Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json)
Hash identifier: VyP6TR8lStUEij7HiNIDZqXFUFzgCy5njQUSCjkAx+Q=
Subject key identifier: 02:51:69:D5:9B:8C:74:10:EA:14:3E:22:84:49:6B:A6:91:F6:15:D7
Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Certificate serial: 0199FC2178426A3982B67676AA1514480CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
Manifest number: 01CD
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: EJij4b5tXcMHreEwXaDPFHiUPSY.roa (hash: 1zvQlqg1XnwbTr3tDDEsxM/UclGY5wHW7JBqKQIRxus=)
2: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: bi4LAMDvU0VmK0FZfK6RWlc0o927JjwNTwOvtUpF25A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:78:42:6a:39:82:b6:76:76:aa:15:14:48:0c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=025169d59b8c7410ea143e2284496ba691f615d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:0a:4d:c0:f9:ac:ca:07:e9:22:4c:5d:22:
74:cc:f9:0f:8d:4e:0d:d9:9d:3c:a2:06:c7:11:e2:
10:aa:8f:31:d1:2e:40:b0:3d:76:f3:83:de:d5:36:
42:24:76:b7:0a:d8:a1:c8:64:33:ca:05:df:26:a4:
43:22:33:33:dd:a8:32:5e:3a:c9:b3:b4:00:57:5c:
b7:12:b4:a2:fb:3f:68:59:42:d4:b2:fa:33:4a:eb:
53:fa:ad:a9:3d:7f:a7:c3:0d:42:e3:26:10:76:0e:
68:ad:4d:db:5b:a7:3a:5d:f2:3c:5d:19:7e:aa:ab:
52:82:8a:0f:a8:93:a1:f1:35:cd:bc:f3:ac:46:3e:
70:fa:74:60:2f:a4:d2:6e:6f:4d:ae:2e:c4:b0:1b:
b8:72:79:70:4d:19:31:0c:61:97:be:a0:65:91:fc:
ea:e4:37:a6:ac:80:80:1a:f2:8e:58:ca:03:c3:42:
2a:64:ee:26:fb:35:83:c0:c7:cf:88:23:48:b5:21:
ae:21:8a:e8:7d:a1:99:c1:e7:fd:bb:fc:20:bd:62:
3f:10:7f:dd:f2:db:31:e6:f2:f8:91:e1:03:d7:31:
32:f9:69:62:eb:ee:e4:e4:38:c1:91:fa:cc:36:a1:
25:71:cf:12:61:e8:cd:c1:50:c4:0c:c2:ee:37:e0:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:51:69:D5:9B:8C:74:10:EA:14:3E:22:84:49:6B:A6:91:F6:15:D7
X509v3 Authority Key Identifier:
keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c9:7f:fd:5c:44:44:be:28:79:7f:21:81:bd:fa:d7:19:13:
fa:b2:27:33:b0:86:e3:ea:34:c6:6a:af:e7:ce:37:35:73:89:
c6:c2:d3:65:4e:0f:74:37:75:af:eb:89:ef:bf:e6:20:16:06:
86:cb:a7:1b:1c:0e:d2:2f:32:01:fc:cf:8c:67:0d:f2:f3:ea:
92:ab:52:88:64:16:7c:7e:55:c2:39:8b:38:ff:93:a0:46:58:
4f:02:90:e0:8b:68:f8:81:f2:85:0a:82:9b:38:15:17:87:d6:
ae:1c:c3:26:1c:5a:d9:31:f4:6a:8e:31:12:38:68:6d:89:65:
bf:01:dc:8f:b5:3e:fa:e4:e1:a5:c6:ae:75:17:82:f0:44:a6:
ae:38:9f:1a:fa:91:82:b3:5b:87:7a:7b:ef:3e:f8:08:73:bf:
de:ce:2d:68:63:2b:45:6f:40:bb:84:b2:b8:b3:67:4a:62:0f:
97:a5:bb:1f:1b:56:ae:2a:35:99:2c:30:9b:e4:20:54:dc:2e:
f2:ab:88:34:63:e0:80:6d:86:08:49:88:bc:4d:80:16:4b:64:
b5:62:a0:49:00:ab:60:1c:6d:1c:10:e0:c5:2f:3a:8f:13:c2:
b1:5c:e8:b6:75:85:9f:87:01:d4:ff:17:b0:85:20:2e:04:77:
f1:09:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:33 2025 by rpki-client