Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: huufkKwnWryyrhnbNxEC42bzFuPizv20pdIesTrHNYE=
Subject key identifier: 3B:9F:8F:2A:43:FE:58:90:1C:2F:C3:4B:3F:C8:5B:86:97:B3:CE:20
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 019A0E5DFC619C2EB55ECD41D5417190CA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 0F39
Signing time: Thu 23 Oct 2025 00:00:31 +0000
Manifest this update: Thu 23 Oct 2025 00:00:31 +0000
Manifest next update: Fri 24 Oct 2025 00:00:31 +0000
Files and hashes: 1: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=)
2: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: BK/WjywqvOpOLSuiRH/AnozK/APh0SzWQwpTDVWcR/U=)
3: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=)
4: oxi_ya_EdBtJCrjY1pYIsNptA_Q.roa (hash: /Rw4xq/Rq6iapjKpArPGVtAk2zVGOyS/eMr3PI823Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:5d:fc:61:9c:2e:b5:5e:cd:41:d5:41:71:90:ca:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Oct 23 00:00:31 2025 GMT
Not After : Oct 24 00:00:31 2025 GMT
Subject: CN=3b9f8f2a43fe58901c2fc34b3fc85b8697b3ce20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:38:28:fe:98:0c:59:09:e2:fe:cf:c5:e9:
f8:36:e0:6b:06:f7:0c:b2:e7:83:28:1a:ed:a7:f7:
56:f6:ec:b5:11:57:c2:6e:f2:32:03:d8:f7:06:f3:
ed:c7:05:d9:06:f0:5a:ec:5c:a3:2b:15:b6:cb:97:
41:f9:e1:fe:bd:cd:6a:4a:ff:8b:9d:f3:7f:a2:c4:
06:da:ed:a0:24:83:6e:de:d6:00:5a:b7:da:42:15:
9a:c9:73:2d:b4:5f:6b:54:d7:1b:21:3e:1b:ce:44:
c9:ac:c6:8a:0c:55:6e:9a:44:3a:25:4a:45:96:99:
f7:ba:5f:e4:21:8c:24:9f:8d:3d:05:d4:69:b1:0d:
ed:26:ac:03:f7:4b:39:f3:ed:07:e5:85:87:90:41:
ec:59:e1:1f:3b:1b:cd:22:01:04:aa:51:22:72:d3:
1c:2e:9a:31:d4:91:37:81:06:3e:b3:de:0c:96:79:
7b:fe:2e:bb:26:3c:a1:7c:01:99:29:5f:07:49:4c:
f1:9b:83:56:c2:b4:d5:76:43:31:4f:a7:09:46:09:
c6:84:23:bd:34:8c:b7:77:74:36:ff:46:56:3c:61:
b5:ee:00:2c:c4:88:e9:80:17:eb:5e:5a:2f:58:0a:
77:0d:b3:c1:1b:cf:f7:1c:b8:ff:9c:ab:bf:97:73:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9F:8F:2A:43:FE:58:90:1C:2F:C3:4B:3F:C8:5B:86:97:B3:CE:20
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d3:bc:d2:e8:29:e4:0c:bd:9a:78:77:60:43:cc:af:3f:ca:
0a:a7:3b:d5:67:f6:54:7e:49:d5:1e:58:75:76:57:29:b6:94:
df:bc:a5:a4:51:c3:bc:88:0b:ce:1a:a1:83:22:d0:f6:4f:a6:
8e:72:37:a0:96:2d:65:43:f0:91:6c:19:a9:3c:9f:e1:14:21:
dd:03:b1:b1:ba:c8:a8:76:63:9a:62:6d:1c:6f:41:81:49:e0:
ef:fa:fa:80:e8:1c:8c:26:5d:51:19:44:8d:1b:30:b6:62:8d:
ff:a4:80:93:d7:dd:d4:67:81:80:75:d8:10:8e:a2:66:4c:e1:
47:16:a8:7e:75:af:6b:2b:88:6e:f1:ed:cb:bd:a7:f8:50:ba:
4b:a2:56:f4:9a:42:fd:50:67:5d:02:8d:f1:21:b8:ac:64:bc:
8a:6e:f9:ff:67:67:b2:39:2f:6e:f8:15:ea:5f:ec:e8:0f:18:
67:b9:74:d0:b1:fa:8d:e6:18:d7:6e:6f:e1:f1:18:cf:ef:8d:
d1:f4:06:7c:2f:32:8a:73:b3:79:46:e0:56:1b:82:b1:ae:5a:
d0:10:54:5b:06:1a:c4:8f:5f:1e:9b:86:17:03:3b:63:bd:be:
55:02:a7:c2:c8:25:a4:4e:bb:1b:82:e0:1b:95:6f:b7:33:58:
49:13:fb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:17:24 2025 by rpki-client