Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: rXLcVXJJrWeI+31u7f57fZW4QqUc4IvXbFDKKR1cJM0=
Subject key identifier: 69:02:08:BC:9A:49:DF:39:22:B7:28:28:39:74:A2:CF:7B:43:BF:06
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 0199511C571B441B14398699E0D827489E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 1689
Signing time: Tue 16 Sep 2025 06:00:35 +0000
Manifest this update: Tue 16 Sep 2025 06:00:35 +0000
Manifest next update: Wed 17 Sep 2025 06:00:35 +0000
Files and hashes: 1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: IXmzik5oSiF4/5FaVh8qD1/ZK2To3Hr6C1IXzm7jeR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:1c:57:1b:44:1b:14:39:86:99:e0:d8:27:48:9e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Sep 16 06:00:35 2025 GMT
Not After : Sep 17 06:00:35 2025 GMT
Subject: CN=690208bc9a49df3922b728283974a2cf7b43bf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:bf:eb:a9:b3:3c:2e:2f:8d:f8:dd:9d:2a:
84:a8:bd:2b:53:49:70:3a:64:4e:99:79:60:1c:67:
80:6c:91:43:2e:a2:75:e0:ad:16:67:b2:52:0e:7e:
51:ee:d6:d8:4a:30:c8:ed:c2:c1:c5:14:85:9c:42:
51:2d:54:ae:3a:1c:5c:36:71:41:48:53:f4:3f:fc:
74:3b:a1:63:75:f9:d3:f7:48:70:06:96:fd:16:72:
52:64:04:bb:2f:13:d5:7c:df:1b:07:3c:30:56:f7:
da:02:1e:44:af:cd:59:70:c2:d8:3d:59:5d:0f:46:
36:5c:0d:48:50:75:cd:32:83:68:a2:91:82:b4:74:
e9:a0:36:4a:b1:55:9f:88:14:e2:96:f7:0a:8f:e3:
3e:49:9e:32:8c:26:8e:05:c6:c6:7b:3b:f8:3f:31:
3a:99:d1:c9:b6:2f:ce:ba:ff:a7:c4:10:0e:cd:f9:
3c:2d:fa:ff:41:a4:74:69:5c:d2:c4:9e:4f:03:bf:
9c:45:aa:d5:a4:d3:55:09:c0:55:80:3e:30:44:80:
22:4c:60:1c:f0:b5:89:e9:b1:e2:06:a5:11:6e:eb:
f1:a9:2b:13:6c:83:0d:fb:a5:8f:cf:9c:b9:4b:d4:
8f:12:5e:2c:04:4d:15:f0:a1:17:6d:f5:21:67:2f:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:02:08:BC:9A:49:DF:39:22:B7:28:28:39:74:A2:CF:7B:43:BF:06
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:86:5e:8b:91:e9:d0:3c:60:85:01:b4:1e:c6:0e:df:99:85:
1e:58:d7:2d:f2:4b:fe:a8:a6:95:af:a1:f4:ec:a7:a0:e1:c6:
c4:f3:2d:dd:a7:36:a6:05:bc:65:90:35:0b:16:a9:d3:07:30:
f7:6f:f2:ea:eb:45:41:bf:6f:43:9d:c3:4c:e2:e9:85:ba:89:
c1:c1:73:26:94:f9:e2:59:10:70:c5:ae:4a:87:40:ee:4a:db:
9e:7e:5b:a7:eb:75:e6:25:30:e1:e5:20:5e:d3:14:93:a3:34:
9c:6a:2b:0d:8e:ce:ae:da:b4:3c:3a:36:0a:16:30:a9:06:8d:
40:2d:10:5e:53:15:b5:29:4e:2c:cd:1f:45:d4:11:d2:fa:bd:
ad:8a:d5:af:9c:a8:5d:98:e4:85:99:f3:e5:2a:d3:10:7e:51:
02:ac:92:2c:de:d9:8e:f8:3d:76:a4:5e:19:72:08:a4:23:a0:
3b:6b:ff:b8:51:eb:31:23:1f:8e:ff:1d:d9:e8:71:35:5c:c5:
01:50:19:d8:68:d2:34:d3:76:e8:78:eb:7c:64:fd:48:7f:15:
dd:cf:8d:8a:2d:f2:93:c3:c2:82:b3:d8:fa:97:ea:ed:3d:76:
dd:a5:d3:28:1b:c1:8f:a8:d6:e1:0f:2c:e9:95:ae:d4:b4:73:
47:26:63:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:59:05 2025 by rpki-client