Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: sZHVWNg8BinINHCJaYavyxhqE8hdjEwDDAZ+aAthjrc=
Subject key identifier: CC:B2:79:6A:D1:CA:19:09:BC:36:E1:2A:8D:71:92:D9:5E:9B:07:45
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 0199FBEA770CF237D3A775003AB1D396E7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:11 +0000
Manifest this update: Sun 19 Oct 2025 10:01:11 +0000
Manifest next update: Mon 20 Oct 2025 10:01:11 +0000
Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: FmzudfgwYShGesb6jQWzenYxxa0dcZ63Op5B3SKtG7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:77:0c:f2:37:d3:a7:75:00:3a:b1:d3:96:e7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Oct 19 10:01:11 2025 GMT
Not After : Oct 20 10:01:11 2025 GMT
Subject: CN=ccb2796ad1ca1909bc36e12a8d7192d95e9b0745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:9a:29:00:65:83:6a:f9:8c:d2:e8:a9:ec:
06:a8:e2:63:06:75:28:98:3b:75:70:19:56:02:2a:
9b:2d:c1:d7:8d:a3:fb:f0:e2:ce:86:61:b8:76:70:
ce:00:a2:c8:98:61:f2:40:73:8f:c6:cb:dd:dd:b0:
a0:97:90:56:cc:29:ed:08:3a:e6:ad:ed:d8:08:f3:
f3:3e:18:99:4a:71:4c:7a:51:88:5f:54:a8:12:16:
a4:0f:6d:3a:cb:59:f1:59:cb:57:8c:3b:1a:d8:ab:
52:e4:c5:43:f3:49:62:31:d5:58:51:ed:00:18:d1:
4c:de:6c:8e:0e:ce:ae:d3:b0:28:f8:1f:e4:df:2e:
cf:3e:af:33:5f:bc:a8:be:32:55:2d:0b:a5:a1:bf:
09:ff:14:9e:06:1b:32:0b:20:b3:36:2d:01:c0:a8:
a2:55:71:bf:e2:2a:2d:4d:7e:07:a8:38:6e:ff:97:
de:63:35:7e:02:6e:ab:5d:df:25:42:19:ee:85:f3:
8a:cf:a6:59:16:07:6b:26:c3:9e:af:cc:6c:2b:dc:
4f:69:bc:3e:69:fa:6b:98:c3:07:8c:1a:30:7d:e8:
b0:b8:f7:56:22:cd:12:96:25:d6:f4:83:3f:8a:a0:
59:82:61:ff:08:65:5e:37:c4:f9:b0:16:ad:6d:5d:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B2:79:6A:D1:CA:19:09:BC:36:E1:2A:8D:71:92:D9:5E:9B:07:45
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f1:e0:21:bc:56:c5:a7:c9:d0:56:b2:7d:01:99:c6:b3:82:
95:45:d0:dc:62:28:71:89:39:c7:6e:45:0f:2f:59:7c:56:5d:
b8:cb:ce:8f:be:e7:cb:21:43:f9:63:ae:e5:28:a5:cb:60:16:
17:ec:f5:da:99:f0:50:6f:42:96:83:b2:af:8c:e6:03:39:c5:
eb:78:ec:c0:62:5c:d9:b3:d0:6f:99:07:98:ff:ec:c4:21:7b:
09:24:3f:c1:08:90:bd:25:cf:e8:c9:9f:5d:ab:ba:58:3d:fb:
ad:8d:8f:85:75:b6:bd:1b:b9:b2:89:d7:f6:99:ae:94:21:ae:
70:ce:d2:16:5f:a9:bc:eb:1e:34:a4:f3:82:b0:58:ba:5c:47:
e9:f0:39:56:cc:83:f2:dc:1e:d3:37:b0:bc:60:0d:02:98:dc:
0d:11:2a:67:ed:44:23:91:38:5c:17:c9:07:4b:a5:eb:1f:57:
57:52:76:10:44:44:7e:45:59:6e:66:50:34:01:29:a7:e3:26:
f9:72:1b:fc:60:18:ce:8b:e0:11:dd:1d:d4:5a:d8:13:7b:54:
88:66:4e:75:22:c8:ba:de:2c:76:fc:3b:89:75:37:8d:f3:7a:
01:cb:ac:65:c7:21:b1:c3:bf:aa:fd:f0:b6:94:d5:03:3f:5b:
6b:ec:04:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:50 2025 by rpki-client