Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json)
Hash identifier: MB4mPEraOuow3todf2HSxmCMCR/wOHwJ4NaqadEyelg=
Subject key identifier: 34:A3:68:13:6F:AD:48:12:39:42:3D:29:6B:D3:B4:56:8F:93:9D:F4
Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
Certificate issuer: /CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Certificate serial: 0199FBEB92E94BFA921146C0AEE1F5D26DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
Manifest number: 13DE
Signing time: Sun 19 Oct 2025 10:02:23 +0000
Manifest this update: Sun 19 Oct 2025 10:02:23 +0000
Manifest next update: Mon 20 Oct 2025 10:02:23 +0000
Files and hashes: 1: CXJP9kYgvGSt4VoYKuQPShczMME.roa (hash: gqOSApFpGsIytyW52e0emdHCeVR15916QBJkj7VrVD8=)
2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: pI/UU+bsrnre+pC0t/2LNJWKCpdtbCwz4JMtm/gfkJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:92:e9:4b:fa:92:11:46:c0:ae:e1:f5:d2:6d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Validity
Not Before: Oct 19 10:02:23 2025 GMT
Not After : Oct 20 10:02:23 2025 GMT
Subject: CN=34a368136fad481239423d296bd3b4568f939df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:8e:1d:96:bd:1a:88:4e:15:f2:30:83:a1:
f0:68:15:0e:91:91:0c:67:46:04:ec:f0:92:b2:ef:
22:be:94:dd:08:b9:c8:64:1b:c1:3c:94:72:51:47:
0c:4b:88:e1:12:d8:a8:ef:06:5f:60:97:72:84:70:
49:42:89:f3:22:98:61:78:14:9a:d8:71:79:b5:95:
40:76:63:05:8c:3c:b5:94:ed:0f:f0:e8:d8:0b:06:
bf:7d:3c:c9:ca:d4:0e:42:44:bc:be:65:ca:7e:cd:
50:d9:f8:aa:cb:5f:8b:c6:40:ac:8f:fa:c4:f9:fe:
aa:9f:4d:92:53:96:5d:53:31:96:0d:72:b2:c4:7e:
66:19:e7:53:5e:23:17:01:95:c8:d5:fa:46:74:43:
19:e8:cf:d9:60:c3:eb:59:41:21:d4:94:b3:60:4e:
74:c9:38:9c:e9:9c:9c:6d:41:92:72:1c:89:6c:2b:
84:22:ea:5a:39:e8:97:1b:de:1f:1b:e3:1a:e9:60:
eb:dc:f1:42:db:be:85:3b:90:20:f6:04:a6:25:65:
8a:77:a9:fb:0c:1d:54:0c:c6:3e:58:fa:cb:76:35:
2d:71:af:a4:70:a3:ef:68:bf:04:16:14:d9:83:6f:
af:78:c8:64:bb:d1:a6:95:3d:d5:08:f4:37:dc:55:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A3:68:13:6F:AD:48:12:39:42:3D:29:6B:D3:B4:56:8F:93:9D:F4
X509v3 Authority Key Identifier:
keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:b1:bf:db:24:c4:d2:1c:de:78:12:97:b2:1c:7d:af:bf:23:
e5:d2:22:2c:fa:48:56:33:41:12:da:65:d9:83:ea:91:a9:6e:
ff:2e:c7:dc:be:b1:d3:47:a3:03:e0:41:85:0c:62:16:f3:c4:
dd:a0:c8:9d:b9:aa:5c:7c:f5:a4:7e:66:53:6c:96:7a:6b:07:
c2:00:ba:64:a1:c2:aa:55:f2:7f:11:72:c3:da:d4:40:b2:60:
c8:18:68:6d:b7:bf:ea:29:7c:e8:2a:90:50:cf:98:44:b6:26:
f2:20:24:a9:b3:1f:d7:9e:e0:bd:1c:83:00:b0:e9:e7:42:2c:
66:7e:75:e7:18:68:c6:12:9e:df:de:4a:66:28:77:f4:39:96:
51:5d:37:66:16:a6:59:56:47:0a:45:d5:ee:d9:ac:89:b5:fe:
33:f6:eb:2f:85:ab:36:2e:89:b5:97:fb:09:4d:24:9e:46:b0:
17:3a:02:dd:fb:35:8f:5a:54:97:21:9f:82:e3:ad:28:84:e7:
26:7d:e4:11:59:9d:a7:a3:4a:06:2f:fe:e6:a9:60:d2:cf:e4:
58:d8:c9:37:50:14:04:7a:bc:c1:0b:06:f3:cd:54:ab:a2:02:
0c:8e:d7:39:fc:a6:0c:ca:92:0e:77:d1:38:93:7c:8d:7d:15:
86:09:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:46 2025 by rpki-client