Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: XFU3Kt777dfXRpWB+oZhe03J+rig/iSEXAWbR1+uW1c=
Subject key identifier: 1F:1E:60:C5:2D:AD:1B:2E:23:A8:9D:E3:B0:D8:29:1D:A9:CB:64:CC
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 0199FCFD34DB27413FF0C064D2107B6C3972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 069E
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: g9a2AgSYQsELLiSB_-OegEcbQ9I.roa (hash: ImJVXRp/ldmW9cQsi6+awLuGwVI0Qm+zTXoZ5uHaLy0=)
2: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: 9JyZGXDXgFchay60tcctOn2q/mVfkqLA/39pICjquPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:34:db:27:41:3f:f0:c0:64:d2:10:7b:6c:39:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=1f1e60c52dad1b2e23a89de3b0d8291da9cb64cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:50:33:a5:05:1a:0b:a8:5e:3a:b7:e7:19:
47:96:4e:f7:99:9f:0d:31:07:d4:e5:83:86:25:26:
89:7b:13:20:07:55:94:37:3a:32:e9:50:00:85:e1:
90:e8:d2:26:82:1f:56:f4:32:76:ca:9d:d8:70:01:
f3:4f:33:2b:48:4d:0d:b0:c1:dd:f2:08:de:1a:15:
d8:34:d7:ec:a4:6d:b9:b7:ab:8e:13:11:5f:af:a7:
4e:a4:f5:a2:e9:58:c0:f5:68:85:d4:50:f3:f0:2a:
19:1b:fc:4e:38:35:4f:0a:49:ff:d0:4f:2e:6e:1b:
ec:ce:8e:2e:c1:77:0b:b0:df:f3:0a:aa:10:11:dd:
3e:39:17:40:78:90:0b:7a:7f:24:f2:6d:84:19:4f:
55:4b:7d:2f:15:56:c7:ae:c4:83:c0:03:96:c1:b3:
08:03:b8:03:73:94:ac:3f:d6:c9:2d:72:ac:94:f0:
e5:7c:e0:49:11:37:6c:51:bb:57:69:15:03:34:e2:
1d:b7:fa:23:a2:8e:ef:98:c8:f2:90:ad:57:62:2b:
5e:f7:bf:f8:f5:95:8b:27:3e:63:9d:c1:47:6d:6f:
f9:24:40:39:f4:af:ed:27:84:30:a9:73:bc:36:44:
45:e1:6d:cd:0c:45:3c:c7:cc:c4:49:06:5a:44:31:
7e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1E:60:C5:2D:AD:1B:2E:23:A8:9D:E3:B0:D8:29:1D:A9:CB:64:CC
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7f:37:69:d2:9b:0b:e0:14:96:6c:ee:0f:52:65:7a:ae:9e:
7a:9c:3a:96:de:12:72:a6:24:6d:47:1a:1b:bc:bc:03:8d:5d:
f9:5d:85:98:17:8a:bc:b3:66:57:57:fb:6f:6e:bb:2f:4f:93:
c0:a7:23:ac:c8:e1:1b:e0:20:c7:15:ac:ea:9c:bc:fc:2b:a5:
51:d9:5f:cd:73:3c:a3:25:17:d0:4b:bc:11:99:9b:fb:c0:91:
2d:77:f9:68:15:22:d3:d6:4f:a4:b0:53:df:9b:be:f7:9e:24:
cb:9d:e6:f9:a4:7c:3c:29:c8:62:6a:00:5f:f1:af:e9:bd:ca:
be:23:75:53:7d:ee:b2:3c:3b:54:bd:cc:3e:50:25:b2:36:c1:
d4:57:ef:d6:45:73:50:05:8d:7c:1e:78:ec:88:87:42:f0:4e:
cd:ac:f7:da:a9:e8:f6:de:48:68:e4:6f:65:04:68:ce:7a:41:
a0:5e:44:fc:84:09:04:bc:b0:90:11:08:1a:d3:8f:2e:90:8a:
9f:34:77:97:1f:93:eb:85:81:94:bf:78:47:41:68:04:fc:19:
b7:2d:5f:45:01:ff:3e:d1:59:f6:05:16:9d:8f:90:a7:5c:bd:
95:63:61:c3:d5:b4:e4:ad:b6:e0:5e:d2:4f:30:be:07:f1:3e:
dc:be:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:10 2025 by rpki-client