Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: rKG1htjGZAbyccg0Nw4UdnvIilO/xvMby6SCmDztgeE=
Subject key identifier: 08:C2:53:E5:7C:D3:95:F5:34:DF:E1:0B:03:7F:8D:15:85:CD:B6:C3
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 019A25C13D9CAB71B02F1E06A31580A0D481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 13:00:12 +0000
Manifest this update: Mon 27 Oct 2025 13:00:12 +0000
Manifest next update: Tue 28 Oct 2025 13:00:12 +0000
Files and hashes: 1: Iz4og1YNjZbe-ZzC3Rok6fWTxAs.roa (hash: 0YDfRJkLurctQB+o/ewy6zBfFbZnDiGSOFrKrpKkhg8=)
2: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: NQCdnA1yiZOQzzLrclzo2iTyGcDjrLgYSOzTGMwUw1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:3d:9c:ab:71:b0:2f:1e:06:a3:15:80:a0:d4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Oct 27 13:00:12 2025 GMT
Not After : Oct 28 13:00:12 2025 GMT
Subject: CN=08c253e57cd395f534dfe10b037f8d1585cdb6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:4c:c1:a2:52:9d:e8:a9:dc:b9:9d:e2:1f:
d6:60:51:9c:57:8e:e6:fe:cf:a4:f6:b2:8a:b3:42:
f4:c1:ae:49:4d:f5:29:a9:c3:62:74:5e:af:3a:e0:
5b:15:83:bd:99:9d:30:48:95:9c:bf:3c:08:c2:23:
ff:f3:ee:d9:ad:3c:59:e9:2f:3f:c4:9a:e9:ca:ce:
35:e3:7a:4b:67:bd:bb:96:c6:ec:6e:63:87:75:41:
56:8f:b0:0e:61:57:77:73:51:50:3d:dc:ed:dd:06:
84:d8:79:24:79:fd:cd:03:c1:50:1c:01:62:70:2e:
cb:f2:8d:57:17:a7:10:a2:c2:0a:fb:b2:1e:c6:e2:
5b:48:cc:3e:4e:d6:6c:39:cb:ed:1f:15:11:0b:1c:
e5:07:8a:24:c6:48:d7:36:de:59:9c:2f:de:33:e1:
e8:be:44:79:49:b1:b6:c8:1b:1c:b7:d6:e0:dc:7f:
35:29:e3:57:06:ee:58:f6:3b:00:06:cd:74:c0:e1:
60:d3:40:27:1f:37:c9:70:ca:28:c7:30:d0:ba:d1:
02:d5:84:f9:0b:62:e1:be:31:06:65:2f:21:4e:d5:
51:a9:a8:e6:df:96:a7:9a:44:fc:21:a7:3e:74:a8:
1a:ac:c9:0c:cb:b5:19:08:1a:8d:29:7a:b7:a8:d3:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C2:53:E5:7C:D3:95:F5:34:DF:E1:0B:03:7F:8D:15:85:CD:B6:C3
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:57:78:d9:8b:23:5d:d9:23:59:b6:2a:38:56:c3:50:56:93:
e6:6e:55:0f:3a:c1:e7:f5:18:05:26:4d:5f:6e:71:1e:1f:6d:
88:2d:4f:48:19:71:07:06:bc:c5:c1:c8:a5:e7:a5:c3:1c:70:
de:5a:11:a9:59:e0:af:d5:59:83:72:b7:6b:43:d1:d8:bd:9d:
9a:12:d9:be:6b:db:8e:c1:99:54:ce:cb:2f:eb:61:d5:06:d5:
79:c2:46:2f:80:e0:3c:d4:18:55:5e:b1:a6:25:80:64:34:0a:
ef:ac:24:a5:c4:e5:8f:97:d5:d3:02:2e:3c:f3:63:d4:4c:68:
c9:c4:3d:0d:b0:54:d6:ba:6d:e7:25:8f:ea:fc:e6:71:f7:1d:
6c:33:cd:0c:b0:b8:a1:59:52:57:77:75:3b:e4:d9:38:b6:23:
8c:4d:6b:8f:ed:27:2a:f7:72:60:f7:95:84:bd:8b:5a:d3:02:
e7:6d:73:d9:37:9a:87:3f:ca:66:bd:f4:60:94:9c:01:a1:9c:
1b:0d:28:18:2c:ae:4f:67:64:0f:e9:7f:dd:91:83:e6:ac:08:
b2:b7:80:01:57:60:fc:7f:9b:1a:29:89:6f:03:61:5a:76:15:
e7:a7:8b:3d:71:31:b4:e3:7b:9f:c6:03:65:b9:ae:77:4b:3d:
9d:a9:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:28:03 2025 by rpki-client