Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: R3mbpieSsqq6UFdV08wEOEiv8ijZS1WLgFMNI55KUt4=
Subject key identifier: 18:4F:9D:ED:8C:80:A6:5E:8A:A5:6F:70:DB:93:F5:89:A7:4F:F5:EA
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 0199FC21B310D4DEE48C3C6C638E29D85A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 12A5
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=)
2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: XsnNsP7/H+7GckCGxhx4hOFHod6ptomKxaKLg729nwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b3:10:d4:de:e4:8c:3c:6c:63:8e:29:d8:5a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=184f9ded8c80a65e8aa56f70db93f589a74ff5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:84:aa:01:e6:8d:86:75:84:26:74:20:24:
20:fe:d3:7e:90:50:3e:c2:7d:cf:42:4b:e5:44:83:
ee:23:5d:bf:8e:69:9f:c8:bc:51:ca:a4:36:c0:e0:
dc:7f:a7:b7:10:b8:4e:1a:c8:13:27:33:ad:b9:0a:
60:4e:e8:9c:dc:91:a5:fd:3f:14:f3:51:1c:71:21:
d1:7c:9e:14:bc:e7:26:05:9f:3a:78:25:28:e9:41:
50:3c:a3:01:b5:4f:bd:e3:f9:d2:f7:75:9a:55:dd:
d0:e1:ae:e0:8a:0b:95:3d:3b:22:b8:db:6b:58:19:
60:68:7c:08:f0:1d:1c:4a:23:c6:34:79:2e:42:c2:
08:0a:9f:b4:04:55:2e:a3:39:70:d5:52:42:68:10:
55:a0:25:89:96:3b:93:57:cc:bb:fe:cf:57:a9:79:
f3:15:19:14:e1:31:cf:77:6e:e6:bc:02:a9:eb:b8:
5e:5b:c8:c7:b3:b0:12:e1:f8:e1:de:ff:b0:88:62:
1c:f3:5c:40:5e:71:f9:4e:a4:ce:6b:63:8d:e0:c8:
d2:08:37:b7:41:64:fa:f9:6b:54:9e:5a:76:b9:e0:
48:19:5c:3f:cc:24:25:be:1c:32:0b:4b:15:e8:da:
85:77:2e:20:fa:89:55:41:19:0c:ca:2a:f9:42:5d:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4F:9D:ED:8C:80:A6:5E:8A:A5:6F:70:DB:93:F5:89:A7:4F:F5:EA
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ff:70:71:fb:28:2d:3b:8c:58:99:fa:41:d9:b8:24:d0:5e:
4e:33:ff:ae:b4:7b:1e:b3:27:42:63:65:8d:07:f4:09:a5:85:
8a:ec:40:71:12:a5:09:2d:e4:d9:bc:21:62:37:a6:2d:a2:4a:
04:38:eb:df:04:8d:fb:6e:e7:b0:8c:ea:99:9f:20:5d:ce:b0:
10:36:9c:4e:41:44:35:1f:0b:cf:7f:35:8a:39:12:dd:67:5b:
51:aa:b9:00:28:e0:01:78:1e:ab:0d:9e:00:c6:b1:55:79:c6:
bb:9a:0b:f4:a9:03:6b:24:a0:2a:6d:4f:03:b1:f6:2c:67:87:
06:70:02:2f:b5:ef:2c:29:84:3e:14:82:a9:de:b9:7d:1d:2e:
88:eb:3c:81:62:b7:d5:d3:f7:82:9d:72:5d:cf:17:55:04:66:
05:ae:44:cb:1c:6c:79:41:ff:aa:5d:40:29:21:39:ef:8a:03:
6d:a9:46:78:e0:f8:12:7c:88:a0:95:e6:a8:e1:39:db:59:9c:
01:d6:8c:15:64:85:d3:ae:2c:bd:d9:38:99:cb:5a:d3:da:98:
d3:9a:bc:03:aa:06:c2:56:7d:98:4c:80:48:24:ec:07:48:ad:
d4:b7:81:76:e8:74:06:f9:da:f2:59:a5:69:84:a6:0f:72:05:
39:a5:bc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:59 2025 by rpki-client