Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
File: kmhshS82--n8i-d8QJtSJqbuVNU.mft (raw, json)
Hash identifier: qmUy7L9oBRMU/48sN75ui95RzNRteuHjPqtOdM5Tlbo=
Subject key identifier: AD:1C:B3:72:80:4E:45:5F:62:D7:54:E9:DA:0F:77:4B:98:24:4D:A7
Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
Certificate issuer: /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Certificate serial: 0199FAA15907AB8EC24C09EA6793B4F388FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 04:01:42 +0000
Manifest this update: Sun 19 Oct 2025 04:01:42 +0000
Manifest next update: Mon 20 Oct 2025 04:01:42 +0000
Files and hashes: 1: IvJ7HvT-6tCK5GKbaPNyk54ml9M.roa (hash: 7zWh/VLAgd5GsVxZJpmQ4YamOZV0jGAf5fVHM29zO30=)
2: kmhshS82--n8i-d8QJtSJqbuVNU.crl (hash: zSJ1RZMCLpolEuZfNXH0+C9i/XUCKkjv9HrGMCrwrgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:59:07:ab:8e:c2:4c:09:ea:67:93:b4:f3:88:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Validity
Not Before: Oct 19 04:01:42 2025 GMT
Not After : Oct 20 04:01:42 2025 GMT
Subject: CN=ad1cb372804e455f62d754e9da0f774b98244da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:3d:33:a6:ee:3f:bc:c9:95:a7:89:bc:bd:
68:60:fb:93:c4:76:ed:33:eb:8f:26:d9:bd:7b:34:
9e:bf:e5:03:42:7a:d4:4e:fa:59:76:f5:a7:da:26:
81:04:43:40:fc:56:dd:17:8a:ef:05:25:4f:c9:97:
2e:99:2d:33:47:48:07:92:0a:96:cc:76:1f:e2:8e:
c7:b4:c7:8a:8e:8e:a8:9e:19:a4:7b:1a:49:05:c2:
7e:a1:ec:ff:7a:7f:af:14:d8:ae:b7:53:24:27:f1:
b0:9c:6d:c2:8f:d8:70:92:6b:3a:1e:fa:ad:44:4b:
80:94:32:96:15:fd:87:40:c5:92:09:38:e0:77:3f:
03:d5:2d:62:09:4b:39:a5:1f:c6:60:01:71:a4:ca:
65:54:95:c1:5e:3f:ee:bb:3f:ae:b4:57:74:38:70:
64:b8:71:8f:c0:fc:45:bd:14:e0:18:da:f9:eb:10:
7c:e1:2a:e4:cc:ff:a9:70:12:de:1e:d6:68:46:ca:
d2:8d:78:43:c2:5b:28:9f:7f:2c:96:3a:f2:1c:7f:
de:99:21:f6:ae:0a:2a:4d:17:82:1d:65:30:4e:b3:
42:73:ca:e4:d6:f0:f8:54:4c:55:a9:a8:83:84:d9:
92:70:03:43:2d:bc:7a:39:ab:61:a4:d4:34:44:99:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1C:B3:72:80:4E:45:5F:62:D7:54:E9:DA:0F:77:4B:98:24:4D:A7
X509v3 Authority Key Identifier:
keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:47:6b:05:c6:28:5c:76:17:99:dd:89:50:b9:90:cd:50:dd:
34:d8:ab:0d:eb:2d:2f:60:7a:fb:84:21:05:e8:17:18:bb:92:
c2:d8:dc:af:ac:5f:c1:67:9f:f1:7b:56:b3:15:09:9f:98:15:
c2:48:74:f5:0b:a3:39:06:cb:48:3f:81:3f:56:50:12:af:f8:
37:58:e3:22:ca:ae:68:a3:d8:2f:fd:96:13:7b:28:f1:43:24:
95:ed:4b:c1:39:aa:bc:2a:f2:92:71:89:c7:15:13:d2:29:55:
73:26:07:5a:c1:72:d6:3c:d3:24:91:dc:36:d2:ac:64:c3:e1:
b4:4f:f3:37:87:95:ae:6b:3e:bd:33:c4:4c:d4:c6:d2:c9:19:
b4:6c:d0:2b:a1:59:d4:8c:2b:5a:32:db:dc:cd:dc:3e:3e:a2:
4a:c2:c8:d0:a1:c6:8c:61:69:cb:82:76:28:15:62:36:72:2e:
7a:fc:88:b8:2d:2e:63:a1:ac:8b:24:37:99:9e:26:6d:1d:c5:
97:1a:9a:18:9d:76:30:57:ab:fb:96:af:2e:ed:0d:e4:0a:a8:
6a:8f:26:81:0f:52:a0:26:b1:27:fb:fa:0c:ef:ab:6e:bc:51:
ba:08:e7:9c:dd:1f:40:85:63:9d:30:f1:a5:2f:00:9f:95:50:
86:56:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:51 2025 by rpki-client