Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: gi2fLcz9x2OEkx46zXAe2+UutMCIhs20zTRXx5NFTwI=
Subject key identifier: 12:79:81:67:D3:91:0E:30:4E:59:97:35:DD:81:40:17:B2:A4:66:CC
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 0199345B389CD93EA291D5B825D28A4AFF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 16:00:17 +0000
Manifest this update: Wed 10 Sep 2025 16:00:17 +0000
Manifest next update: Thu 11 Sep 2025 16:00:17 +0000
Files and hashes: 1: Iz4og1YNjZbe-ZzC3Rok6fWTxAs.roa (hash: 0YDfRJkLurctQB+o/ewy6zBfFbZnDiGSOFrKrpKkhg8=)
2: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: 797pf8WRH5Mm7+NNcqOXt/FomkD4ajY3QP+fQXqP1Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:38:9c:d9:3e:a2:91:d5:b8:25:d2:8a:4a:ff:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Sep 10 16:00:17 2025 GMT
Not After : Sep 11 16:00:17 2025 GMT
Subject: CN=12798167d3910e304e599735dd814017b2a466cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:be:67:c4:cb:44:2e:18:f4:71:47:fe:b3:
04:e5:e3:57:c9:65:9f:c8:90:81:a4:91:2f:d2:14:
10:7a:88:3b:dd:9d:70:9e:68:92:8a:2b:88:0a:5b:
b6:b9:67:bc:5d:fd:be:08:17:28:3a:d5:1e:84:6a:
04:8d:99:f3:b7:58:37:0a:7f:a3:f4:8b:9b:0f:10:
dc:ef:35:29:d6:0a:3d:16:81:55:df:d8:62:40:7a:
94:ca:23:31:e3:63:6c:28:d4:5a:b5:e8:cb:65:d2:
ff:e6:f0:c0:7b:8a:37:aa:c5:97:8d:d3:84:80:37:
78:23:f9:6a:fb:33:f2:85:a2:6c:35:16:e0:c8:0f:
a4:bf:c7:a0:3a:57:fc:6a:e3:7e:22:a4:3c:0b:b4:
28:fc:59:44:3f:35:09:8a:cf:df:75:f4:8b:68:c4:
c6:87:76:7d:e6:b8:ec:25:70:43:af:26:be:39:a7:
f5:a2:f5:90:69:c2:a4:05:08:3b:d4:7b:98:31:bc:
6f:59:8e:57:c1:99:92:a5:6f:0b:f1:55:99:9d:d2:
1f:a4:76:70:0a:47:7f:fd:24:3a:3b:9b:3c:68:81:
29:94:b2:81:16:bf:a8:37:52:6c:8d:52:f7:8a:12:
29:e4:68:8e:36:65:dd:c7:3c:5e:7a:46:22:94:ed:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:79:81:67:D3:91:0E:30:4E:59:97:35:DD:81:40:17:B2:A4:66:CC
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f9:97:46:eb:bb:e8:4b:3e:eb:d3:00:b8:00:6a:f3:b8:e8:
df:f8:f9:b6:69:16:48:92:e8:8a:27:98:ff:20:61:48:75:8c:
05:e0:02:f6:10:40:a4:29:20:28:4e:70:06:3c:bc:cb:d2:da:
2b:9f:ec:98:00:8d:c0:27:0e:4e:da:68:da:c1:a6:7b:83:19:
ea:4a:b2:70:78:a5:0b:ed:f2:99:aa:13:6f:ca:ad:f6:a9:1b:
ca:fc:a6:0b:bf:95:2e:0d:8f:23:ce:ef:72:50:e5:65:75:71:
a9:46:6b:5e:a1:0b:6d:53:86:cb:3e:6a:55:dd:4c:d2:d5:15:
e5:b4:67:ed:e9:a6:22:0f:1f:33:7e:71:27:01:e0:41:5b:61:
92:32:8a:37:b7:b1:df:11:22:e7:e0:9a:74:e3:9a:0d:cb:1a:
2a:19:0b:60:26:50:6d:71:06:db:01:d8:d3:eb:e4:71:4b:19:
e7:df:34:5f:71:f5:95:c6:ab:0f:21:55:84:9a:95:70:0c:b9:
80:f9:36:4c:0c:55:76:08:6d:a9:21:77:41:34:0e:1c:29:b5:
a3:2c:2f:3f:9a:93:49:c8:80:8a:fd:56:27:cd:bb:ab:84:36:
32:70:6e:b8:39:54:24:c0:47:04:9d:ef:9d:0e:ec:c5:55:b2:
c4:97:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:49:34 2025 by rpki-client