Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File: klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier: Xe2hiU74Op1qyKuBu8Ck6Lz4H+I51bAl8ql/TLYvzLc=
Subject key identifier: 1A:E4:65:12:12:9E:CC:C4:F1:6B:B4:36:BF:97:CA:B1:E2:80:F3:76
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 0199FE1011267469152677B352489DC128F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 20:01:29 +0000
Manifest this update: Sun 19 Oct 2025 20:01:29 +0000
Manifest next update: Mon 20 Oct 2025 20:01:29 +0000
Files and hashes: 1: 0cwv1kps50n5fxH17jZ6DrIm1N0.roa (hash: undM2lyLTll3NMITFEXa/JcW5GP1KelrAOfh7Rau6zQ=)
2: DFcDai4MmMP-4I9ZmvHSmiuuiVo.roa (hash: P1EgClV7bkG9omjLGc5Uu3/ShqO9L3Dji7Yyz/EuHLk=)
3: V_xEHpefO5u5KSTu-XYSWan-kRo.roa (hash: jYILx7U+IDJR4gLw2si3w1xLilgSY3Xi257sg6Z15eA=)
4: Z26jB8MmkVPCobutKSYkZRRffSw.roa (hash: jtYR3qZJ5WEi/+pEZva2m9kUb9g5HMevovBDi8SuUfU=)
5: e1u7bA6PuDBeHm9U9nKjSLDhACw.roa (hash: DvBt+9eFN/dfM+tx+F5jn+yDWZNZsODtMhC5M+LFI08=)
6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: g9oOH+V4GzY1QkRlZBXG+I6vnCPeFh4OHFgdVLCLAdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:11:26:74:69:15:26:77:b3:52:48:9d:c1:28:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Oct 19 20:01:29 2025 GMT
Not After : Oct 20 20:01:29 2025 GMT
Subject: CN=1ae46512129eccc4f16bb436bf97cab1e280f376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:9d:7b:f9:a7:bc:7a:24:fb:7a:a8:16:a5:
fc:2e:b3:d1:92:05:57:a3:99:f1:45:7c:51:4f:d7:
8f:85:2b:08:c7:a5:54:57:c8:ef:3c:7b:6b:89:72:
a7:54:9d:98:ab:bc:51:f6:d9:d9:73:fa:33:a1:39:
27:59:b7:b2:06:7d:3a:c2:42:d5:02:3c:35:ed:17:
e4:af:af:db:77:53:fc:75:00:7c:c9:5d:85:a9:15:
c9:9f:e1:22:37:87:0a:89:cd:e7:a6:a9:74:40:05:
46:64:83:cc:63:9a:57:5d:fe:8c:24:0f:b7:07:4c:
c4:8c:06:10:b1:b0:c5:2f:89:03:69:8b:4f:3b:25:
7f:33:55:7e:3b:19:3e:a6:cb:13:e3:17:09:25:d6:
3a:01:bb:b6:e3:12:9c:ea:88:86:c1:72:ba:c1:10:
5b:1d:c6:d5:f0:48:f1:af:ee:20:ea:b2:eb:a1:c4:
6b:f5:b3:e8:5b:dd:11:62:14:f7:50:33:76:ac:fc:
84:93:f3:13:ee:80:0c:12:b3:bc:6d:9c:db:c0:61:
c3:df:77:85:27:d7:0c:73:b4:0e:40:0e:c0:82:84:
5a:33:f9:e4:56:22:e3:6b:99:2c:cc:e8:89:ab:5c:
96:00:3f:03:30:ca:ee:33:d9:a4:23:4c:40:cc:ee:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E4:65:12:12:9E:CC:C4:F1:6B:B4:36:BF:97:CA:B1:E2:80:F3:76
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:f9:30:01:d8:e6:b4:45:1c:be:fd:bb:8c:0f:ee:84:43:
46:14:83:80:84:c0:de:50:19:36:4a:f5:d2:00:52:af:96:66:
e4:f9:db:39:a7:64:f4:14:14:8c:20:ef:a1:db:a2:e2:87:9d:
4b:69:9a:92:94:b8:b7:6b:ca:d0:62:2b:85:9d:4f:1b:c2:70:
dc:5d:c5:2c:2a:cb:f1:67:0f:33:de:96:70:31:25:39:b8:f9:
bc:58:df:b5:02:15:eb:e4:83:01:c1:55:3d:48:9e:7d:f6:c9:
7a:96:48:25:dd:2d:5d:d3:36:99:4f:5e:45:55:53:07:bb:4e:
d2:65:b9:fe:b5:1d:c7:a1:a7:ae:fa:25:ba:4a:bd:93:30:e5:
fb:30:da:74:f7:a1:1c:cf:f2:fc:c9:48:b2:6d:d1:c5:ab:24:
1a:a3:4e:63:40:a0:5a:b5:24:6f:c8:2e:88:13:8c:32:6f:b3:
43:fd:e7:24:3c:db:10:05:76:ca:cc:6b:5a:18:26:3b:11:88:
6a:a7:7a:54:0a:81:16:d5:13:83:02:35:ec:30:06:f1:51:92:
60:0f:c8:6c:89:fa:16:75:51:55:4f:16:09:13:b2:4c:57:22:
0a:1f:b6:de:6b:ca:d8:52:b1:78:94:08:07:33:9b:a4:89:96:
a4:3e:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:50:00 2025 by rpki-client