Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: 1mjgEMRe/42QqqwOtr+ajCaQxv2pzaMpKgFovOMGIHs=
Subject key identifier: 61:E5:12:44:4D:C9:FD:B6:63:14:1F:45:10:05:F7:E9:5F:F1:AE:0D
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 019A24E5F6111E9E8F891071CB52D8A055EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 1007
Signing time: Mon 27 Oct 2025 09:00:41 +0000
Manifest this update: Mon 27 Oct 2025 09:00:41 +0000
Manifest next update: Tue 28 Oct 2025 09:00:41 +0000
Files and hashes: 1: GWLdQp63HdvOf4msAVGTJwa7Pc0.roa (hash: lF9IocpGAD+RCCazxV1bkIzHwzFIWOektkqyFGjVilw=)
2: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (hash: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=)
3: ZcvBTfoXIkdWjCXtigYCRkxwU_E.roa (hash: OrUuvu33nOrNM9H7GJKTSRXbyuxdfvDLNi4s7scTDWk=)
4: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: eC7YUal6WlTLXQzErIeqqeWdDKBPNRckWuGXkTwY6uM=)
5: r816-sGxaSURDTSpC0B66tGRbZs.roa (hash: Cpfj6jfuACJLukpFk9QhkAV4pZmQtjlQ3iLHO8mpk3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:f6:11:1e:9e:8f:89:10:71:cb:52:d8:a0:55:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Oct 27 09:00:41 2025 GMT
Not After : Oct 28 09:00:41 2025 GMT
Subject: CN=61e512444dc9fdb663141f451005f7e95ff1ae0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:02:06:6a:e2:c1:09:8f:4d:8a:22:71:16:
54:0c:50:29:5f:7b:97:2b:a0:6f:6d:6e:c6:82:11:
25:e0:6f:e9:0d:df:b4:52:1f:38:e6:8a:ee:bd:67:
f2:f5:cb:1d:8b:5a:a3:d4:65:fb:08:1f:85:e1:3e:
d5:9e:bb:ee:bf:0b:36:1d:22:08:1c:30:85:71:26:
de:86:04:16:68:ed:0f:73:1d:99:9f:00:d9:4d:ab:
a0:0d:35:76:3e:77:83:fc:f3:f8:72:8d:d8:92:31:
82:d7:39:0e:14:4d:e5:e8:15:5d:0a:90:77:39:28:
db:1b:60:25:2f:52:7a:d1:20:b8:f4:b0:8f:b8:19:
ae:42:af:16:50:1e:17:13:14:03:1e:a6:23:ca:52:
64:7c:b2:60:f6:51:12:b7:64:6a:44:49:b4:66:ff:
7f:bc:a7:82:60:18:7d:02:44:67:68:11:85:83:f6:
2d:77:53:a5:71:9c:87:0c:cc:a4:26:99:11:ce:64:
97:22:d5:05:99:fc:d9:54:eb:e5:81:b3:76:0b:3d:
87:94:9b:b6:6d:26:0e:d9:b8:79:1d:fa:cf:28:85:
50:7e:16:1c:93:d3:c5:c3:00:20:f9:e6:c3:2e:0a:
bf:00:91:69:9a:44:9e:c6:bf:9d:64:c8:05:21:82:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E5:12:44:4D:C9:FD:B6:63:14:1F:45:10:05:F7:E9:5F:F1:AE:0D
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:70:aa:80:f5:a0:ed:54:9d:de:33:04:b7:d4:92:15:b7:07:
6f:96:3c:e7:b1:00:50:35:e9:f8:ae:9f:21:69:17:19:5e:9a:
08:0d:19:66:99:e2:b0:22:5b:40:bf:0c:56:9d:71:fc:50:51:
9c:4f:a9:10:1f:ae:15:1f:ce:6e:50:31:e6:c8:d0:9e:26:8d:
30:b1:36:e7:4b:03:63:e8:d5:47:6a:b6:80:4b:90:51:59:c4:
49:fc:f6:4f:fe:a6:19:95:d3:eb:ce:8a:58:10:4d:02:0c:68:
ba:cd:e1:92:45:1a:e0:44:f3:20:71:47:e5:80:b8:f7:cd:30:
e3:ad:59:26:64:66:6f:5f:c3:40:0e:28:80:4c:57:ec:a6:e5:
e2:1c:fe:7a:a9:62:24:91:4d:cd:f0:1b:8f:7f:57:84:b6:7e:
93:27:f7:7d:af:65:30:4d:2f:80:4c:ea:8a:07:5c:28:0a:b9:
2e:e3:2c:e4:92:de:68:41:a2:e2:3f:c9:05:e9:b0:b3:a8:ab:
44:29:7b:77:77:17:af:96:fa:70:01:76:03:32:e6:fe:3b:a9:
f3:b6:90:c8:17:4e:99:f1:16:8b:1b:e9:36:fd:bf:5c:90:af:
93:b8:a5:bc:a8:ee:2c:a5:5e:d8:4d:c0:f5:08:65:27:d6:dc:
4b:f8:71:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:15:00 2025 by rpki-client