Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: as2zm+7fay127sTDG+pCBnFiBNjubVYoDfm3/91k7D4=
Subject key identifier: B7:65:30:2F:48:C7:3F:39:6F:55:D5:CC:2D:E0:45:A1:08:18:02:B1
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 0199FC588ACB1E55B03966BE81AFF87AD95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 164B
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (hash: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: e0TooQYK1jw3EG7fpX7ZxlesWf8gJbb0c87fUj9DbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8a:cb:1e:55:b0:39:66:be:81:af:f8:7a:d9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=b765302f48c73f396f55d5cc2de045a1081802b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:4d:b6:03:43:81:02:d0:f8:db:cd:0e:c5:
07:49:8f:79:5b:0d:42:c0:b4:c2:a0:2b:20:2a:01:
e3:0a:7a:ed:13:ad:7b:b2:9f:91:56:80:ca:d9:8d:
4f:3d:15:c8:d1:3f:c7:8b:80:b2:d5:c3:51:cc:ce:
08:f0:e6:a0:6a:78:d6:57:b4:66:3b:a4:ff:2b:97:
78:d8:84:7b:12:20:0d:b2:32:d8:c9:19:2b:3f:af:
f8:20:f2:30:1d:83:66:24:3b:7f:9e:08:e9:4b:4b:
f6:fb:65:2a:25:0c:16:4e:39:a8:e7:f3:5c:0b:88:
ae:5c:2b:48:51:98:0d:77:2f:42:6f:60:33:9b:db:
a5:24:12:33:48:70:4a:80:57:f4:5b:e4:7e:ed:fa:
61:0f:c2:b6:51:10:bc:36:73:77:36:0f:01:1a:5f:
24:5c:23:c7:81:12:40:fe:56:91:b7:49:e0:6a:4b:
1d:75:6b:a1:d0:ef:9c:96:db:b6:cc:02:64:d8:4f:
10:11:b7:66:6f:24:a5:20:3a:22:55:ad:60:ce:de:
8d:eb:4b:c7:c1:42:cd:26:8b:b5:be:ce:72:06:ba:
08:c0:f8:df:f1:12:41:da:00:23:42:a1:10:d2:5f:
ef:b2:f5:70:b8:bf:2b:15:fd:69:13:52:e4:f4:d3:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:65:30:2F:48:C7:3F:39:6F:55:D5:CC:2D:E0:45:A1:08:18:02:B1
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:86:56:f3:f0:20:d7:1f:6f:a9:74:f1:13:a7:c4:4b:91:82:
16:11:b3:80:4b:7b:46:5d:14:95:71:98:22:dc:44:73:d9:4d:
7b:0c:fb:fd:e7:ca:ac:f2:f6:8b:c1:e3:ab:fe:c0:1d:2d:b3:
23:a9:71:cc:5b:9f:1f:83:17:d4:5e:c7:54:0a:cc:e5:f8:f0:
96:3c:f2:83:9a:24:3b:aa:14:0d:09:ef:91:14:60:29:85:5e:
8c:53:45:76:49:40:d5:ed:a3:8b:dd:14:6b:26:4e:94:00:b5:
f9:6e:f5:41:ce:fa:eb:64:c4:f6:16:8c:68:01:a4:84:33:65:
a5:5d:87:61:d3:56:28:15:ba:97:b9:20:7c:fa:a3:83:75:b4:
3b:0a:c1:13:38:27:d3:be:9b:59:68:e3:ee:12:32:cb:f3:66:
02:6f:f6:62:ad:84:6a:78:87:23:e3:5f:dd:34:b1:e0:bd:d7:
fd:53:0c:2a:5f:82:df:bc:12:47:12:ef:74:47:1f:4f:cc:e6:
0a:12:dd:99:1d:e1:87:0e:1b:7f:af:61:fe:76:fc:a3:79:cf:
46:33:30:9c:b3:a6:4f:74:73:43:0c:1c:d7:93:22:a6:e9:6e:
ca:eb:40:31:38:0e:ba:22:69:3b:af:00:1e:63:18:f0:70:dd:
de:5d:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:39 2025 by rpki-client