Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: KRyLlw5nhgoVxBYFb1boj6Qlx2U6EZn5OFG0B0MWKxQ=
Subject key identifier: E3:5B:8F:FB:4C:C7:EC:98:93:33:B8:E8:A0:52:47:71:6B:56:BA:28
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 019A22C06FE6905EEB777D48DC50A05A29C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 1687
Signing time: Sun 26 Oct 2025 23:00:28 +0000
Manifest this update: Sun 26 Oct 2025 23:00:28 +0000
Manifest next update: Mon 27 Oct 2025 23:00:28 +0000
Files and hashes: 1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: cI5I/Zx6rSI04F25Z5ENL1093CmJQrFEiZdTH15qaOc=)
2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:6f:e6:90:5e:eb:77:7d:48:dc:50:a0:5a:29:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Oct 26 23:00:28 2025 GMT
Not After : Oct 27 23:00:28 2025 GMT
Subject: CN=e35b8ffb4cc7ec989333b8e8a05247716b56ba28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:d4:79:31:67:63:ed:02:89:02:8e:69:7b:
c6:1a:9c:03:c0:5c:da:09:40:04:94:96:26:dd:95:
ca:b4:9e:1f:89:7e:2f:ae:08:79:9d:f1:f8:68:a8:
9b:ad:90:52:88:da:16:4b:45:9c:85:94:ad:21:61:
84:e8:8c:4e:d1:79:09:7a:07:24:55:28:e0:f5:f4:
8b:4b:d5:ef:38:dd:4e:da:c6:fa:52:58:14:82:3b:
d3:de:90:20:cd:8e:bb:42:ef:0b:13:6f:0b:7d:0f:
16:79:c6:8f:90:4e:70:3f:a6:d3:22:1a:34:12:93:
e1:8c:47:54:e4:86:20:fa:48:ae:58:1f:2f:67:a1:
f4:40:17:41:20:6c:54:39:1a:53:42:09:15:21:32:
67:40:b6:d9:17:21:d8:53:5e:85:01:f4:b9:45:be:
ad:c9:60:04:4b:34:b7:ea:d2:8d:ef:bf:41:47:17:
32:e9:22:be:be:7b:ac:fa:a4:f0:28:dc:a6:d4:05:
5e:79:f4:3a:52:8c:eb:0c:7e:4c:42:9e:8b:3e:87:
1b:6f:5e:74:c4:59:e9:35:df:76:dd:b2:35:49:d3:
0a:03:83:f6:0d:ab:2b:2b:aa:42:18:cd:b9:82:f2:
72:21:ce:70:ea:8f:be:e6:ee:42:8d:68:81:49:f5:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5B:8F:FB:4C:C7:EC:98:93:33:B8:E8:A0:52:47:71:6B:56:BA:28
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:56:97:96:86:ca:9e:b3:09:a4:0c:19:d9:2b:7a:4d:9c:b5:
cb:f1:bf:e5:68:6f:aa:82:f3:f1:0a:2e:0d:7f:07:bd:b0:51:
93:43:1a:00:76:65:ae:b3:b6:6d:38:7a:13:ea:e0:02:4c:a3:
5b:79:06:48:4a:14:a3:4c:73:a0:ef:68:b4:05:6a:de:47:9f:
31:69:ee:0e:3e:f2:bd:99:cf:bb:80:58:ce:e9:9a:a1:fe:13:
3b:fc:89:87:b1:1f:79:91:5e:15:e4:89:c5:d8:49:69:4e:b9:
84:c7:95:23:7a:2e:89:81:f2:88:c5:cd:10:6a:09:58:b6:0a:
6a:09:f9:f4:a7:97:9a:76:3e:3f:b7:10:ef:56:c3:0a:11:d8:
ee:10:24:65:10:96:da:75:67:b5:4c:f8:05:5d:0c:6a:88:ac:
73:6d:f1:f5:3a:5e:1c:ab:ac:5f:d7:dc:5e:26:da:47:ae:b7:
ee:16:ff:7f:84:a9:79:0d:cb:56:c0:77:16:c5:89:d1:29:20:
bd:94:5a:e6:9e:4b:0e:3c:10:d1:12:7d:3f:35:f6:72:24:a0:
c0:46:9e:93:a8:a8:45:85:d0:6c:3c:b7:4f:d9:96:41:95:03:
97:aa:10:02:f1:fc:38:6d:6c:41:1a:3b:a2:25:7a:e6:63:5f:
42:4c:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:44:49 2025 by rpki-client