Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: JZInGawHD+53o2rRCemHAM6M/QDeZsW1A9qXuHY4A7g=
Subject key identifier: C2:2C:F0:B6:B3:A7:58:1D:BF:A7:12:D2:3C:B6:E4:1D:82:36:42:90
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019A5074B9B53A3B0B8FA21EEEF35EB3A225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 15E6
Signing time: Tue 04 Nov 2025 20:00:18 +0000
Manifest this update: Tue 04 Nov 2025 20:00:18 +0000
Manifest next update: Wed 05 Nov 2025 20:00:18 +0000
Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: 8cHa+J7HEW3qAtgMMdJFRFgAIk6E5NfcE3ygA2z6c3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:b9:b5:3a:3b:0b:8f:a2:1e:ee:f3:5e:b3:a2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Nov 4 20:00:18 2025 GMT
Not After : Nov 5 20:00:18 2025 GMT
Subject: CN=c22cf0b6b3a7581dbfa712d23cb6e41d82364290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:42:ab:df:05:2c:a3:f0:7b:ca:1b:2f:ae:
c6:c5:1f:99:c1:80:c2:d5:4b:66:57:db:d4:4a:f5:
30:10:a8:6c:06:ea:07:73:86:dd:6d:92:91:5c:78:
02:1c:e4:d9:fa:96:dd:26:39:eb:89:74:c7:8c:cc:
3f:65:f9:05:4d:bb:d2:c2:52:20:b8:a1:ed:06:a9:
8a:a6:5c:d4:20:33:95:ba:5e:f4:a6:a9:68:c1:95:
b5:52:90:62:de:8a:3d:f0:77:17:a9:52:99:79:48:
5c:a4:f1:47:2c:ef:fa:52:eb:f6:1f:78:96:ae:01:
51:eb:84:2a:99:0a:8f:84:78:a1:3d:fd:b1:0d:b0:
42:c3:78:b2:4f:5b:15:bf:59:d8:ae:d9:e8:b7:13:
4c:ea:a2:72:8e:d2:40:df:97:59:17:55:ed:d1:cf:
b0:97:fa:c3:09:2e:91:2e:5d:af:f9:46:6f:54:c5:
3b:88:18:f6:7c:da:83:0e:e4:dc:b4:d9:d6:02:44:
b9:00:ac:97:92:f8:57:70:cd:55:db:80:f1:98:29:
f7:d4:92:47:10:52:1e:e7:e4:4a:a5:bc:22:ea:e4:
58:4e:a5:e0:2d:98:f0:83:0e:40:e6:89:f7:7a:c1:
59:f5:22:7a:07:ed:c9:a1:93:37:0e:b0:94:e9:10:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2C:F0:B6:B3:A7:58:1D:BF:A7:12:D2:3C:B6:E4:1D:82:36:42:90
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c2:e0:06:ac:cb:54:ed:23:ab:d4:d6:8f:46:6c:ec:1f:14:
6b:5a:48:b4:d2:23:c0:14:bb:f2:83:2c:a9:da:6c:cd:87:59:
90:87:8c:c8:99:20:08:13:da:27:5b:ac:c5:0d:18:de:ee:4d:
b1:90:48:06:51:18:f6:06:4f:ce:ab:8d:5f:73:44:2c:a1:ba:
e2:84:bb:b0:92:30:25:45:e5:9f:f0:1a:e0:6a:45:7a:01:d7:
75:04:03:c7:ed:ad:50:d3:b0:7f:9a:7c:33:2a:8a:44:9d:5c:
0a:d4:46:bf:2e:90:34:9f:fe:81:a9:fb:10:e9:d4:16:96:2c:
f3:ee:ec:86:4b:5a:39:eb:f1:6b:25:62:89:3a:9c:4e:a0:67:
c0:72:df:11:4b:5b:e7:81:48:56:2e:45:ac:6b:8d:25:76:e6:
1d:0a:7f:45:d5:2d:a0:3b:34:3f:8f:c7:c0:1a:7c:42:dc:b3:
71:dc:d3:3a:92:af:d3:e1:db:16:1e:b9:6d:e3:16:e9:6f:d2:
89:53:0e:07:5e:16:99:86:70:55:3c:3b:4a:23:73:88:74:53:
1f:65:72:ba:8d:85:13:fc:16:64:f7:57:60:55:f4:36:03:61:
89:30:2f:82:ff:d5:65:31:00:14:4c:1f:4a:63:dd:75:fe:ef:
65:7c:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:55:38 2025 by rpki-client