Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
File: kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft (raw, json)
Hash identifier: eLrZXliPCSc+fwjVd7E+FyXkhqNuy1Z4CJQ/WU+Pc7g=
Subject key identifier: D4:88:C4:AB:19:08:89:D2:18:4F:BB:1B:A7:F5:2C:FC:31:86:A6:73
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 019A202D561E190C87EE4228E14EAA852AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
Manifest number: 1440
Signing time: Sun 26 Oct 2025 11:00:33 +0000
Manifest this update: Sun 26 Oct 2025 11:00:33 +0000
Manifest next update: Mon 27 Oct 2025 11:00:33 +0000
Files and hashes: 1: CqEnPa0b4387Yb8gdu7piqZKu5s.roa (hash: 7FXFrw8ym051yYy3atG+YQp+VQXGW2aiyGL+xx2k/Xk=)
2: XtIL7quorkF1D-_EHiY0b7NsohQ.roa (hash: q5vGrOEbLzDUn3MKsUHJKxeeKv09uan8ihtlp9ven8o=)
3: kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl (hash: Y3Zpx9HSw7E4O5LiYLlimxfz+BGnEtnCftUkrdUJGyE=)
4: rLGKVyUKBREDsm9aK6Yw80lJkwg.roa (hash: rOtQmfozC5J8XHLeIeIIoLbvmJ2uwQ3sbWfTJEEZWVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:56:1e:19:0c:87:ee:42:28:e1:4e:aa:85:2a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Oct 26 11:00:33 2025 GMT
Not After : Oct 27 11:00:33 2025 GMT
Subject: CN=d488c4ab190889d2184fbb1ba7f52cfc3186a673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:47:76:88:aa:28:24:5e:cf:d5:ba:34:29:
86:ee:b4:98:08:09:66:13:18:c3:f8:35:63:d4:0a:
eb:5c:b6:38:5b:3a:25:a8:88:e4:87:6d:8f:1f:c0:
94:0b:fb:2d:7b:38:ba:37:68:85:66:b8:e9:e2:4b:
72:c3:57:4e:9e:21:f4:e6:ee:57:c8:6a:ff:ba:33:
31:71:90:7e:73:73:e4:f7:f6:4b:49:d6:81:a7:e0:
34:8a:95:6a:bb:5d:f6:5a:6c:d6:16:30:53:bd:60:
d5:4c:2c:03:f3:7a:74:fa:4b:3c:e4:b3:a6:43:77:
76:fb:fd:f1:63:2f:44:40:c0:9e:16:b9:ff:59:a8:
a5:9a:2b:5f:19:7c:a4:9d:a0:28:96:8c:ca:07:80:
48:dd:f7:08:f0:81:3d:ba:a7:2d:86:d1:d5:e0:60:
c1:9b:33:ae:a2:55:8b:f3:bf:5d:07:a5:f9:62:8e:
4c:f1:f2:e1:a9:0f:8c:11:eb:70:86:b5:02:cb:f9:
3e:c2:1b:51:3b:bc:04:70:0b:47:89:ed:b3:3f:9f:
b3:79:ec:af:71:64:03:14:d2:96:5c:19:ef:5b:93:
72:24:89:78:70:cf:6b:3f:ed:db:8a:39:fb:09:90:
fd:4d:91:53:84:00:ca:aa:59:1b:84:a9:18:7b:c0:
97:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:88:C4:AB:19:08:89:D2:18:4F:BB:1B:A7:F5:2C:FC:31:86:A6:73
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ff:ad:3e:aa:55:e1:e3:07:b8:ab:77:f7:f9:71:ce:84:bb:
c0:8a:f5:73:87:64:1f:ac:cf:ff:23:59:75:d6:de:e1:41:7d:
df:0f:0d:d6:d0:d9:ba:c1:bf:1b:28:b8:37:c6:e7:c9:ea:a1:
e5:78:82:ce:d7:a0:07:38:58:eb:a4:6e:12:c4:00:8f:11:64:
a6:76:35:c2:79:ea:ab:d5:46:22:89:cb:2a:f7:1a:25:59:86:
1e:42:dd:d3:a1:30:11:0f:82:51:74:f2:d7:4d:0b:e6:76:4d:
46:4a:c4:2e:87:fe:06:50:21:27:99:ae:9a:bf:72:37:c2:4f:
1f:8a:6c:29:79:d7:c1:cc:cd:98:43:cd:36:65:b3:38:27:b9:
00:38:7e:9b:1c:3a:97:4e:03:81:eb:46:5d:99:b5:63:69:39:
3c:86:9c:b7:28:60:87:4f:da:44:fe:65:67:e5:58:14:76:01:
04:9e:78:73:f8:25:17:7e:36:f7:31:ba:39:01:25:01:45:1e:
26:02:6a:d7:86:cf:a1:48:4f:28:db:1e:f5:48:0c:80:9d:fe:
e9:30:10:e2:42:1f:86:ef:c7:8d:fb:d1:02:0b:f3:d2:4e:b2:
26:9c:0e:51:6b:f0:19:b6:b9:4c:86:50:7e:52:0a:27:77:84:
91:64:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:11:02 2025 by rpki-client