Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
File: kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json)
Hash identifier: 2zPOdkwj+OE/RZXG2HDHZ5Y1nP4lgOHNsU6D23iAoqY=
Subject key identifier: C6:8D:5C:30:7F:3A:56:CC:95:64:CA:B4:59:98:2E:7C:45:F0:91:F2
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial: 019A71B950807CC6344BF6B79D90C13875E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
Manifest number: 144A
Signing time: Tue 11 Nov 2025 07:02:41 +0000
Manifest this update: Tue 11 Nov 2025 07:02:41 +0000
Manifest next update: Wed 12 Nov 2025 07:02:41 +0000
Files and hashes: 1: ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa (hash: tIZYbv9uO1ydifZNyOm/4u1qZclQNJ4gcOxn8zCiU24=)
2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: +1rn27uYJdmeLTF/KnobJNjWkEpVCXp9yjb8YWGK7f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:50:80:7c:c6:34:4b:f6:b7:9d:90:c1:38:75:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Validity
Not Before: Nov 11 07:02:41 2025 GMT
Not After : Nov 12 07:02:41 2025 GMT
Subject: CN=c68d5c307f3a56cc9564cab459982e7c45f091f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:26:0d:23:fd:ec:b9:5c:bc:87:45:83:f7:
63:e1:22:9c:d8:2b:e3:84:6d:d3:28:fa:ca:a2:09:
f6:af:b9:13:7e:94:75:19:55:5b:9e:2e:59:18:d1:
b0:61:da:1d:cd:f3:74:99:e8:97:c6:18:87:bd:93:
44:be:56:7a:50:4b:7c:4e:4c:97:b9:4c:8e:b9:bc:
10:4c:d0:1f:58:26:da:72:5e:e7:14:4e:d9:af:6f:
c5:27:ed:bc:c1:8c:1b:a8:84:8b:aa:f6:96:6f:9a:
a4:52:56:84:07:db:13:97:62:33:d1:10:e0:eb:eb:
05:d7:dd:f1:95:f7:8c:a0:1f:70:81:9a:1c:46:81:
89:cc:d2:34:b1:c2:c0:32:90:10:65:a2:b6:78:d1:
dd:e4:d7:b5:af:66:86:7e:ce:19:58:fb:7a:d9:37:
b6:eb:d0:e5:98:e0:45:88:50:0a:9f:f0:cf:ba:4f:
49:cc:f5:06:31:30:85:b9:0a:62:d2:70:6b:90:6a:
76:30:94:6e:92:d8:97:8d:ed:1e:0e:5e:28:3f:4c:
16:e9:ca:41:6a:c7:6e:e5:32:22:6c:52:71:e9:29:
78:9d:f2:46:e9:f4:8d:1f:05:1b:4f:f7:0c:dd:60:
96:dd:17:94:f1:ff:fa:d5:ab:35:a4:2f:e5:6b:44:
7a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8D:5C:30:7F:3A:56:CC:95:64:CA:B4:59:98:2E:7C:45:F0:91:F2
X509v3 Authority Key Identifier:
keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f8:64:0f:f9:f4:1b:8c:b6:d7:f9:c2:9e:da:36:9c:b2:4f:
97:00:88:81:2e:6d:a3:16:df:8c:df:ba:91:c5:6e:1e:67:c7:
e8:45:da:2f:9a:41:32:9a:3b:bb:c9:ae:3c:f3:15:3a:56:69:
c5:19:17:b1:10:64:8c:48:59:5e:56:c5:aa:54:4b:6b:5e:85:
be:74:6b:19:85:30:7b:0a:f6:4b:c8:6e:0f:82:00:f4:09:47:
b7:80:c8:49:6a:9d:ba:0b:96:78:ed:c5:16:57:1b:89:07:5e:
fd:9d:84:b9:6d:e8:81:fc:2b:7c:b0:a1:ff:8a:21:b8:92:e6:
e5:5c:17:5c:2e:cb:16:08:95:70:d0:97:95:67:c4:08:d9:88:
49:c2:a3:e4:e1:c7:cf:c0:2b:e6:be:b0:0f:a9:ed:95:7d:71:
76:0c:fa:f2:5c:1e:34:1d:b3:46:30:d5:be:87:0d:a1:e4:7b:
55:4a:44:fd:78:e9:f1:31:22:e7:01:08:c8:11:f5:5e:7d:fd:
f1:97:ef:6e:c9:70:08:e5:2f:5f:60:38:51:54:c0:c9:86:76:
73:cb:14:56:cd:72:8f:0a:b9:94:3d:e8:f4:57:74:be:74:6d:
c5:1c:3a:e8:92:8d:f6:f8:22:4a:ce:2b:1f:5c:fa:3d:64:64:
ac:ab:98:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:15 2025 by rpki-client