Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier: 1w+/vH3QPKGLWeVOhdOmF7uq9mEHSX6XN8iiL9bD2RU=
Subject key identifier: 79:96:7B:01:3F:DC:57:2A:E9:62:50:DF:AD:0B:F1:A0:69:A3:5A:CA
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial: 0199FBEB5501FD5555EFF548E63F9A8E04E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:07 +0000
Manifest this update: Sun 19 Oct 2025 10:02:07 +0000
Manifest next update: Mon 20 Oct 2025 10:02:07 +0000
Files and hashes: 1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=)
2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: NwSi4rQ/Ta5Nwy3Zhz66Fu2jCWZjZIIT0fZVJyPwOH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:55:01:fd:55:55:ef:f5:48:e6:3f:9a:8e:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Validity
Not Before: Oct 19 10:02:07 2025 GMT
Not After : Oct 20 10:02:07 2025 GMT
Subject: CN=79967b013fdc572ae96250dfad0bf1a069a35aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:9b:7f:dc:2c:19:3e:8f:95:6c:88:39:27:
7c:17:ba:3c:3e:1b:c4:e8:82:eb:c5:af:16:a2:a3:
9d:f0:f4:86:59:e5:4f:cc:2e:78:3a:51:78:6c:35:
84:ad:69:01:4d:27:38:da:26:ed:8e:28:7e:72:49:
8e:41:64:fa:c7:3d:40:95:eb:d0:26:9c:c6:e6:7a:
fd:5a:dc:f8:fe:b1:46:d4:66:0f:27:cb:1a:96:af:
f4:8a:ca:97:52:86:07:c1:16:4f:5b:39:3b:2f:02:
9c:cf:85:03:63:47:dd:6a:b4:87:89:e2:f3:b6:c5:
34:f1:9d:d9:6b:d8:27:6f:e4:46:91:2f:30:3d:f3:
2e:44:78:a6:a5:47:95:6a:b8:be:8c:d9:4b:2b:ed:
6e:cd:e3:9f:19:71:7b:1a:30:02:59:09:af:06:c4:
61:5e:e1:45:16:1f:ee:62:03:ec:1e:1c:c4:24:92:
fc:a4:8a:85:1d:48:61:4c:6e:f3:94:4d:b4:7e:1f:
86:31:c7:23:92:54:92:87:5f:15:fe:4d:b9:59:0e:
62:79:42:2c:9c:8a:6e:29:bd:bb:5f:50:4b:6e:5e:
d3:85:fc:9f:72:8e:15:89:e6:1d:b2:1a:a3:f8:8e:
1b:e7:32:3f:62:a9:86:8b:01:3d:32:5b:93:15:f1:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:96:7B:01:3F:DC:57:2A:E9:62:50:DF:AD:0B:F1:A0:69:A3:5A:CA
X509v3 Authority Key Identifier:
keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:24:f5:1a:f0:e6:21:b4:6d:fe:b8:a2:f9:da:dc:40:11:8e:
74:34:00:a5:c3:f5:68:7f:07:73:ce:4c:e8:27:98:99:95:d4:
31:99:0a:5a:60:c6:44:38:35:d4:22:9b:c3:56:86:ae:63:64:
25:e4:88:aa:a2:7b:7f:2e:19:4a:e2:02:50:e0:3c:02:61:94:
ca:fc:7b:b0:bc:df:1c:c0:7a:0a:58:c1:c0:41:8c:95:b7:90:
52:48:a0:c7:b2:ae:30:98:f7:1f:cd:c3:53:42:aa:3e:49:b4:
c6:f2:eb:7c:8f:ac:e8:da:7d:19:c8:6d:cf:ca:82:ac:39:93:
63:89:c7:df:61:4b:ab:45:c0:a2:c7:cf:ac:3e:9c:60:7d:a3:
67:47:98:b1:be:42:60:e1:f9:7b:58:b7:df:ed:65:66:ed:1c:
99:a3:eb:1f:4e:b5:05:aa:68:5e:6b:f0:19:37:e3:b9:dd:a6:
9a:17:09:27:b9:fb:54:5e:63:cf:38:fd:b9:70:93:43:a8:78:
b1:57:9c:87:27:fe:43:c7:aa:7e:21:24:77:33:ec:00:4b:66:
bb:81:35:ce:66:93:cc:d6:43:f0:80:7e:8f:d9:07:8f:10:cc:
3d:8c:db:5b:e4:dc:eb:a4:6e:9f:a8:64:8d:e3:80:f6:07:52:
c6:25:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:43 2025 by rpki-client