Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: pZ/afo9iah3c4uXH44+2Zb+9htaBINXVn6azipzLGNk=
Subject key identifier: F9:E2:6E:D8:82:25:CB:D6:44:D3:FB:FF:93:8A:F5:A9:19:16:D3:63
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 0199240DCD0FA95E0C62F7B6702E1B3E195D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 05CD
Signing time: Sun 07 Sep 2025 12:01:47 +0000
Manifest this update: Sun 07 Sep 2025 12:01:47 +0000
Manifest next update: Mon 08 Sep 2025 12:01:47 +0000
Files and hashes: 1: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (hash: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=)
2: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (hash: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: IGsLAwYJXbiLR7LnenO1Mx1tapav5LWko4SpQAoG6HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:cd:0f:a9:5e:0c:62:f7:b6:70:2e:1b:3e:19:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Sep 7 12:01:47 2025 GMT
Not After : Sep 8 12:01:47 2025 GMT
Subject: CN=f9e26ed88225cbd644d3fbff938af5a91916d363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:24:09:15:d8:ea:c9:e6:08:d2:67:ed:3d:
bc:51:fb:ed:1c:77:31:90:9a:a1:93:65:ac:d0:92:
7c:ea:9d:07:c1:ec:04:e3:85:7a:8c:4a:94:15:4b:
6e:33:64:1f:7a:6f:df:e6:e5:a1:3a:c5:1d:f6:be:
a9:4d:6c:b9:6e:b1:bb:df:f9:03:02:09:2a:3e:d2:
e6:21:d0:83:27:75:03:f9:0e:80:df:f8:76:1a:a4:
44:35:40:13:f7:ce:4f:94:fa:f2:88:d8:ee:bd:17:
ae:1e:c5:df:f8:c8:3d:a4:ad:f4:1d:e2:15:a3:9a:
4d:0a:f3:40:0e:3c:e7:bc:9a:53:07:c6:49:ed:84:
db:53:d4:3a:00:7c:96:3e:70:97:43:bd:74:67:1e:
36:a3:c8:c3:0a:af:e2:61:e7:03:d6:27:ca:0e:15:
88:3b:da:34:f5:8f:52:c1:fa:dc:1b:cc:44:aa:50:
27:21:34:1d:2d:70:1c:57:0f:7e:4f:4c:99:be:fa:
71:41:e6:b6:f3:22:c4:cd:b6:03:5e:be:d0:12:02:
04:bc:87:57:e6:d4:d0:7d:a4:bf:f1:ab:71:63:20:
33:89:20:ea:03:db:41:4c:36:9a:6a:05:39:c7:2a:
92:50:93:89:cb:7b:79:46:ce:18:8e:d7:a6:92:b4:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E2:6E:D8:82:25:CB:D6:44:D3:FB:FF:93:8A:F5:A9:19:16:D3:63
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b3:f7:1b:31:9a:cd:1a:02:b4:eb:1c:e5:88:1b:8e:4e:e3:
67:0f:04:f5:6c:3f:e5:2d:4a:86:63:9a:ad:c1:18:80:5a:ac:
d4:39:78:ab:cc:a7:85:14:3c:af:17:4a:b8:b4:5c:e6:3e:bf:
22:ce:46:4b:c2:66:4e:31:a6:4e:1a:52:49:d8:c9:2f:16:be:
67:9e:1e:c7:cb:d4:3a:6d:28:25:7f:ea:54:64:4a:17:74:21:
ee:37:14:8c:39:19:8e:5b:98:8b:0a:e4:f6:c5:2a:64:0d:9b:
ec:f7:4b:57:56:b1:37:d8:ab:cb:a5:ee:ab:f2:21:df:62:cd:
4c:bb:bd:d6:a5:6f:e9:29:75:1d:1e:72:ad:55:6f:06:5b:2f:
99:ec:e7:9b:c6:6e:3f:8c:e4:0f:96:67:66:cc:26:d5:55:13:
71:dc:ad:6e:e9:d6:14:0d:ee:09:92:2a:b2:3f:c2:de:aa:34:
36:69:61:64:12:a3:4d:8c:b3:09:5a:c4:a2:8e:17:fd:3a:a4:
0c:ff:6e:87:af:d7:04:09:58:c5:93:9d:9c:12:14:ca:b1:69:
db:ad:05:03:41:8b:c5:a2:fb:a4:50:06:b5:64:05:64:02:aa:
6a:30:71:a7:29:28:27:f2:b2:7b:f5:c7:c0:9e:3a:fe:f8:b0:
03:5b:38:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:46:11 2025 by rpki-client