Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: s33DYGczPuarwnY0fUn49wCFs7Eg6I4tQaHiSBrCMiI=
Subject key identifier: 18:A5:68:BC:4C:BE:C8:6C:56:C2:7C:88:84:5F:12:57:7B:D4:EA:AB
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 0199FEB4E3F87854E736F7ECEF23FBE1DAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 13A6
Signing time: Sun 19 Oct 2025 23:01:31 +0000
Manifest this update: Sun 19 Oct 2025 23:01:31 +0000
Manifest next update: Mon 20 Oct 2025 23:01:31 +0000
Files and hashes: 1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=)
2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=)
3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: h/QVXT9h7X8JsxGi/d388F/+vlUZQiqQL9QhVikBC3Y=)
4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=)
5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:e3:f8:78:54:e7:36:f7:ec:ef:23:fb:e1:da:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Oct 19 23:01:31 2025 GMT
Not After : Oct 20 23:01:31 2025 GMT
Subject: CN=18a568bc4cbec86c56c27c88845f12577bd4eaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:0e:55:cc:b0:f6:0c:5e:c0:03:cc:78:83:
d6:71:87:ce:6e:20:09:c3:5f:92:a6:59:ac:1c:f5:
56:7d:59:d6:db:3c:29:0f:7d:53:91:91:93:6b:2b:
c9:62:88:d3:b4:c0:82:12:76:24:71:8a:b5:ef:de:
a5:9c:19:dd:ac:fc:c6:bd:6f:f0:6f:85:82:47:ec:
fb:89:8d:a7:0b:96:f5:69:67:3e:a9:65:59:33:6e:
66:3b:6f:fd:c2:f6:ef:cb:7c:a1:f4:12:a7:60:03:
f7:c3:3b:5b:80:71:81:56:3b:fe:5c:5c:84:0a:94:
ef:60:27:5a:f4:73:9a:4b:9d:9b:fa:7a:68:68:03:
44:bd:ea:d8:09:85:13:67:d5:7b:9e:e3:9a:17:70:
a5:24:1f:b2:ff:26:9e:ab:43:af:ba:52:ca:c0:ff:
71:d7:69:95:7f:6e:41:3b:06:47:39:f4:1f:11:97:
79:68:72:ea:c0:1b:25:9c:eb:2a:19:9e:35:6e:f3:
12:dd:1a:3b:65:08:2c:c9:85:a9:50:55:6c:51:77:
6c:d7:e5:6f:cd:b3:5e:e0:09:0e:c1:53:8c:d6:92:
97:43:a1:dc:06:7d:ad:dd:53:cc:dc:1e:18:d1:60:
d7:d1:aa:b5:9e:8a:2d:97:5c:7d:c8:41:9c:9d:46:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A5:68:BC:4C:BE:C8:6C:56:C2:7C:88:84:5F:12:57:7B:D4:EA:AB
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:15:c0:11:f5:36:be:31:c0:21:a0:87:ff:66:21:54:a7:32:
e9:63:45:af:af:51:ed:c2:12:c4:44:80:4c:ad:09:51:ff:b7:
df:c0:22:49:d4:f4:d1:8e:4c:5f:84:a3:24:e5:f5:ec:e3:19:
a2:85:38:78:66:11:8a:7f:70:b5:71:3d:bc:c6:eb:9b:66:67:
1d:93:6e:eb:48:13:be:4a:ff:6c:37:8e:10:15:f2:2e:a5:99:
14:4b:22:65:4a:5d:ae:66:9d:af:26:48:59:ac:78:1e:99:fe:
a8:8c:2c:03:cc:5d:1f:56:38:37:19:ff:67:5f:fe:7a:06:58:
20:14:a5:9f:32:52:cb:17:3f:b7:4c:f4:90:ce:ff:35:17:2d:
03:c9:3e:67:80:c8:9b:1d:6a:95:d1:57:aa:47:e2:4c:eb:c0:
e1:c3:ca:ac:65:27:52:2b:ee:14:2a:73:b7:60:b9:15:0d:1e:
71:26:d0:b0:22:88:5d:83:f5:42:90:e7:e7:42:2b:c9:c9:6f:
58:73:a0:cf:c5:a1:eb:54:db:a2:9a:8c:c4:e6:6e:d4:22:15:
ba:e1:7e:ad:7f:c9:8a:36:1a:c7:7c:6c:b1:3c:af:83:c0:8e:
90:74:50:46:f6:2a:fd:8f:18:0c:21:2c:ed:d3:7b:5d:d0:c2:
89:37:40:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:00 2025 by rpki-client