Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: 6nmndPO09j2zb+NPkIPmlR15+36gyJ4kzRB8a4Epq2U=
Subject key identifier: 65:58:E2:78:A7:2C:49:BE:31:BF:2F:D9:EF:95:66:57:A9:09:F7:84
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 0199FC8F4E8ABBEBE8E8FF5961E2AC3829EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 09FC
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=)
2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: uWGXFmsLcXzFR43r0CRkF4CsdvJDX8ax2qPNLUW6Lgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4e:8a:bb:eb:e8:e8:ff:59:61:e2:ac:38:29:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=6558e278a72c49be31bf2fd9ef956657a909f784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:f8:e9:9b:74:3e:d4:66:9c:85:40:60:92:
8e:33:8d:73:7a:8a:d1:89:b4:f9:db:28:69:9a:9c:
b3:76:e7:d7:2b:e2:51:04:0d:a8:2f:c2:02:37:83:
7a:ea:28:81:9f:13:fc:6f:b9:e2:6c:cd:94:53:c8:
ef:66:a4:11:00:46:0d:c5:b5:f6:39:d7:6a:93:ab:
9b:4d:ac:0e:09:10:af:43:d2:bf:2e:5b:02:68:ce:
40:fe:ea:c8:04:f0:31:54:54:28:ae:b2:06:28:7c:
fa:0b:63:e0:51:f9:7e:bf:82:bc:ce:ff:f7:ff:1d:
f3:ad:7f:50:16:a3:7c:77:0b:03:6c:95:5b:86:74:
23:b3:b3:42:3d:eb:bf:53:65:d1:76:37:fe:21:2c:
4a:d4:a0:34:3e:41:ee:47:e0:62:b1:04:6c:9d:41:
07:c4:f3:fa:45:80:3d:dd:54:b6:a8:15:6d:35:db:
09:db:0b:1b:ce:cc:10:f5:ae:ba:ee:7a:e0:23:66:
fd:81:7a:21:85:5a:a7:47:98:e6:17:68:cd:d5:72:
ab:ea:5a:d9:9f:1f:28:99:9c:f3:ae:ac:15:b1:92:
c6:71:31:c7:35:05:9b:42:f3:79:97:16:bb:d6:77:
30:a3:a5:9d:05:07:99:05:6f:f8:e2:ae:10:7f:ec:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:58:E2:78:A7:2C:49:BE:31:BF:2F:D9:EF:95:66:57:A9:09:F7:84
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c6:b9:4e:da:6e:80:3e:02:e5:6a:3a:08:cb:c7:84:f4:d2:
e6:76:7b:8d:af:f7:2c:8a:dd:c5:cc:61:f2:c4:c8:19:7d:ba:
cd:a2:db:f0:64:e8:86:44:cb:0c:e2:95:2a:9e:29:6f:86:08:
b8:8a:de:28:10:c2:be:08:2a:55:13:79:32:8f:18:f1:9e:bc:
f0:f8:9e:a0:6f:eb:15:82:32:23:52:ef:dd:e3:f2:72:3f:bb:
aa:b3:c5:2b:60:2c:84:d8:22:b3:78:47:c2:a2:42:8a:d1:3c:
50:de:50:c8:7f:fb:fa:b1:d4:cd:80:48:35:7c:6d:57:84:d5:
af:db:65:82:e3:d3:d8:db:2d:c0:d5:81:62:fb:50:b2:32:95:
98:1f:f4:cd:9c:d5:0d:d7:e5:c6:5e:c7:9d:06:7e:ec:d2:97:
81:e8:c2:1d:1f:9a:5e:09:d5:26:d9:49:3a:c9:2f:89:84:38:
70:10:3e:dd:3a:93:7e:2e:05:ef:00:eb:f1:fb:b3:6f:17:8b:
5b:88:b8:63:7a:cc:b2:49:68:f2:87:1d:6c:b0:3a:15:52:8d:
a7:a5:e7:e1:ee:94:de:f4:5b:6b:f8:6a:47:79:11:46:f5:b9:
a8:4e:4b:f1:17:d2:d0:1b:ff:ac:74:8e:ef:77:f6:f2:38:a6:
56:eb:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:57 2025 by rpki-client