Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: k9hjS8WanfYRXIlDfAAZDBUvYCqZ3ViVRJJeujHK/xY=
Subject key identifier: B1:9A:38:A8:3E:80:B6:F0:A7:29:80:ED:57:5B:B4:63:68:F7:15:D5
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 0199FDD9572BFE11B61A6BE71CB1A7954A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 1103
Signing time: Sun 19 Oct 2025 19:01:43 +0000
Manifest this update: Sun 19 Oct 2025 19:01:43 +0000
Manifest next update: Mon 20 Oct 2025 19:01:43 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: 7tn4uOTWdKPNR/l4oHA78OJ0Ibrk4r/+xcpR7m/Nv2I=)
2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:57:2b:fe:11:b6:1a:6b:e7:1c:b1:a7:95:4a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Oct 19 19:01:43 2025 GMT
Not After : Oct 20 19:01:43 2025 GMT
Subject: CN=b19a38a83e80b6f0a72980ed575bb46368f715d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:6a:cf:63:be:b5:70:b6:c6:62:59:4f:64:
fc:2a:b8:85:95:95:f7:cf:61:96:5d:97:a8:42:21:
85:bd:c6:d2:e5:c1:a3:83:ef:fb:43:9d:21:3a:02:
02:f3:13:66:69:8d:2a:f3:9b:70:89:3a:f8:29:46:
40:98:7b:bc:74:56:c4:e4:ae:12:55:3b:9a:ab:36:
24:cb:ce:3d:d7:d3:7b:f0:1c:2c:e9:42:8b:33:fd:
5e:21:4a:6c:4c:66:53:21:16:70:fa:55:17:91:91:
b0:e5:63:57:a7:c4:2e:f4:0e:46:55:f3:6f:ef:75:
e4:54:41:8d:19:8b:78:4e:10:1f:31:ae:1b:2c:91:
90:42:34:69:21:c3:9b:4d:87:b1:b6:7f:f8:61:f7:
8f:7c:13:10:af:d2:03:27:a1:64:0a:e6:c1:b5:8f:
6d:16:9a:ca:fd:58:07:1c:55:70:4f:df:29:b4:9b:
8c:fc:cd:28:86:54:aa:ed:08:96:f3:fd:99:54:7c:
95:0b:21:fd:e3:49:33:e8:51:50:ae:48:f2:33:6b:
33:8f:44:84:03:20:9a:c1:82:ef:cf:f2:c7:92:1c:
73:1f:77:e9:1d:49:94:1c:88:9f:09:67:3e:8a:a1:
f6:d8:ad:66:34:7f:eb:7d:54:ac:06:f1:02:46:1f:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:38:A8:3E:80:B6:F0:A7:29:80:ED:57:5B:B4:63:68:F7:15:D5
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:db:a2:dc:91:9d:a4:97:11:be:27:03:8b:1c:fa:20:74:54:
58:85:a1:c2:1b:ae:d9:2a:92:83:ff:d7:7b:d6:12:1b:b9:d7:
0c:64:b2:60:46:8e:98:0f:ff:eb:da:6a:cd:18:83:f2:11:4a:
6c:c4:08:8b:fa:8b:9c:1a:03:a7:f4:65:c9:f0:96:a1:10:80:
68:33:70:c8:29:d7:04:fc:2c:1b:03:2c:a4:08:3a:aa:89:ee:
21:9e:a2:e8:51:3f:1b:a8:9a:31:9c:7f:e1:8a:f3:0c:12:90:
dc:67:4a:17:5c:ac:7d:49:73:06:90:fa:7f:07:35:4a:0d:5b:
0c:3e:b7:b2:5d:0a:91:78:8a:f7:7c:a5:3d:b3:53:eb:15:d9:
d0:2f:59:65:22:3c:30:0c:d6:11:eb:4f:55:cc:7f:e0:8e:86:
c6:04:a4:28:b9:65:ef:c2:64:76:e0:3b:1c:72:e5:71:ba:4b:
0a:8b:5f:1e:c9:38:9d:fa:bd:98:3c:30:9d:0f:0a:ba:62:57:
94:73:d3:7a:79:35:e0:e8:2d:f0:41:35:a4:91:a0:9d:07:26:
27:7c:83:bb:2c:94:53:d8:f2:b4:59:8d:78:6a:24:33:55:3b:
a1:14:d4:ac:07:6e:e5:e6:50:02:36:9d:63:8f:e2:af:b4:75:
af:da:87:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:28 2025 by rpki-client