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:2b:b9:1b:c0:c0:71:dd:a0:14:e6:b8:5a:
9e:19:c4:1e:13:8f:41:10:85:bd:97:21:a7:c9:45:
1d:0c:69:17:28:0f:7b:58:b8:e6:bb:53:5d:5b:3c:
db:33:6d:84:cf:ec:1d:f8:11:08:de:b3:d8:5b:05:
c6:e2:f7:8f:f6:18:d6:9d:a8:10:e0:d1:44:8e:d4:
2d:02:f5:96:22:56:1a:d6:39:53:7f:fb:89:a0:0d:
33:d5:bb:47:8e:87:69:c3:7f:e3:16:4b:3c:d7:87:
a8:ca:44:72:61:c0:70:87:7d:66:02:84:03:d2:c9:
02:83:56:a7:f9:69:b5:2f:25:7e:7e:a6:54:46:ae:
8d:f0:0b:0b:4d:44:90:87:c5:66:a7:f4:35:49:29:
2d:4f:31:4e:bf:24:44:67:db:f5:4c:74:6f:7d:03:
b7:39:63:fa:fb:b4:fe:66:d6:74:3b:44:1e:36:16:
83:a1:74:3c:02:90:3a:ad:48:87:48:90:7e:20:84:
5f:41:e3:8c:ab:44:90:d1:1a:a3:48:5e:76:08:c1:
e0:33:b0:91:d6:d0:36:db:c1:55:f1:17:a3:e1:bc:
91:12:e8:44:08:7b:f3:d8:07:0f:3c:7b:bd:74:1a:
0c:b3:16:d7:4b:6b:9a:9d:e1:8c:76:16:97:11:f0:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:89:92:9C:A0:D8:BE:B2:D3:E8:F9:EB:01:A1:AA:A7:6A:99:7C:FB
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a4:a3:c9:65:e5:7d:58:d5:1d:91:0b:78:91:6b:70:01:5a:
f7:9a:ad:4e:ee:b5:a3:e0:96:c7:09:ac:82:1c:c0:42:9d:b6:
8d:11:5e:a0:08:a3:81:af:73:07:85:fc:3c:f2:4c:e3:2a:56:
f9:af:13:81:26:1c:4f:a2:59:cd:ac:25:20:b0:d5:42:e0:c2:
17:f5:6e:99:34:85:7c:4f:2f:52:9a:4d:c9:6b:ab:b7:e1:17:
26:fe:7f:e5:c4:28:e8:c4:fe:2a:92:e3:db:bb:16:61:10:7e:
24:0b:5e:de:0f:8e:df:c4:65:9c:b2:1e:fc:36:50:11:69:bf:
25:d2:7e:41:32:09:c9:84:55:49:62:55:bb:c1:51:7e:23:c1:
5f:07:3e:ec:58:a4:ac:94:23:57:72:a3:60:1c:2f:d6:1f:b1:
59:de:e4:e6:6b:b9:90:01:c8:05:1b:d2:61:c7:55:66:7d:1c:
45:fb:0e:ad:c8:70:73:e3:c4:dd:76:2c:4e:67:9e:c3:94:42:
66:e1:4b:8b:d6:92:ed:f3:b1:72:c3:5d:65:6d:d7:ba:6e:f2:
08:b3:f8:84:60:80:a5:c7:1f:76:a2:82:03:a3:47:9b:db:d6:
29:cc:e0:36:f6:02:7a:64:45:7d:ef:2e:68:bd:1d:54:f3:c9:
cb:60:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:10 2025 by rpki-client