Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: /Y0RE/F8T0uLBs3bHVR5ao6VxPVeAUFWB5dI8qerd4k=
Subject key identifier: BA:60:20:72:B8:CC:B4:95:DB:91:48:F2:FC:D9:64:3D:A6:DC:47:B4
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 0199221F1C56FC7FA9C6A488624F6A5BDFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 15DA
Signing time: Sun 07 Sep 2025 03:01:28 +0000
Manifest this update: Sun 07 Sep 2025 03:01:28 +0000
Manifest next update: Mon 08 Sep 2025 03:01:28 +0000
Files and hashes: 1: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (hash: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: VDuB2Kuv0EPIN1AY9Zp8gUHm/tDmeNJx0weVEV4O94U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:1c:56:fc:7f:a9:c6:a4:88:62:4f:6a:5b:df:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Sep 7 03:01:28 2025 GMT
Not After : Sep 8 03:01:28 2025 GMT
Subject: CN=ba602072b8ccb495db9148f2fcd9643da6dc47b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:7a:f4:24:75:ca:16:77:75:cb:c6:58:5b:
61:90:88:34:ad:c7:36:07:cf:66:b0:7a:1e:8a:52:
71:72:2a:a7:31:e9:a4:c1:ad:75:ca:9d:18:e6:8a:
8c:20:aa:22:66:4f:e0:6f:e8:4f:74:63:ea:ab:eb:
80:ee:00:95:3e:1d:90:91:ad:f3:91:51:89:dd:ee:
94:7e:36:f1:f6:b9:76:fe:51:38:2a:71:6d:fd:9c:
3c:14:9c:52:8a:35:0b:f0:ac:bc:be:29:96:eb:df:
06:a8:44:0f:46:b3:b6:57:9c:c8:5c:91:b9:86:16:
2b:24:a9:11:0f:bf:be:51:8b:cc:79:63:6c:9e:c9:
96:c3:31:25:80:5b:f1:6d:9d:7e:c3:5e:f8:f6:cc:
9a:8c:70:00:19:c6:3d:89:55:00:60:4c:ab:ef:83:
7c:8f:79:c9:80:ef:af:64:2b:6c:40:af:3c:ba:77:
cb:b9:ea:c1:76:c4:59:5a:3c:cc:58:de:51:1a:92:
b8:02:cb:1c:ef:0b:de:80:07:24:99:dd:0f:a0:80:
97:ad:83:0b:43:f4:04:a5:ab:f2:7e:ae:97:c6:72:
6c:1b:0b:da:30:ca:62:62:2a:60:77:2a:30:f2:0e:
bc:4c:e6:16:3a:11:eb:da:f6:13:0b:c1:76:68:9f:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:60:20:72:B8:CC:B4:95:DB:91:48:F2:FC:D9:64:3D:A6:DC:47:B4
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a7:22:d5:ea:c5:0f:be:ca:35:bb:e4:59:f8:d2:d8:bd:48:
fe:b7:bf:e8:a3:69:dc:08:e2:68:7b:e3:fc:e9:25:e6:c3:1b:
50:93:f2:1e:61:73:31:46:ab:7c:3c:19:8e:be:58:4e:07:a2:
5e:5c:cb:7d:64:c1:cb:0c:ba:ff:fe:b5:c9:d9:3d:6f:cf:d9:
29:7c:1e:22:0a:4d:f2:fb:65:0e:98:87:bb:4f:e3:8e:96:ee:
f8:3f:a2:b2:f8:81:3b:09:52:d5:de:8b:d9:8c:ce:df:04:f4:
03:15:b5:e0:9a:b0:c5:3b:d5:6b:1f:31:6e:ed:ec:e1:4f:bf:
f4:3e:d8:8f:96:1e:ad:5e:18:fc:b3:85:71:64:dd:cf:71:a3:
53:ea:61:2f:74:ab:eb:15:c7:b8:f4:4e:6a:32:7b:50:80:40:
45:f8:d2:c8:a9:eb:47:e2:72:00:5b:38:40:2b:e8:89:05:e8:
34:42:95:d5:16:b0:98:5d:0f:d5:e5:47:ef:a6:46:1b:3e:f3:
34:99:8c:23:e9:cd:69:76:b3:6d:99:aa:47:76:8c:72:f5:70:
80:68:26:e8:cf:a0:77:21:1b:7f:51:91:ea:45:4a:53:6a:29:
e2:85:4c:4c:0c:e5:05:96:1e:58:83:02:2c:7b:f4:1d:ba:f9:
1d:83:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:54 2025 by rpki-client