Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: UAlPjFJZ/yT+pRdu0F2BPtWo2VRn3E2fphc7xORkBw8=
Subject key identifier: 00:CF:F2:20:0A:81:E1:85:C0:49:40:57:28:82:4B:D1:CF:EB:17:A8
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 019A0A1390FBC42C529E82444E9261321546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0A03
Signing time: Wed 22 Oct 2025 04:00:45 +0000
Manifest this update: Wed 22 Oct 2025 04:00:45 +0000
Manifest next update: Thu 23 Oct 2025 04:00:45 +0000
Files and hashes: 1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=)
2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: 1mNHBVtpKLnL5+tzzWpq0VbtB8C0DtGOYh6pIQU1FX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:13:90:fb:c4:2c:52:9e:82:44:4e:92:61:32:15:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Oct 22 04:00:45 2025 GMT
Not After : Oct 23 04:00:45 2025 GMT
Subject: CN=00cff2200a81e185c049405728824bd1cfeb17a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:e8:2c:69:7d:9e:02:1c:76:58:6e:65:82:
88:0d:90:e5:e8:dd:4c:3d:d0:64:77:f0:29:d7:61:
da:4e:a1:95:43:c9:50:b6:55:c8:34:ec:23:f1:51:
56:ff:ef:57:b9:9d:8a:06:a0:5b:4e:a2:ed:a2:12:
30:49:a3:23:88:6f:c5:32:27:1c:a9:86:4d:27:11:
bd:8e:f5:f3:36:72:46:af:63:7c:a6:02:1d:40:d8:
3a:a6:20:b8:f0:53:d6:80:27:27:a7:2a:f0:b5:0e:
3c:11:eb:5d:e9:2f:a0:33:c5:30:a4:31:0a:ae:c5:
44:61:74:20:52:a7:25:08:1f:ee:12:c8:3e:c5:d2:
88:27:b9:20:87:2d:93:ae:19:b9:a2:52:64:1e:b9:
be:78:18:7a:a2:c8:56:26:ae:d2:13:ff:2e:fe:37:
8c:ba:ea:5c:1f:7c:30:31:01:a3:c0:28:b0:02:51:
25:b5:94:ee:ec:8d:88:b5:40:22:e3:21:b3:5a:ce:
aa:f6:20:e7:50:c0:04:c8:74:65:bc:45:00:e7:16:
8e:7d:ce:85:13:3c:1e:95:62:4c:59:99:cf:8d:22:
b5:d7:5f:95:38:0c:2c:9f:ce:2c:eb:bd:50:31:84:
32:a2:6b:43:29:48:ab:20:4e:16:a4:04:c6:ad:43:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CF:F2:20:0A:81:E1:85:C0:49:40:57:28:82:4B:D1:CF:EB:17:A8
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:51:1f:d1:dc:fe:f0:51:36:13:99:db:9f:f6:f3:11:3f:cf:
cd:1a:84:28:56:a7:6e:f4:f4:49:64:32:1c:27:23:07:d9:e6:
b5:00:c2:30:3e:8d:a7:ca:41:73:e2:8f:42:69:6c:78:15:30:
4a:91:94:f2:57:c7:91:35:79:6e:b4:4b:31:ea:ae:f8:08:89:
20:c9:64:96:99:c3:aa:48:b3:7b:e6:c3:89:a1:56:6c:7d:6f:
bf:3d:c2:57:57:8c:f9:21:f6:3e:04:4e:bf:e7:af:12:1f:df:
97:bc:f6:2c:5e:09:2c:3d:18:cf:ae:3b:f7:c3:96:03:5f:be:
60:8d:15:7d:01:d3:a3:aa:24:27:01:3c:b6:c2:0c:e5:5d:61:
be:44:07:8a:b8:6d:46:1a:3b:c3:91:eb:7c:9c:97:37:64:40:
eb:3d:b8:b9:a3:a6:e4:42:9f:5a:57:50:d3:ca:8d:92:d2:28:
80:4b:45:57:c2:81:af:e7:79:6f:c6:bb:0f:6d:3e:a5:3e:f0:
ac:a4:7e:1f:25:ad:30:0b:a3:f6:d3:9e:36:c0:3d:3e:ec:44:
f1:36:27:31:5d:f4:1c:24:28:a4:f4:15:e9:7c:1e:ea:b7:20:
0e:f9:15:22:ce:9d:58:b4:f9:ab:58:a6:b1:a6:46:e4:f5:09:
88:2e:ee:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:07:02 2025 by rpki-client