Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier: hTyHD6QlVnU3BlzDUYzFp/0nG533qhO7Z8uVwjGSlDc=
Subject key identifier: 6A:38:9B:90:91:53:78:01:E7:80:B3:94:A2:7C:13:2F:A8:97:26:7F
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 0199FB45BC0A1DB0D4844A039CE9CDB8EC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:15 +0000
Manifest this update: Sun 19 Oct 2025 07:01:15 +0000
Manifest next update: Mon 20 Oct 2025 07:01:15 +0000
Files and hashes: 1: bOAoo9Xlbcl-PK-rbfwF58rAKlc.roa (hash: Vn8yXcKwSTNwIZccCZWqjun9GvkjZC8dYUcNBhWRmco=)
2: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: If8+LA05YrMATr0ji52twa4e496XTlj+UYw2ACVVRc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:bc:0a:1d:b0:d4:84:4a:03:9c:e9:cd:b8:ec:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: Oct 19 07:01:15 2025 GMT
Not After : Oct 20 07:01:15 2025 GMT
Subject: CN=6a389b9091537801e780b394a27c132fa897267f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:14:ae:d2:85:50:87:e9:d8:65:9c:79:86:
5d:1f:7d:4d:dd:3c:37:d7:41:63:aa:81:ca:ee:15:
e2:7d:1c:90:53:7c:6c:7e:4f:7e:96:a9:f5:15:68:
65:30:cb:c0:c8:6b:0c:c1:4f:a7:ec:44:e5:64:e3:
52:c3:f6:ba:67:3c:02:f7:99:93:f4:f7:c1:1a:b4:
b3:ac:0a:84:38:0d:95:a3:83:09:60:61:9b:da:ab:
83:40:94:18:5d:c7:57:dc:52:04:49:79:96:16:1b:
62:9b:3f:85:01:a9:4e:5c:3c:39:d6:d2:cf:1d:42:
af:98:ad:84:17:b3:a9:24:46:06:78:c3:5e:f0:c2:
86:4b:c1:b0:d7:b5:ca:5a:d1:7b:37:2b:80:cc:6d:
bf:54:48:1c:13:9e:d0:ad:f2:e6:8f:f6:34:75:c1:
4c:29:a9:83:df:8f:cb:1d:bc:2c:03:b5:dc:96:de:
e6:61:03:90:10:67:5c:6f:16:86:ef:58:b2:2b:f8:
b8:6d:50:fd:69:68:1c:7e:83:94:73:d7:db:0d:34:
11:37:07:1c:a8:56:3f:50:e9:3d:89:c9:68:ec:d3:
b6:86:40:17:73:85:53:7f:ba:fd:30:ee:4e:1c:cf:
04:97:a5:1d:0f:e0:97:5b:f0:e2:92:71:24:bc:6f:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:9B:90:91:53:78:01:E7:80:B3:94:A2:7C:13:2F:A8:97:26:7F
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a5:b1:09:44:7d:87:56:ce:9d:55:5c:78:75:18:89:be:8e:
26:73:b5:e8:44:f9:4b:79:94:0c:8c:f9:4a:64:76:af:aa:39:
07:b7:1d:c3:91:6f:4a:44:43:4c:1b:b2:88:15:2b:c9:fd:38:
ef:72:4d:f9:7c:bf:2e:e0:37:86:ac:aa:e8:10:32:8c:15:6e:
56:2d:e2:60:a7:ed:11:fa:f9:4f:31:d6:a6:a3:4f:49:2f:b6:
25:cd:97:8e:73:46:b8:cd:f2:1b:e3:32:90:cd:53:38:e6:9d:
7b:c3:74:44:31:55:07:d1:04:49:4c:f0:08:95:8b:4d:85:72:
67:6d:59:4f:6a:d2:27:f1:72:25:fc:27:27:09:22:32:75:25:
33:88:04:bb:1a:89:42:e5:17:23:be:2f:7f:ab:1d:30:f9:af:
c6:9a:bb:19:ae:5c:fd:c8:71:2a:71:e1:84:52:bc:ff:d2:b9:
5d:85:88:67:4f:e2:5c:2f:96:6e:59:e1:a0:1d:13:ab:10:9b:
80:f7:05:77:12:7c:3a:3d:d9:5f:f0:f1:60:66:df:6b:7c:f2:
ce:e0:89:d1:91:05:84:29:f3:c3:61:e4:35:4b:48:62:ec:91:
2e:5b:1e:10:89:0c:7a:da:86:2f:08:a2:01:a4:32:8a:6e:9a:
e7:4c:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:29 2025 by rpki-client