Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: k3lhHn0z93Al/S6XcuUvGjT174rYFexfncFucsI8ab4=
Subject key identifier: CD:FA:D7:D7:9E:81:AB:7B:AA:10:A7:F6:7A:58:02:E5:D2:F8:06:D4
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 0199FBEBCABB63DD03A4638778DC7897712E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: 9H_Kait-j-Qscd6pOWC4j8dpNJg.roa (hash: X52do8h3PQmiEbN5LZNuqcyFDYy1wul4mKE1Lrt4Z+M=)
2: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: g/sP5bac8Xg2LtRzPoh4iOE40Pz0jz0V50bDL/TPI9Q=)
3: z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa (hash: HMFp3zS5F5zXQPk83xR6QIUNoMCPUQejJzCTAnl5q10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ca:bb:63:dd:03:a4:63:87:78:dc:78:97:71:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=cdfad7d79e81ab7baa10a7f67a5802e5d2f806d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:8b:8a:40:a4:8e:fa:90:77:c7:bc:10:94:
cd:2a:21:b6:f0:4d:ae:f0:22:78:ae:ab:6b:c4:04:
af:d9:95:4a:c1:79:d3:35:53:44:61:4b:45:bd:65:
8a:5d:99:7c:0d:80:a7:70:83:b4:24:ac:a9:9b:00:
ee:0d:f3:84:bd:5a:df:dc:48:c8:93:20:07:3b:cd:
1f:73:8c:81:14:eb:02:fd:6b:99:b5:f0:7a:1d:12:
ea:2e:b0:62:e6:1d:4e:37:24:8d:9c:78:77:37:ea:
bc:3d:8d:33:c4:56:b2:0e:f3:0f:bb:4c:18:0b:df:
22:0e:c3:c9:ef:e5:b9:b0:1b:19:4a:67:55:6c:b8:
f6:aa:23:ee:df:cd:ec:37:36:5f:ac:13:e7:69:69:
c1:e9:97:07:1a:94:2c:54:78:cf:89:d7:10:d1:18:
ee:7b:81:8d:68:5a:d1:c0:ba:0c:2d:f6:7b:91:6b:
7d:5b:6e:14:ec:03:4c:ff:05:83:7a:b9:c6:ad:a5:
27:2a:ce:28:01:30:d0:d6:4b:a6:d5:cc:26:cd:ff:
21:23:1b:fd:ec:f1:c9:75:27:87:be:43:ac:c3:5a:
6e:83:b8:7b:a2:56:b8:47:f2:70:04:c0:b8:9e:18:
89:35:2e:d9:fa:ff:9a:14:d4:e8:1e:b8:51:1a:5d:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FA:D7:D7:9E:81:AB:7B:AA:10:A7:F6:7A:58:02:E5:D2:F8:06:D4
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e0:20:c2:cb:7e:01:40:9b:6b:84:48:5f:a7:f6:cb:89:dc:
64:13:7b:b7:00:6e:94:28:52:3f:65:c9:31:1e:f6:d9:5c:60:
52:41:fa:17:e2:f6:9d:2a:10:78:e1:35:c2:68:72:f3:46:1b:
51:3f:93:eb:70:f5:3c:7b:c4:ae:44:21:26:ee:67:88:ed:f5:
c1:94:d2:b7:65:7a:e0:44:8d:8b:08:87:c1:34:1b:13:74:15:
ea:23:45:75:51:65:35:ea:ff:e4:97:7e:cf:a4:c2:d8:c5:c5:
d6:51:e5:7d:5b:55:94:5c:ee:92:10:28:f7:1b:dd:cd:17:c3:
d3:76:a6:b7:fa:2b:08:a6:eb:07:14:ac:d8:c3:25:23:80:0c:
c6:d9:11:90:6e:71:99:b7:0b:04:3a:5e:f2:e3:1b:21:23:be:
bc:fd:a8:50:41:49:97:5f:a9:58:d1:42:8e:d4:54:cc:2e:e3:
21:8e:82:05:72:50:5c:eb:47:e3:ef:92:9d:a0:d0:7c:fd:c3:
dc:13:80:d8:fb:3d:c1:2e:ed:e6:57:71:74:6b:62:c0:b3:66:
6a:ae:9a:0a:ff:04:70:db:57:bb:d5:92:17:52:a8:82:06:5a:
50:30:0e:62:44:7a:24:b0:c7:ad:0d:1e:76:cf:ed:7f:be:c3:
66:c2:68:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:21 2025 by rpki-client