Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json)
Hash identifier: NWqlt113haqkG65SiA/1IsTLg9murkkfIlDuSyqWVxk=
Subject key identifier: 33:3F:43:10:65:E4:7E:DA:49:A7:93:11:16:83:A0:20:35:8E:64:9B
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 019A714A16B8C830C4098C82164776801D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
Manifest number: 14C5
Signing time: Tue 11 Nov 2025 05:01:11 +0000
Manifest this update: Tue 11 Nov 2025 05:01:11 +0000
Manifest next update: Wed 12 Nov 2025 05:01:11 +0000
Files and hashes: 1: 3tngVW8LtfBpGAaHjHlOFUm8OH8.roa (hash: aEmicBF+rkX/VE/VudL8BN7DqijXENPur1ReRDbdgFc=)
2: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: vLymjELMm9r9VzVX4QYmQ0g0qzikSe3SP4mRJzWqqYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:16:b8:c8:30:c4:09:8c:82:16:47:76:80:1d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Nov 11 05:01:11 2025 GMT
Not After : Nov 12 05:01:11 2025 GMT
Subject: CN=333f431065e47eda49a793111683a020358e649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:0f:cf:aa:7f:76:c0:da:3e:7d:06:e0:2d:
31:04:78:44:2a:6a:aa:73:47:9f:89:3a:71:38:8f:
ba:51:51:0e:0a:bc:21:e5:81:dc:8e:9c:74:87:95:
9f:57:10:a8:bb:a6:8d:ca:9a:11:54:c0:12:e4:58:
e5:d4:30:38:8d:1b:99:ec:02:a7:7b:4b:92:60:6b:
7e:9a:9c:84:34:f2:30:76:84:65:4c:bf:79:4b:7d:
41:75:9b:2c:ed:8d:40:be:1a:57:83:43:f2:d3:b5:
02:16:cd:82:a6:dc:5d:b3:44:95:1c:b2:2a:5a:80:
72:eb:89:ba:fb:7b:b6:d3:84:07:06:8d:92:84:9c:
7d:e3:bf:c2:a1:52:e4:d1:0f:c1:e4:45:ab:21:c7:
8f:a5:0a:bb:7b:9f:e4:3a:99:a3:42:2a:48:fe:75:
b1:b0:38:f3:2c:4d:64:74:d6:c3:3b:b7:e5:83:2c:
07:47:e7:60:0f:04:76:7b:48:13:5e:76:68:d9:48:
d1:cb:1f:f3:3d:7c:6d:e1:f6:0f:d2:da:23:47:aa:
6f:83:7f:51:13:3f:7e:20:e6:66:ba:fc:8f:53:ee:
c3:70:3b:32:df:9d:de:b2:15:16:dd:7b:28:68:30:
4e:76:aa:fd:e3:ed:1e:3f:b8:44:11:f7:03:6b:8e:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3F:43:10:65:E4:7E:DA:49:A7:93:11:16:83:A0:20:35:8E:64:9B
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:93:b3:df:14:db:15:d5:97:11:72:37:5f:48:29:92:d6:f9:
82:c3:0c:78:03:e9:ab:87:44:46:d5:83:3b:dd:4c:24:0d:17:
a4:4e:57:fa:a0:7f:e1:18:c4:18:cf:81:75:54:2e:4e:3d:5a:
48:67:b3:1d:c3:4b:3d:03:01:54:af:be:d2:51:e0:5b:0a:b2:
d8:ba:76:c3:9d:68:0a:ba:7c:fa:fd:76:b4:dc:e1:f3:fa:81:
38:da:7f:de:22:9a:64:cf:a6:b6:66:ab:ea:aa:71:65:74:0c:
81:a5:65:cb:d7:49:c0:85:50:66:25:60:b4:e9:c3:f8:92:e7:
bf:18:c5:20:d8:1b:bb:55:e1:fa:4a:95:66:95:d4:74:3a:f8:
de:8d:21:93:35:4b:df:01:66:bc:a0:e6:54:70:dc:f4:81:20:
8d:e8:b4:ae:c5:6d:1f:9f:74:ca:01:54:2c:1d:0c:9d:ce:7d:
b2:af:2b:a0:31:16:0b:6f:1e:1d:95:13:a0:89:75:ed:4f:c0:
42:43:fa:dd:7d:be:e7:a6:59:3a:dc:22:45:14:20:05:c1:7c:
b3:f3:fe:fd:8d:56:7d:f7:b6:32:e1:36:a6:8f:d1:bd:c9:00:
21:90:c9:2a:95:28:5e:65:12:48:89:bc:d4:a9:e5:12:d4:ec:
b2:f6:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:18 2025 by rpki-client