Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: /7a/5bUbsNNZCgKdc/KHI7CboBwzfDfVk/3VpuX9dag=
Subject key identifier: 9D:75:B2:56:F7:EC:87:6B:6A:D2:DD:72:5A:81:6B:F8:B2:7D:DB:59
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 0199FB0F08948B9855164A76CF778405BD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0F32
Signing time: Sun 19 Oct 2025 06:01:30 +0000
Manifest this update: Sun 19 Oct 2025 06:01:30 +0000
Manifest next update: Mon 20 Oct 2025 06:01:30 +0000
Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=)
2: V7lXlsc_KCrBF5PGRWvxEoDs1jE.roa (hash: 3HSkq2ZQ4Tv+kukR6Ld2lDKWo32adQgvx+S4uGpggoY=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: AG06fgH0ncy32DmJ9tbgIdiV1qggNJNd490hgtBwJ8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:08:94:8b:98:55:16:4a:76:cf:77:84:05:bd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Oct 19 06:01:30 2025 GMT
Not After : Oct 20 06:01:30 2025 GMT
Subject: CN=9d75b256f7ec876b6ad2dd725a816bf8b27ddb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:70:ae:a2:76:bf:eb:d2:18:40:17:d1:7b:
72:2a:16:62:d0:2a:24:30:52:d5:d1:91:ca:ca:5a:
bb:19:4b:92:2f:6b:72:81:fb:86:2f:26:f7:92:b5:
20:52:fc:73:6a:76:fb:82:5f:6e:5a:b5:49:a5:cc:
c5:db:4d:6f:5d:4e:50:bc:97:fb:b6:8c:c6:e7:04:
fe:41:0e:d1:4c:c5:96:e9:45:07:5f:1f:31:8e:8d:
6e:07:67:2b:61:1f:6a:47:22:97:02:ac:2a:c7:1b:
cc:44:2f:7f:de:96:06:55:dc:2b:ce:15:ef:e5:72:
aa:15:25:67:63:3d:8e:0d:24:cb:84:ee:a1:70:2e:
c6:35:b4:ba:9f:1e:da:a6:e3:f6:b2:89:43:84:2d:
b9:f4:37:10:3d:b3:b9:0e:44:96:45:49:10:13:32:
d3:33:1e:15:96:18:b9:ce:7c:a1:1d:9d:df:5a:cd:
8a:21:cb:47:3f:ea:2b:43:7f:61:b9:ca:ae:9c:04:
4e:84:c6:6f:17:f5:8d:a8:56:0f:6c:d5:6a:e9:4d:
27:5d:0c:a9:2e:d3:c1:f1:d5:29:6b:24:de:4b:e2:
97:87:fa:2f:70:6c:4d:77:21:3c:2d:b8:81:58:a2:
26:e3:07:33:97:bb:3e:50:ac:b4:7c:7c:f8:d9:fc:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:75:B2:56:F7:EC:87:6B:6A:D2:DD:72:5A:81:6B:F8:B2:7D:DB:59
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:bc:46:70:51:22:d6:fd:3e:03:d7:ac:85:ec:23:00:fc:bd:
6f:50:b9:c8:92:65:5f:b8:38:2e:f5:3d:57:85:0c:5a:e3:58:
e1:92:41:0a:3c:5d:4c:2d:d2:60:cb:ba:eb:e2:93:3b:ed:a3:
a3:82:e8:79:9e:50:55:45:cb:a6:93:54:77:3e:ad:e5:f2:c3:
93:56:43:6f:c6:91:e4:4a:9f:29:68:a8:aa:02:ce:56:62:3e:
fd:76:6a:f9:be:64:3b:06:36:39:3c:e5:c6:e7:a4:51:bf:61:
3d:65:d0:17:d0:75:44:f6:e8:7c:86:e9:b5:0d:d0:ad:b4:85:
d5:84:86:bf:4c:63:c3:2e:47:7f:e7:a5:2a:06:95:fd:4b:66:
12:8d:d0:20:cf:11:fb:43:30:9f:5b:7a:1c:9f:3c:e9:dd:16:
d4:e5:74:a2:0c:ca:9a:38:12:fa:ec:89:17:c3:78:4f:2e:89:
5d:1d:89:2d:de:71:ae:46:4d:4e:ab:47:02:21:a6:52:7e:4f:
80:7a:6d:ef:63:15:cf:56:63:d9:46:89:52:a4:f0:d2:ff:bb:
2b:eb:24:8e:71:ac:fd:ea:4a:9c:55:2e:a5:0f:19:11:4c:9a:
6d:59:e1:fa:f8:9f:5f:77:f4:f5:72:75:c0:ae:96:ae:fa:10:
c9:fa:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:35 2025 by rpki-client