Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File: KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier: S5jyEQglgt3tEg6GrSaL1LHmXJXo2KVO4PJ/Dq1S6gE=
Subject key identifier: 00:AE:86:6B:84:AD:C6:B0:38:7B:3A:51:A8:55:87:FF:FA:D1:1B:C0
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer: /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial: 0199FE46C9D2CA9F114B49E6BCBFF1F59BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 21:01:15 +0000
Manifest this update: Sun 19 Oct 2025 21:01:15 +0000
Manifest next update: Mon 20 Oct 2025 21:01:15 +0000
Files and hashes: 1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: ZP1C7qscPH9axQRo2s73t+sR6d7WitQuvDOL2dePFS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c9:d2:ca:9f:11:4b:49:e6:bc:bf:f1:f5:9b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
Validity
Not Before: Oct 19 21:01:15 2025 GMT
Not After : Oct 20 21:01:15 2025 GMT
Subject: CN=00ae866b84adc6b0387b3a51a85587fffad11bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:46:92:85:93:e1:c2:84:d5:99:c0:d3:f4:
6c:a2:f3:e5:b4:5c:2a:0f:af:20:bb:d1:4e:ce:7f:
12:c6:fc:f8:5f:c7:d9:cc:54:2a:cf:27:e0:d1:a5:
e1:c9:74:ac:f1:a5:8f:a1:88:60:ba:a8:df:71:a1:
e9:ce:88:a4:f6:6b:f0:18:04:04:68:7d:e8:08:e3:
39:a1:73:d6:96:cf:1a:3a:16:c8:57:a5:3b:50:22:
cf:bf:1e:1a:38:06:fe:15:1b:75:1d:27:b6:10:5a:
d4:3b:8f:f8:89:a9:19:fb:06:17:c0:d9:f6:94:33:
7c:6e:d2:d5:8d:cf:13:e5:a9:19:ad:fd:5a:54:6a:
08:55:0f:f0:78:34:82:8e:81:df:5f:5a:3a:c8:ec:
71:25:f5:66:3c:bd:35:a3:12:58:7e:c6:c1:ef:b8:
c9:84:30:53:a3:89:13:89:cb:8a:a2:8e:d3:cf:13:
d2:ad:20:ad:1d:09:de:3c:34:3f:c9:ac:a5:d2:e9:
e4:40:20:2e:8b:9b:37:61:64:c2:0a:f2:24:2e:46:
ac:db:f4:56:ee:85:ae:fa:b7:44:1f:e8:f6:5a:86:
d6:df:da:4c:3d:22:88:c5:f6:ac:04:36:a1:92:04:
0b:aa:b8:3f:42:5c:58:08:64:0f:54:74:1d:22:d2:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AE:86:6B:84:AD:C6:B0:38:7B:3A:51:A8:55:87:FF:FA:D1:1B:C0
X509v3 Authority Key Identifier:
keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5c:c1:4c:3f:15:a5:13:18:49:57:f3:7e:6a:2d:39:25:db:
f0:25:47:12:4b:ae:7d:31:c9:1f:bc:d6:2c:6a:bd:2f:9c:6e:
be:2b:e0:cc:b8:fa:fd:f7:69:5b:6b:d6:aa:a2:0e:77:06:61:
8c:94:16:33:08:32:ed:fb:d5:64:b8:27:7c:10:db:d5:ec:3d:
5f:ec:f4:c1:55:a9:e8:75:7a:80:84:16:62:a6:0e:f2:df:3d:
c1:04:01:51:64:0d:58:ff:e4:1d:ba:cb:7e:18:07:16:64:e6:
5b:9f:20:f4:73:cf:67:a5:78:c1:c0:cc:e6:71:60:ff:9a:89:
6e:48:3c:5b:8a:8e:e8:19:36:28:c4:d2:0a:90:29:d9:be:d0:
69:65:88:2f:7c:25:25:77:5a:e3:90:a8:32:09:5d:b4:07:06:
97:8e:0c:80:1c:0e:bb:50:20:8e:44:54:df:dc:49:94:72:4e:
d6:c8:7e:12:a7:a0:95:a8:75:51:ea:23:41:45:c2:03:c3:4c:
b9:f6:13:15:43:e0:75:c4:dd:38:10:63:a6:b9:b9:2f:79:ca:
1b:a5:90:68:09:6d:87:74:e8:a4:47:dc:e7:d7:85:58:c7:d5:
ae:b1:0d:53:ca:9c:f4:7b:89:4d:6b:18:55:2c:0b:d7:31:13:
35:5b:d7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:20:36 2025 by rpki-client