Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: JjfldyBuObK7E1nTCncOjbPnvJtIh7txaNyRtOHq/Ww=
Subject key identifier: B7:EC:A2:33:50:EA:32:C8:FB:61:CA:CD:FF:F9:51:E6:6C:7C:85:7B
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 0199FDD8F3B061D0CA8F0842C635E6B16458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:17 +0000
Manifest this update: Sun 19 Oct 2025 19:01:17 +0000
Manifest next update: Mon 20 Oct 2025 19:01:17 +0000
Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=)
2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=)
3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: eRgutaP8adnqh3cVfLYw7En790a/xtIk3f0KoxGauHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f3:b0:61:d0:ca:8f:08:42:c6:35:e6:b1:64:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Oct 19 19:01:17 2025 GMT
Not After : Oct 20 19:01:17 2025 GMT
Subject: CN=b7eca23350ea32c8fb61cacdfff951e66c7c857b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:35:ef:a7:de:40:8b:00:b5:bf:3e:4b:f1:
ac:0d:42:fa:39:61:21:c9:18:fe:80:fc:aa:cc:58:
26:b5:f8:fb:b4:e4:f8:f4:75:98:2c:ed:a1:d4:cc:
9c:4d:25:7b:5d:f8:70:3c:e0:78:56:69:87:98:43:
fd:ce:36:03:aa:da:3d:68:62:9d:8e:bc:c4:14:07:
92:bc:dd:70:b5:e3:9e:56:61:5b:f7:2d:16:f8:e9:
d0:39:10:2b:6a:b1:08:5e:07:28:2b:1f:e3:35:e6:
6d:e8:80:a5:78:30:e5:8a:57:f0:a2:e5:01:79:49:
95:08:e2:62:a6:7e:59:15:a5:db:08:03:9a:73:a3:
a4:31:18:4a:96:65:1a:9c:f3:e8:15:97:44:83:08:
b0:7d:da:08:71:4c:aa:8e:f3:75:2d:34:60:7f:48:
f6:a2:e7:e1:dd:d7:d0:d3:80:88:01:d9:0d:fd:6f:
aa:71:54:73:ef:9b:48:e1:c9:2a:97:f8:b4:30:fd:
c4:58:27:fc:a4:a6:2b:39:80:c7:73:f8:77:bd:88:
f1:56:21:b8:5f:28:e9:af:28:50:24:4a:53:21:da:
d6:2e:de:50:54:48:86:40:be:db:a0:3b:83:84:5a:
eb:ff:84:c0:45:f3:d3:c8:05:ef:74:83:24:d8:19:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EC:A2:33:50:EA:32:C8:FB:61:CA:CD:FF:F9:51:E6:6C:7C:85:7B
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a5:12:d1:d2:c4:ad:6f:66:13:b1:d7:d0:58:d1:0f:8c:a8:
7f:43:de:2d:78:00:d0:e3:a5:68:57:c4:c5:11:76:68:a0:e9:
ad:fb:2a:e8:57:22:03:76:27:77:76:a8:35:bd:91:fe:76:fb:
f5:84:f8:45:9a:be:a1:10:66:98:fd:41:e8:b8:57:5b:e5:fc:
cf:7d:66:06:fc:a6:8e:86:c0:82:74:2e:20:4d:a0:6f:49:27:
b2:fd:52:8a:03:42:be:94:80:fe:3a:48:81:9b:96:be:88:a3:
96:0d:b3:9e:a6:ac:ad:d8:2a:a2:2b:23:25:f9:de:8a:42:ae:
3d:90:c3:5d:22:f9:6a:0b:97:59:31:32:61:f0:6c:98:7d:1b:
ec:2d:ed:00:b1:9f:fb:33:6f:20:4e:34:9e:77:2a:f3:93:bb:
9c:85:97:b4:d9:30:72:e4:88:f2:a4:51:ee:c2:4f:e7:8f:fc:
f9:21:9d:8a:7b:99:7e:84:06:be:4a:02:67:e6:b6:88:d0:62:
07:fd:90:8f:21:67:c6:f7:c6:a1:a9:43:12:e1:fe:f2:50:6b:
ae:43:78:e5:5a:88:c7:d6:e6:f5:18:57:bd:68:4f:0e:61:71:
9e:ec:89:67:82:ac:f4:8b:01:07:95:cf:d2:5a:c7:c6:91:86:
3f:8a:09:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:56 2025 by rpki-client