Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json)
Hash identifier: h+W8MGpMKJsFg9+1jNmFdheZwjyfHb68dKBowUfizjQ=
Subject key identifier: 27:C0:F0:28:8B:C6:E2:5C:12:27:AD:E6:E6:22:39:F9:6C:BE:D1:C4
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 0199FD6B0E295680F1B336FE85BC1C3543C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
Manifest number: 1489
Signing time: Sun 19 Oct 2025 17:01:15 +0000
Manifest this update: Sun 19 Oct 2025 17:01:15 +0000
Manifest next update: Mon 20 Oct 2025 17:01:15 +0000
Files and hashes: 1: 3tngVW8LtfBpGAaHjHlOFUm8OH8.roa (hash: aEmicBF+rkX/VE/VudL8BN7DqijXENPur1ReRDbdgFc=)
2: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: tX7Qi5lRaLLvxsuTFHjIxV6ieTaFY9t8EYCAaPO/3hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:0e:29:56:80:f1:b3:36:fe:85:bc:1c:35:43:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Oct 19 17:01:15 2025 GMT
Not After : Oct 20 17:01:15 2025 GMT
Subject: CN=27c0f0288bc6e25c1227ade6e62239f96cbed1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:88:fd:29:27:25:b5:b7:fe:7a:0f:ed:32:
6c:a6:96:d7:c2:df:1c:ce:97:92:45:b5:4b:48:37:
db:fa:97:b4:ab:ba:d3:e9:09:1e:eb:89:2a:fb:a4:
e7:4f:71:0e:29:23:94:99:98:99:b5:b7:62:07:60:
b6:cf:4e:57:e8:a3:d2:48:ee:93:e8:cb:91:27:e9:
9b:19:4c:d8:60:e8:8d:d9:77:39:99:c3:95:9a:a5:
53:5b:5c:91:46:ec:2d:f4:5b:02:ac:06:6b:aa:ee:
5f:c7:56:f5:69:34:44:5b:0c:93:27:c2:92:2e:d6:
13:e6:a9:a7:7c:68:93:34:05:a8:f9:94:60:5b:48:
07:89:64:24:39:d9:9d:ac:fd:9e:1a:74:aa:cc:f8:
94:5c:a7:2f:1e:91:5b:ae:31:b9:ce:15:7a:fa:ea:
82:06:ee:7e:eb:87:c0:b8:c0:22:3a:1a:11:20:e4:
be:0e:8f:1d:ae:30:bf:ac:50:4b:29:0a:c8:77:26:
59:87:28:92:37:a9:5b:4c:88:39:02:da:06:d2:47:
77:fd:ee:f2:df:e6:26:b4:4e:65:38:fd:de:cc:fc:
eb:3c:8a:57:e7:87:ca:f0:34:a8:3c:da:75:c7:d5:
72:a9:bd:00:76:5a:95:71:f0:78:68:b5:72:af:f5:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C0:F0:28:8B:C6:E2:5C:12:27:AD:E6:E6:22:39:F9:6C:BE:D1:C4
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:56:f3:06:84:d1:d5:41:0f:b8:14:7d:4b:d0:f9:cc:db:0b:
f9:2f:10:4d:36:ca:79:5e:4b:86:27:2b:65:7c:0e:c6:5f:a7:
1e:d5:cb:51:87:64:87:74:6f:52:95:be:48:72:cd:1d:46:90:
7b:94:48:9c:c4:12:67:c4:64:c6:3c:2a:36:53:5c:3d:b8:b6:
cf:5a:63:76:2e:1b:9c:42:d6:07:e6:2c:6b:56:9f:76:f2:6a:
89:9a:38:15:23:a7:df:f5:79:67:54:7a:ac:c7:a8:aa:27:d3:
d9:8e:98:ce:6e:00:36:0f:30:2d:20:a6:96:76:95:0b:0c:4b:
6a:d8:6e:3f:25:84:f6:8e:de:98:86:fa:72:46:f1:a3:8e:90:
5d:7a:ff:e1:19:c9:8b:b4:86:7d:78:68:b6:97:90:e4:17:cd:
3c:87:3a:ef:ff:51:0f:60:73:bc:d0:04:e9:33:a3:f3:5a:58:
0f:ae:f8:ea:5c:79:3e:16:5a:94:66:7b:01:e7:7a:db:02:2d:
67:27:b4:1b:88:29:3b:97:2c:1d:89:ea:25:35:17:c9:1f:9e:
9c:7a:5c:93:cf:c7:e9:82:dc:25:80:30:12:76:ce:5e:60:17:
fe:a2:82:b7:45:c9:d7:b7:15:94:5e:4a:b2:48:e2:18:89:2b:
71:be:cd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:11 2025 by rpki-client