Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
File: kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json)
Hash identifier: fe2GvE4oBlbZ/0luCrMcuEfQ8o1wxg6To8QK+a+1c6Q=
Subject key identifier: DD:1E:66:58:3A:01:63:A4:9F:1F:0A:9C:0E:0B:ED:76:CB:F2:DD:57
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial: 0199FDD9A873111F45138C109DF29330802C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
Manifest number: 140E
Signing time: Sun 19 Oct 2025 19:02:03 +0000
Manifest this update: Sun 19 Oct 2025 19:02:03 +0000
Manifest next update: Mon 20 Oct 2025 19:02:03 +0000
Files and hashes: 1: ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa (hash: tIZYbv9uO1ydifZNyOm/4u1qZclQNJ4gcOxn8zCiU24=)
2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: hDlf0RF9ybWDk+eJeuC0ijrCSAHYYwGMrhRxFDBj5T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a8:73:11:1f:45:13:8c:10:9d:f2:93:30:80:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Validity
Not Before: Oct 19 19:02:03 2025 GMT
Not After : Oct 20 19:02:03 2025 GMT
Subject: CN=dd1e66583a0163a49f1f0a9c0e0bed76cbf2dd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:74:3f:e7:06:49:b6:7e:e0:2d:65:66:d0:
d2:5b:71:9a:86:15:30:ef:fa:86:74:f6:1b:68:c4:
c1:65:60:05:bf:a2:0f:a3:45:b6:6e:ec:0b:80:d3:
37:00:55:7f:0b:48:71:20:da:c0:77:5b:24:c0:4f:
b4:e5:eb:76:c9:45:38:1e:a3:ff:79:1a:37:1e:f1:
4b:e1:0d:b6:8b:c9:f3:2f:cc:0a:bd:85:21:91:26:
bd:15:9e:d3:bc:a8:b9:0f:05:37:a2:51:06:80:fa:
85:cf:66:d7:79:d1:31:f3:0b:d5:2e:32:a1:f7:72:
2d:cd:bb:ce:48:f4:3e:16:7a:1c:d3:cb:92:3f:fb:
d9:9a:c9:5f:33:4b:43:07:56:87:6d:b1:fd:c9:1a:
01:48:e0:cb:e3:60:67:84:7f:8d:7b:b0:ea:e0:22:
01:36:90:f3:9f:5e:ca:e4:be:ba:91:e4:ed:31:df:
77:ac:bf:d9:1b:9b:5e:a7:e1:cb:f9:bf:3a:53:ab:
64:49:ff:89:13:fd:b9:44:44:1d:52:56:ad:bb:f2:
e7:67:43:84:cb:d3:4e:f5:24:60:8f:3e:05:6f:9e:
54:9c:48:01:90:c1:d5:2b:09:03:fb:2e:b9:3f:00:
d9:4f:83:07:18:7c:ef:a7:33:bb:fc:e3:98:47:37:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1E:66:58:3A:01:63:A4:9F:1F:0A:9C:0E:0B:ED:76:CB:F2:DD:57
X509v3 Authority Key Identifier:
keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f5:01:cc:8e:c7:cf:89:a8:7c:3b:17:75:7b:69:49:10:b1:
68:99:39:fd:60:69:43:b7:d1:b9:15:22:78:de:94:34:ff:9d:
bd:2b:4f:f0:66:82:83:be:86:55:26:f7:ed:e8:c4:2a:71:4e:
62:c0:9e:b9:fc:b4:11:d6:cb:d1:47:db:e7:0e:cb:69:0f:4d:
3b:0a:55:5f:d0:99:17:12:58:ff:97:ed:e9:92:98:24:b8:18:
6d:2a:48:ba:19:c2:9d:11:53:fe:37:a7:3e:5b:b4:4e:cb:7e:
ae:a0:5f:f0:33:3f:cd:07:88:c7:9c:5c:73:c5:fd:62:46:4c:
44:56:6b:45:fc:21:dc:ac:4c:9a:fc:0e:40:cb:9a:f6:dc:5d:
da:9a:c3:db:83:c2:a8:15:c4:23:94:df:8e:5b:6b:63:e0:49:
a8:c7:c0:09:4f:ae:53:78:b2:2c:ca:55:ab:20:b9:9c:ca:2c:
21:58:21:b6:24:f0:c8:7e:2b:f4:98:d5:6a:72:c0:ed:75:8a:
e7:d8:ad:78:b7:cb:d8:a7:c8:67:0f:b7:f7:f1:dc:e5:2d:f8:
ef:35:43:f9:b6:fb:0b:a4:14:85:56:c8:6e:1f:96:6e:0d:1d:
da:c5:64:82:76:a9:5a:0f:7e:38:3b:87:30:6f:2d:0c:aa:09:
de:a4:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:33 2025 by rpki-client