Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: 93lTEHxAZzW4/oP6KaNebt459X/F4Vg/k0ppcarKibs=
Subject key identifier: ED:66:74:CB:87:70:C9:EE:65:77:BF:82:BF:2E:AD:E6:47:0A:DB:6A
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 019A54C0383E3B8F5C8FCD8EFB8775B669C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 16:01:14 +0000
Manifest this update: Wed 05 Nov 2025 16:01:14 +0000
Manifest next update: Thu 06 Nov 2025 16:01:14 +0000
Files and hashes: 1: 1pItkF34I0T0XrYWSJRD7pj_ja0.roa (hash: xX/gcWJfZ1minzry/xWMxIOizMCvErT51ZVCYZljegM=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: 6hFjWnaRna8LB0lqUwzGozY4m/aDGZ2dfFbijdIr69I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:38:3e:3b:8f:5c:8f:cd:8e:fb:87:75:b6:69:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Nov 5 16:01:14 2025 GMT
Not After : Nov 6 16:01:14 2025 GMT
Subject: CN=ed6674cb8770c9ee6577bf82bf2eade6470adb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:af:ca:cc:ce:48:7b:a2:10:61:68:02:77:
1b:e5:12:37:53:9c:32:16:c7:e7:85:7d:46:09:15:
5b:ee:a5:83:8d:f1:b8:7d:90:13:4b:c3:2e:dd:82:
41:70:50:41:09:96:69:66:bf:b5:e8:ec:e7:f6:eb:
14:1d:c3:29:09:64:00:21:4e:e3:17:2e:55:37:77:
81:95:84:59:75:cb:73:43:4c:dc:ac:26:02:e9:3b:
54:ca:6a:46:ca:bd:c0:c1:be:6e:24:05:b7:5b:fc:
f0:f5:0e:e2:9c:fe:dd:87:a9:2f:1f:ed:b2:bd:b5:
a8:fa:29:9b:5e:98:78:ac:bb:98:3e:fa:cb:7d:1b:
00:af:3e:22:8e:49:e2:4a:bf:a7:66:8c:b1:20:9b:
d5:30:d9:b9:db:f8:b8:70:4d:78:29:81:84:08:4d:
df:a5:bb:e4:05:f4:18:96:02:35:c9:6d:9d:bb:ee:
81:65:30:36:d9:40:34:00:17:f9:92:29:cc:70:85:
e3:b1:d4:ba:64:ed:fe:1a:31:70:43:40:34:89:8d:
51:aa:ab:72:3b:fd:ea:26:c4:ac:4b:47:23:b7:c1:
ec:63:fd:0a:31:54:ab:09:08:a8:9c:a1:94:95:cd:
19:db:a6:16:b8:ee:3b:81:3c:90:cb:56:f0:6c:4c:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:66:74:CB:87:70:C9:EE:65:77:BF:82:BF:2E:AD:E6:47:0A:DB:6A
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:6a:c7:5b:2d:56:1c:c3:c1:0b:ec:51:c5:97:31:fe:7d:bd:
aa:8c:fc:42:ee:35:d6:e4:0f:e3:da:19:68:73:8c:d2:c3:d8:
98:a9:75:49:6b:7e:03:89:de:ba:f4:d5:70:88:ac:7d:1a:ee:
b9:50:7f:63:14:69:67:05:8f:e7:ea:e4:64:30:cd:6e:a4:78:
b0:db:74:c6:cd:12:96:5e:02:bf:e2:fd:75:b3:25:ce:8d:d2:
bb:65:c4:54:bc:ed:d5:92:cf:52:b5:ca:75:38:b0:cd:fc:e3:
ec:b8:12:95:5c:56:79:d3:26:b4:16:10:07:58:ad:23:8e:61:
a2:92:97:8f:41:24:39:95:d3:1a:18:11:29:39:9d:fe:42:3e:
f7:35:25:2a:3a:89:f6:95:f0:d5:fa:96:f4:7e:fa:7d:e7:1f:
cf:c4:51:fa:bc:e4:4b:01:19:2e:7c:28:87:f0:70:ce:d6:6a:
a6:f5:46:e7:30:e2:43:f8:09:99:a6:0c:14:6a:7e:9f:41:7c:
ef:a5:56:e1:9e:d4:ae:30:bd:38:6e:9e:05:58:be:cb:44:a9:
c9:d5:80:d8:9b:fd:39:24:8e:3c:93:29:63:c5:4a:2d:6f:c5:
2d:89:3b:70:cc:79:52:6b:4d:a6:01:8b:56:8c:ff:5d:41:99:
eb:e6:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:59 2025 by rpki-client