Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: GJIzgPiGg5J8gc5AUPoSgLLzHMJ3AwGOcFI0iJZdVkg=
Subject key identifier: 31:61:A0:74:51:DD:12:6E:27:C8:98:75:BC:37:5A:33:B8:DA:3A:64
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 0199C569E2C313BB98F789F8A647C87F2C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0BE2
Signing time: Wed 08 Oct 2025 20:01:14 +0000
Manifest this update: Wed 08 Oct 2025 20:01:14 +0000
Manifest next update: Thu 09 Oct 2025 20:01:14 +0000
Files and hashes: 1: FCRIl5Vt1LPdQ6IrZpaUR6T2zRk.roa (hash: dI7TXuZLS0+y6udtXa2yol0ikupwyIZAlaHrmt/VDI0=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: WzHeUNM/JBKsxlWJjD5kCKQ8MPLueFWem767w+QBemA=)
3: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (hash: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:e2:c3:13:bb:98:f7:89:f8:a6:47:c8:7f:2c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Oct 8 20:01:14 2025 GMT
Not After : Oct 9 20:01:14 2025 GMT
Subject: CN=3161a07451dd126e27c89875bc375a33b8da3a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4d:d4:8a:35:78:c5:d3:c9:8e:31:e7:ee:31:
cd:83:fe:fa:d8:f7:e1:b2:8a:95:ad:4a:3e:f2:de:
b9:07:03:99:de:6f:f9:c8:01:c6:50:bb:a5:93:62:
53:e5:56:ca:38:45:43:aa:4b:9b:1a:7a:70:9a:64:
c9:31:ad:4f:c0:92:26:b0:46:3a:4a:d3:78:cf:17:
0f:8b:55:15:03:b9:18:1b:fb:30:18:37:d7:8f:9c:
46:4a:84:3b:64:be:94:bd:f5:f6:f3:b6:b9:76:62:
58:e2:12:43:a3:84:3d:f2:fd:3c:e7:0f:6e:70:30:
28:f6:6e:99:4b:6e:5e:2e:c1:56:64:ea:ec:bd:4d:
e5:ad:b3:77:3c:94:22:54:ad:24:9f:28:48:86:7a:
46:3a:cb:04:04:d7:28:9e:74:c9:59:c5:cf:6f:71:
11:f5:9c:19:6e:6f:f6:8a:19:15:03:48:7e:42:60:
98:91:26:60:b8:36:c8:d4:17:e6:a6:ce:a3:2a:8f:
9f:d4:1b:d4:07:50:00:42:2f:29:c7:8c:75:de:fa:
0d:09:93:d1:aa:5e:c1:64:ef:8f:a5:e7:91:4a:06:
34:56:ae:e7:64:d1:88:9e:d8:e2:38:1a:3a:0c:77:
da:9f:c8:86:9e:91:09:eb:f2:e6:33:18:35:90:a6:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:61:A0:74:51:DD:12:6E:27:C8:98:75:BC:37:5A:33:B8:DA:3A:64
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:43:b4:0d:e6:90:9d:71:e5:63:a6:69:a5:11:44:34:a3:07:
82:eb:78:8a:12:a2:7d:93:b9:81:49:85:e6:0d:bc:6c:31:61:
ab:a8:0a:2c:d0:ee:a2:f6:29:14:5f:ab:aa:46:5d:66:3a:89:
55:b4:98:36:6b:00:f6:db:a9:29:da:17:98:2c:70:cd:13:66:
d4:59:ec:0c:f1:d8:98:b5:ed:f8:f6:f4:4e:32:72:28:09:fc:
f3:dc:3a:63:a9:b5:c3:b6:2e:89:4b:e4:ec:65:0f:91:bd:4d:
75:94:98:2b:97:28:f2:05:90:22:38:6e:db:b0:96:89:1a:51:
4c:cd:e2:37:1a:f2:1c:0c:d8:e5:12:fa:b5:08:1d:30:e1:c8:
cd:f4:09:77:18:72:80:11:22:80:0f:ed:7c:45:64:71:71:f2:
c1:72:d5:cd:f6:cd:f2:5a:87:43:34:6a:e7:f7:40:13:46:6f:
27:c4:9b:27:4b:7f:5a:96:a7:7e:69:b9:4a:d3:d5:a2:f5:88:
81:a6:26:ff:fa:ac:81:3e:b7:04:33:24:c0:d7:82:b4:cd:a1:
5e:64:b7:fa:5e:51:dd:d5:01:83:a6:de:0a:45:01:27:dc:ab:
b3:95:31:6e:0a:19:6a:5f:bc:f6:2f:fe:a8:06:b5:97:d0:a4:
ce:69:73:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:22:22 2025 by rpki-client