Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: SBhfmzvg4UujWHyWmVNQ/ZebvgS6L62eGLv7O5l6SA0=
Subject key identifier: E2:33:FA:3A:EA:CE:C4:6B:4D:4A:F9:0F:EA:70:56:C9:E2:F3:37:97
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 01993612FD4A3A0EBEE98977FD04667F861D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0ECC
Signing time: Thu 11 Sep 2025 00:00:37 +0000
Manifest this update: Thu 11 Sep 2025 00:00:37 +0000
Manifest next update: Fri 12 Sep 2025 00:00:37 +0000
Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=)
2: V7lXlsc_KCrBF5PGRWvxEoDs1jE.roa (hash: 3HSkq2ZQ4Tv+kukR6Ld2lDKWo32adQgvx+S4uGpggoY=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: E/ByGBQQOYEY8DEH6SDog6hNIutTodFPQPiHFDDFFoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:fd:4a:3a:0e:be:e9:89:77:fd:04:66:7f:86:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Sep 11 00:00:37 2025 GMT
Not After : Sep 12 00:00:37 2025 GMT
Subject: CN=e233fa3aeacec46b4d4af90fea7056c9e2f33797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:79:8b:e8:d4:2e:a8:d3:64:1c:07:75:cd:
2b:05:bf:0f:1a:53:d4:be:0f:b3:7e:05:77:85:d4:
a9:82:46:a6:d7:9a:87:41:35:f7:4b:1f:d9:6d:d0:
20:36:e4:a8:9b:be:1d:c8:62:e1:87:7d:d4:a4:07:
9b:45:29:78:fb:d0:11:d2:00:a1:d7:c2:bc:fa:1f:
1a:35:fb:15:b4:70:73:36:44:e1:7a:b9:ec:b0:d5:
7d:10:0b:cd:ff:0b:7d:17:f5:b8:a7:61:8e:0c:58:
45:ff:a2:ea:4b:8c:9c:0a:8b:61:cd:bf:86:6c:99:
89:5e:c1:35:36:4a:4b:09:33:87:88:cb:c2:53:86:
4e:ed:e2:16:ad:88:b9:6b:25:1f:08:71:71:5f:d1:
de:2d:6b:3e:11:ee:ce:19:25:f8:e5:41:c0:a6:69:
52:59:f3:99:b5:82:e7:57:cd:c8:e7:43:23:9e:04:
69:61:91:31:16:d5:09:0a:12:eb:d3:fa:43:be:5e:
00:05:b6:bd:71:7b:ad:62:0e:d7:86:77:23:2d:05:
f8:80:11:a7:fa:64:6d:8c:dc:65:94:63:69:2b:36:
70:71:ca:06:26:ca:0d:48:ea:02:5d:21:40:22:6b:
a6:23:95:aa:57:09:e4:e1:4a:d0:5b:d0:0e:23:32:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:33:FA:3A:EA:CE:C4:6B:4D:4A:F9:0F:EA:70:56:C9:E2:F3:37:97
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6a:5a:73:9c:39:a9:81:ee:b0:ea:de:65:ce:23:d5:88:8b:
d9:87:c6:cc:13:6e:5e:ae:5b:a6:60:85:b9:a6:79:aa:38:b8:
dc:b2:3f:4c:0b:2d:c5:f9:80:f2:fc:cf:07:a9:2c:7a:dd:3a:
1f:df:a6:b8:9b:52:6f:6d:dc:6d:8a:ca:cb:5d:4b:e7:85:7b:
4a:3d:ff:a8:5f:bd:47:3f:1f:63:5c:a2:a1:73:91:4d:9c:38:
68:ca:c9:6c:3d:3f:75:1a:dc:47:fd:b5:a3:be:59:61:96:8b:
a8:99:39:c8:a0:89:28:0a:b5:f1:92:46:0f:9a:67:c2:b9:f8:
42:46:98:98:f8:b0:81:29:36:f7:32:68:01:33:c6:d9:29:57:
80:a8:d8:2f:d3:41:be:02:82:35:83:55:ed:28:d3:1b:b7:9b:
f4:c9:5d:bf:1a:ca:b4:6c:59:e2:f1:c2:fd:c8:c3:8b:3f:05:
4e:5f:96:26:09:8c:00:b5:03:3c:05:c0:df:1a:3a:4d:f8:c0:
2a:c5:af:aa:09:0f:b3:5f:74:62:fc:8b:06:de:fa:f2:55:45:
43:61:c3:92:e9:68:f4:a7:e3:70:8c:cf:93:26:82:af:52:29:
5a:c5:60:69:14:fe:ac:91:30:31:ee:87:bb:06:54:68:b9:4d:
4f:df:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:06:34 2025 by rpki-client