Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: lWe/GrYGYbMqQ7U40Q0CMzL05bkPCJ1MEmTQ6e8rklk=
Subject key identifier: 9E:8D:36:33:2C:4B:CA:D0:EB:A0:BC:46:7B:CC:11:F4:A6:67:4C:9F
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019947E2A7E4F30E54082F34E3676A53FFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 155D
Signing time: Sun 14 Sep 2025 11:01:00 +0000
Manifest this update: Sun 14 Sep 2025 11:01:00 +0000
Manifest next update: Mon 15 Sep 2025 11:01:00 +0000
Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: 3oaOqzfe9mXmWlMDJZ7aWy+T+jjW7NzVHPaoc+Tzbwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:47:e2:a7:e4:f3:0e:54:08:2f:34:e3:67:6a:53:ff:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Sep 14 11:01:00 2025 GMT
Not After : Sep 15 11:01:00 2025 GMT
Subject: CN=9e8d36332c4bcad0eba0bc467bcc11f4a6674c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ce:31:85:39:2b:f6:82:28:3e:88:6e:75:60:
c6:b7:ee:77:a0:6e:5c:5e:63:97:3d:3a:63:58:93:
4d:c8:f7:6a:8a:24:70:dd:14:5e:70:76:5c:ca:1e:
e8:dd:74:68:d2:27:f6:96:d1:29:bc:06:73:88:2e:
03:56:69:28:ba:5f:53:fe:00:1b:05:9c:21:d7:ea:
dc:29:f6:94:10:84:af:67:b3:e4:52:b5:c0:cb:aa:
ad:04:61:7e:14:59:1a:e5:30:1b:a3:ee:65:db:21:
97:e0:96:27:28:dc:98:57:66:c1:f8:b1:5c:89:42:
20:a6:d3:4b:a1:ed:d2:74:42:b9:6f:3c:aa:fc:89:
4e:6a:72:ca:1b:db:c0:39:93:bd:fe:43:ed:4e:38:
e4:60:f2:a7:39:09:89:76:9a:37:6e:72:81:3a:08:
33:2c:22:d9:dc:b9:b6:6f:e8:44:cc:7d:af:6f:70:
1c:5e:fd:ad:ce:2f:c4:b9:1b:1d:bf:b8:81:ea:53:
9d:5d:90:b3:f1:5f:07:83:9a:d5:1c:eb:76:d9:1a:
23:2c:95:76:fe:4a:77:2c:d7:9f:37:31:d2:3e:9c:
07:8c:2e:0b:ab:d4:f4:ee:90:14:c4:e8:64:8b:6d:
db:5c:cc:22:93:79:87:e7:ee:6a:2a:02:82:b8:e4:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8D:36:33:2C:4B:CA:D0:EB:A0:BC:46:7B:CC:11:F4:A6:67:4C:9F
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:76:12:68:8a:95:28:09:95:91:63:f0:64:dd:b8:ee:ad:73:
68:5e:4b:e8:7d:58:64:f2:12:8c:94:cd:4d:0e:c9:83:8b:f1:
78:8c:c2:5f:79:38:34:3c:e7:7c:7b:61:31:df:b3:d7:4b:92:
d6:ba:d8:7e:d7:af:9d:ec:2e:6e:54:95:41:e9:55:a7:4a:de:
47:05:70:e3:88:1c:85:c2:8f:45:a5:5c:0d:5f:a9:76:9d:f2:
ec:b0:78:77:84:6e:41:c7:5b:8a:73:cb:8f:cb:4c:26:40:d7:
db:a9:ba:13:c5:cd:cf:19:ae:c4:b4:8a:87:ca:3d:9d:5e:e8:
7e:74:39:1f:ca:ac:58:9a:eb:03:c3:61:b7:b6:83:73:6e:43:
f6:8b:f2:ec:1a:59:3e:a8:94:be:61:32:90:1b:09:7a:4b:ed:
3d:87:7d:93:75:b0:38:17:7c:27:05:3a:4f:8c:73:b2:76:e9:
82:20:f5:95:fd:a2:1c:0b:71:ba:6e:bc:27:9f:8c:5e:a2:72:
7d:b0:fa:6a:85:80:f0:ed:fe:97:2b:9f:6b:05:84:c6:32:6c:
b8:da:97:18:1a:72:ad:06:12:8f:13:d0:18:36:44:bf:57:8c:
c2:1f:1c:28:43:a0:46:35:e1:e4:70:01:d9:55:7e:07:b0:05:
1d:f1:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 12:25:00 2025 by rpki-client