Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: ECLatkt2GRBoRgX7kB271bdCSVOhVCUFnCK0uUQka4U=
Subject key identifier: 2C:2B:0B:2B:12:6C:67:63:BF:9D:EC:92:5A:20:5B:C4:03:84:B8:4F
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 0199FB461CC169C9C00F64881326F4029983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:40 +0000
Manifest this update: Sun 19 Oct 2025 07:01:40 +0000
Manifest next update: Mon 20 Oct 2025 07:01:40 +0000
Files and hashes: 1: Iz4og1YNjZbe-ZzC3Rok6fWTxAs.roa (hash: 0YDfRJkLurctQB+o/ewy6zBfFbZnDiGSOFrKrpKkhg8=)
2: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: PprkcN91ygD+tzt22fg92t2ZtHiRw6UyRFiqI66UiGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:1c:c1:69:c9:c0:0f:64:88:13:26:f4:02:99:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Oct 19 07:01:40 2025 GMT
Not After : Oct 20 07:01:40 2025 GMT
Subject: CN=2c2b0b2b126c6763bf9dec925a205bc40384b84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:87:cd:dd:db:44:9e:16:5c:e2:82:b8:3e:
66:4c:16:18:41:3b:5e:91:2e:0f:02:e0:18:25:f4:
bd:9f:11:58:39:a5:81:d8:be:38:9e:d7:d6:09:ab:
b5:b4:1d:da:53:38:c6:6b:9f:53:2b:98:6c:d6:e9:
b0:0b:8c:14:4a:fe:b8:52:5c:ec:5c:ec:fb:06:67:
c8:8e:0b:2c:80:84:29:05:65:dc:b7:54:69:a9:4c:
91:2e:0f:3f:81:87:83:44:68:b2:54:1e:ce:d1:81:
e1:fe:69:91:c0:bf:86:66:61:45:05:aa:ec:13:ac:
f9:02:17:76:b0:77:fd:c4:e2:d1:5b:be:4c:d2:7b:
d7:36:5a:d6:21:9e:e0:33:66:23:2b:a5:13:85:b8:
e5:df:f5:a7:18:15:2a:6a:b0:c1:c9:4f:e6:e1:74:
27:d7:c6:e4:8d:2f:88:61:dc:36:e5:e6:fd:4f:06:
39:bf:6f:d1:fb:a3:14:91:aa:b1:b9:e7:4c:ba:0f:
37:65:01:ee:6d:00:ed:1a:aa:2f:cb:5d:70:d8:97:
7f:88:fb:0c:2e:21:19:d8:4a:d7:6e:da:02:a4:14:
3c:5a:42:20:71:63:8a:82:62:06:dd:66:a5:12:4d:
9c:5d:69:a3:ef:52:a5:84:68:ec:24:d4:6c:d9:97:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:0B:2B:12:6C:67:63:BF:9D:EC:92:5A:20:5B:C4:03:84:B8:4F
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1e:31:55:eb:2c:f0:89:5f:25:21:25:2f:d7:e1:54:1f:ae:
8b:19:7c:2c:25:5c:dc:aa:7a:e4:66:f8:31:34:7d:42:9e:96:
ca:96:84:4b:3a:cc:e8:57:f4:de:a9:f4:c8:6e:22:74:63:e3:
f4:80:d3:4c:c6:90:bf:6e:7b:9b:aa:f8:39:9d:8c:72:5e:fd:
4f:42:01:00:df:06:67:bb:57:39:f7:75:ba:c1:11:4d:9f:f3:
45:bd:e4:c1:a1:ec:37:ff:ed:94:ff:ca:b9:ee:e0:83:a9:92:
fb:a6:31:0e:70:65:ce:94:0f:8e:c3:d0:42:db:2c:17:d2:50:
92:ea:32:58:4d:3b:1a:02:e1:e4:55:2b:41:b3:2a:b7:1b:6d:
98:fd:8d:ca:6a:78:4d:b0:71:d0:24:1d:64:5d:cf:fa:29:1f:
b8:5e:21:1a:71:e2:36:90:2d:07:09:a7:64:e7:2f:7d:81:dc:
ed:a5:55:4c:19:d8:b4:33:01:aa:df:e1:27:ea:e0:68:39:19:
b1:2d:27:58:12:8c:81:b3:4c:7b:e5:63:a9:10:ed:64:ef:36:
cc:ea:b2:9e:9c:61:e6:30:36:cd:33:1b:f7:37:4f:18:3b:6f:
42:d1:06:5f:9f:b5:07:83:b0:8f:7a:fb:dc:cb:1e:bd:0e:3c:
54:ff:b2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:17 2025 by rpki-client