Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
File: Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json)
Hash identifier: R1GRQhcx5CM9IBnIE8jQPl9nu9cYR0q9prxJcWcirWw=
Subject key identifier: AD:B4:63:81:3C:83:B8:CE:0B:A2:AB:E1:8F:61:DB:FC:1C:BA:96:87
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 0199FC58D5D1AAD2E2BCBDA355595720093A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
Manifest number: 0707
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: E3Zl7hTQVNjV63pjgOsge1XkH0U.roa (hash: yrZmQZ4kTmjXpz++XtNl02KMrQY9DBIkid1grpWXuJM=)
2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: Rpuxj+Qo8YKeg9Mev52OGmz3Ta+i/O4qNPL12Zbz+M4=)
3: o0lO65ar-rW4jL4W8sebNaso080.roa (hash: WWdJYnb/d9BssaNMXrRC81WhzrjAYNXMX5FXKx6MRRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d5:d1:aa:d2:e2:bc:bd:a3:55:59:57:20:09:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=adb463813c83b8ce0ba2abe18f61dbfc1cba9687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:51:55:99:77:8a:a6:65:2b:33:3e:95:5e:
41:ac:dd:28:89:68:b8:74:5e:3a:5c:bd:65:45:24:
a4:ea:4f:60:f8:a6:a8:97:3c:f9:c9:07:b4:33:df:
3f:68:fa:1b:15:72:e4:fd:df:c0:25:66:c7:ce:38:
c5:1a:43:9e:8d:b3:43:22:c4:94:20:5d:b5:7a:87:
8f:45:ba:af:a0:9d:fa:41:e9:ce:00:ad:5d:7c:6c:
e9:df:42:83:35:cd:6d:1c:a6:8f:56:c0:b4:82:a6:
7f:d8:a7:60:b6:03:fd:97:78:d5:35:cb:05:92:bc:
8a:d5:53:ac:2e:80:ec:de:d8:39:33:7a:bc:f6:6a:
0e:dd:d3:4a:5c:66:f2:3c:98:eb:a2:d1:2e:eb:c6:
b5:1b:d6:2b:77:a2:47:33:ee:07:88:23:d9:d2:b7:
78:70:a3:02:46:76:10:18:3a:30:21:74:c4:dd:ea:
85:17:95:61:a6:f9:67:db:78:be:34:f2:be:7a:13:
3a:c0:c2:de:7e:3a:06:bc:4a:aa:4e:15:23:68:a4:
43:da:8e:38:e3:5c:5c:c2:d4:74:3d:d3:ab:54:18:
fd:7d:c8:05:52:9e:be:92:41:3b:1f:fa:80:3c:66:
78:dc:0e:1b:8e:7d:e2:ad:73:79:d9:84:d9:a8:5f:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B4:63:81:3C:83:B8:CE:0B:A2:AB:E1:8F:61:DB:FC:1C:BA:96:87
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:67:bf:45:4a:ad:21:4c:5c:1f:a0:8c:f6:4a:4e:31:70:13:
ac:b9:f0:38:c3:4f:61:29:68:48:a4:ec:91:76:e0:4c:55:9e:
10:2f:7e:bc:3a:5d:9e:90:1a:c7:a6:b8:db:42:38:51:b8:af:
5d:3b:a8:78:a5:59:62:5d:c0:a2:12:4d:c6:a6:46:8f:62:33:
39:de:ed:94:ee:2d:ec:0b:11:13:9e:63:0f:c7:64:3a:a8:a4:
f4:b6:a6:5a:44:3e:c3:ac:c6:a4:bb:84:09:2e:a8:d3:c8:87:
67:b3:0a:60:c6:ce:55:f0:f3:82:0a:5a:b3:91:08:0f:cb:e3:
c3:ad:8f:b5:27:7a:8e:a8:d2:b4:c0:4c:17:a1:e2:69:0e:99:
dd:3a:d6:df:87:87:ae:e8:38:34:3d:a9:b1:3a:4e:37:3f:38:
9e:d1:90:ad:b9:8c:38:93:a1:2f:0d:b9:0d:a4:4f:9e:09:00:
8b:4d:6e:72:42:b5:7f:1b:e4:59:2c:fc:0f:52:d5:fd:26:ff:
52:b8:fb:73:1e:7a:f9:f7:92:3f:9b:45:24:3e:33:f2:c1:60:
33:9d:9a:cd:d9:17:66:e1:84:79:ab:25:ea:3e:f2:8d:2c:f5:
43:1f:96:85:ea:7f:15:04:66:1f:54:0d:03:ba:76:89:6d:14:
f5:bb:ca:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:36 2025 by rpki-client