Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: bndFwAX6fAGA08An8ypIgNHz53Gc0oLJxMbJHNNrdHI=
Subject key identifier: B1:70:21:0B:C9:43:E9:DE:E0:7F:25:3F:63:D3:2C:AF:34:63:2C:3F
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 0199FEEB9973321FEF20BF2D7EBAFD896D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 0F31
Signing time: Mon 20 Oct 2025 00:01:16 +0000
Manifest this update: Mon 20 Oct 2025 00:01:16 +0000
Manifest next update: Tue 21 Oct 2025 00:01:16 +0000
Files and hashes: 1: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=)
2: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: dGnuf58QxbF9+8u9I9ef8jMdWqo0qDfTYxLZQPaaChI=)
3: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=)
4: oxi_ya_EdBtJCrjY1pYIsNptA_Q.roa (hash: /Rw4xq/Rq6iapjKpArPGVtAk2zVGOyS/eMr3PI823Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:99:73:32:1f:ef:20:bf:2d:7e:ba:fd:89:6d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Oct 20 00:01:16 2025 GMT
Not After : Oct 21 00:01:16 2025 GMT
Subject: CN=b170210bc943e9dee07f253f63d32caf34632c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:37:2a:41:81:38:f9:67:38:1b:aa:66:b1:
46:81:e0:81:aa:dd:97:bc:58:5f:9b:4a:10:68:59:
95:ff:b3:7d:bc:49:72:00:ad:ca:24:3a:a6:b3:d2:
90:88:27:60:e5:5f:bf:4b:31:b6:e6:8f:5f:c9:a1:
75:0c:ed:6a:d6:fc:9e:fb:b1:14:0d:1e:28:f8:ed:
81:50:65:a2:c2:ad:4b:f1:8a:5f:10:62:26:f0:8e:
2c:e4:67:ee:1d:2e:44:04:f3:55:af:fe:30:e9:94:
92:b9:55:a1:6c:de:4d:ce:f9:4e:2e:e2:3f:45:3a:
f4:80:45:e4:b5:6f:6e:1a:9b:60:02:8a:c5:ae:79:
47:86:c6:20:2a:d3:02:7f:ed:83:23:94:a4:71:20:
4f:75:18:1e:47:f2:24:59:7a:ce:0d:90:88:6d:92:
0a:d5:19:3c:ac:63:64:2f:63:aa:89:ed:e1:a0:3e:
fa:08:e7:9f:2e:76:0c:4c:b0:4e:2f:ea:03:ce:34:
01:a4:18:c9:d5:16:16:78:62:7b:b4:2d:46:eb:95:
07:6f:80:ea:8e:4c:20:aa:a3:57:77:d3:a4:7a:b2:
89:a1:94:bb:5d:7e:e9:7c:ce:bd:4f:86:61:e5:15:
56:a5:bc:f6:8f:e1:63:2a:68:c9:51:3c:ec:68:fa:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:70:21:0B:C9:43:E9:DE:E0:7F:25:3F:63:D3:2C:AF:34:63:2C:3F
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:38:78:7c:2a:ae:0b:c8:49:ef:9c:cb:8a:c9:ae:9e:52:e3:
a8:2f:1a:ed:36:1b:b0:0f:a2:4f:ea:90:3a:0c:10:7e:d2:c2:
d1:ee:ff:60:6c:aa:32:89:94:aa:35:fa:6d:54:de:b5:27:bb:
97:2a:4a:68:11:a8:bf:2a:f2:6f:5f:c9:62:cc:db:ad:69:48:
64:a6:dd:da:23:c4:26:90:89:fc:f2:40:9d:e9:2c:eb:2f:30:
df:69:97:53:79:7d:fd:3d:4d:e8:a3:fd:46:fa:35:94:a7:60:
ec:e9:60:9c:2c:68:f6:e2:15:a9:0f:04:2e:0c:58:dd:a0:44:
ee:b0:49:3d:69:d3:0c:4a:88:c7:9a:16:2f:ae:7e:84:7e:91:
07:70:b0:e4:70:80:99:97:ca:c2:28:9e:aa:d8:bf:88:c3:18:
f3:1d:f8:71:6a:ae:14:05:23:bc:8a:a0:36:69:f5:9f:c8:8a:
e4:a8:84:5d:3e:f2:23:55:6e:2b:7b:45:3f:b8:b4:72:73:5f:
09:93:80:e8:71:ef:c9:55:88:b8:ad:58:c2:8f:17:ba:0f:39:
84:cd:1c:f3:d6:d7:95:6a:87:07:9a:eb:0b:f3:23:25:5b:fe:
38:f4:60:3d:b0:e2:27:65:fe:08:40:a8:2c:02:3f:25:82:49:
67:34:84:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:05 2025 by rpki-client