Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: 9Y6SaR1/bRIQeGaoHXhpRPm44Ei9VoGBD5mlQeaq9ko=
Subject key identifier: 55:D1:C6:CC:9C:6A:2F:7B:02:CE:AD:4E:E7:E6:A2:D2:30:E6:93:B5
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 0199FC586516863580CAA810E5C77F61B2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0C04
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: KfwESDdv3nbcYyNIQh9idsuZfog56ogm5IYAX5esdr0=)
3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:65:16:86:35:80:ca:a8:10:e5:c7:7f:61:b2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=55d1c6cc9c6a2f7b02cead4ee7e6a2d230e693b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:57:b3:1b:e6:8d:f4:e6:d8:31:ec:c2:a1:
91:d0:f7:62:76:1c:d9:ca:ed:8b:88:ad:9e:a2:14:
4b:1c:60:85:b8:b5:5f:bf:08:bf:55:f2:b1:1a:a4:
af:5f:22:4c:76:8c:82:86:8e:46:ff:e4:1d:97:8d:
38:6c:be:01:5f:de:8d:75:2b:b2:56:55:c2:ec:da:
0d:4b:4a:4f:28:ad:47:ab:41:1d:9b:3e:76:4c:88:
9c:cd:81:78:93:a3:42:fa:24:02:07:d1:d3:0d:e6:
73:75:4d:98:ac:b2:49:46:00:fb:fc:a2:a6:c6:68:
09:69:15:f4:69:5d:54:f6:fe:8a:8c:88:b2:ca:0c:
93:27:29:3b:9b:ea:81:48:0e:69:fc:24:fc:d2:c4:
5f:7d:01:72:4d:ff:01:18:ec:7d:d9:9b:64:b5:dc:
6a:00:34:ab:ed:77:34:f6:b1:5c:be:75:ac:e2:ee:
af:ca:62:b7:0b:85:e8:2d:50:f9:ff:9e:db:8e:f0:
b9:8e:6f:f3:dc:b3:20:82:95:6e:4b:ae:15:67:b7:
6a:64:d2:4a:4f:8c:3f:10:f9:f6:30:2d:60:83:7b:
7d:0e:89:43:fb:e8:4a:dd:c0:0b:b4:4a:67:4c:49:
46:4a:3f:f7:f2:25:8c:e9:8e:60:b9:78:27:8d:45:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D1:C6:CC:9C:6A:2F:7B:02:CE:AD:4E:E7:E6:A2:D2:30:E6:93:B5
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2a:24:62:54:45:5a:66:e1:78:2e:4e:27:03:a7:64:a0:e8:
d1:02:7b:19:63:4d:48:9a:fe:a8:b9:12:e1:38:2b:8f:1b:f5:
d5:7d:09:90:2b:5e:0d:3d:2a:2b:c4:61:49:f5:3a:71:31:93:
69:02:09:3e:7d:b6:1e:7a:c4:4d:a8:16:a7:19:96:ae:9d:b0:
98:f5:54:e4:84:75:b5:cb:b4:f3:06:e4:db:70:8f:fb:65:07:
19:ad:d1:2a:1b:df:b8:9c:10:c3:ec:dd:a1:94:02:7b:5f:e3:
04:b7:57:ad:30:9e:b3:f1:ad:83:55:02:b5:67:62:69:99:f5:
18:4d:ed:ef:9a:5f:32:85:fa:70:be:7c:8c:32:65:52:fb:dd:
c0:f2:e0:00:91:fa:08:b6:27:48:6f:40:8d:b0:10:55:6c:47:
63:56:8c:c6:9c:49:5e:55:64:11:4b:47:6f:cc:e6:0a:6f:52:
16:8f:66:4f:c3:07:75:1c:16:ee:a2:b2:5e:12:9b:91:01:19:
90:dd:43:96:48:77:68:06:d3:b4:a1:7b:1d:d9:74:d5:4a:1e:
82:c3:3c:94:03:c4:71:38:5e:a5:9c:ec:05:4f:2e:b4:16:40:
14:ac:1a:e1:52:c5:af:16:c2:4f:b5:eb:fd:6d:4c:53:d1:38:
56:13:92:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:11 2025 by rpki-client