Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: 8hV2Yz3GIUDJrXRVdI0ikbKXk8L/u38jpGE5B3JWO0M=
Subject key identifier: 61:43:8A:DE:EB:BE:C2:76:7E:05:2C:69:CF:9C:A1:19:92:C5:84:DA
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 019A4D7419E1C81C678B330DAED10C7F2B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 0667
Signing time: Tue 04 Nov 2025 06:00:45 +0000
Manifest this update: Tue 04 Nov 2025 06:00:45 +0000
Manifest next update: Wed 05 Nov 2025 06:00:45 +0000
Files and hashes: 1: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (hash: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=)
2: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (hash: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: exST1GL90sGqZPBQU98ChhHVAHnnV5bvVAJUg6OMqTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:19:e1:c8:1c:67:8b:33:0d:ae:d1:0c:7f:2b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Nov 4 06:00:45 2025 GMT
Not After : Nov 5 06:00:45 2025 GMT
Subject: CN=61438adeebbec2767e052c69cf9ca11992c584da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:98:75:6e:57:b9:d7:98:ca:9e:e3:f8:62:
6f:02:0e:d7:93:e7:55:76:45:1e:15:ec:d3:e5:56:
53:39:95:75:08:c9:9c:27:56:fe:35:6a:9b:5a:4a:
4f:57:7e:06:a0:1e:29:ca:db:33:e4:e2:fb:27:7d:
72:8e:7f:03:c9:5b:25:96:b5:1d:1c:c3:6a:8d:bf:
85:ac:b8:59:e8:16:ab:4f:eb:af:41:6e:37:17:b3:
6e:bf:c8:5c:59:32:b9:96:21:46:8b:4c:56:db:a0:
13:21:b4:78:c6:92:6a:fd:c1:62:9a:5b:40:1f:4a:
fe:54:2c:1e:83:8f:3a:f6:0d:46:be:53:de:e4:be:
e4:a7:f6:86:7e:ae:8b:a6:1d:b6:4a:41:df:68:c8:
0b:f9:ee:54:2b:cf:e0:ce:4f:6f:60:8d:2e:b0:ea:
d4:b4:7a:89:7c:d1:54:05:a4:69:a4:54:cf:83:78:
f1:cf:52:58:be:6d:b4:f3:7e:4a:6a:32:0e:d3:d4:
d9:07:dd:e7:67:b3:6d:fd:40:76:91:4f:29:9a:42:
9e:58:3b:cb:cd:23:aa:5b:f8:63:e3:90:18:63:63:
07:fe:ef:99:e2:45:c8:27:87:56:fb:7f:1d:52:cb:
1a:c1:ea:28:4f:ac:bd:d2:76:40:31:bc:4f:ac:b7:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:8A:DE:EB:BE:C2:76:7E:05:2C:69:CF:9C:A1:19:92:C5:84:DA
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:59:b6:7b:d7:36:4a:5c:80:c4:ec:6e:ed:e3:a6:b0:91:1b:
da:fd:a6:c0:e1:a7:58:ae:c1:3c:c5:36:47:fd:a9:99:5b:f6:
10:b9:25:01:e6:10:63:95:47:13:c0:d5:3b:9d:f4:93:1e:b1:
d6:97:e7:df:02:e4:ef:8c:03:16:5e:8e:54:fe:47:75:88:15:
8d:95:4e:40:2e:80:14:63:c1:05:8b:2d:54:8c:74:e2:fc:c0:
e8:b6:83:2f:05:f6:d0:66:30:f0:bb:af:85:38:5a:79:8a:9c:
3c:14:e3:98:e5:0a:69:36:dc:28:73:e4:57:84:f8:c5:25:a5:
08:43:6c:88:38:76:bd:c0:54:da:03:8d:16:2e:3d:6b:d4:e3:
5b:88:fb:39:97:9a:5d:ab:23:da:9c:75:ac:ce:b8:4d:44:d5:
d6:4e:74:7e:e5:b1:e8:d6:9f:c3:74:b7:bc:cd:aa:10:79:49:
19:5a:fb:f8:a9:11:da:44:70:9a:cf:d6:54:32:87:2f:a4:49:
66:13:cf:95:af:9b:24:06:f5:ec:82:5a:0e:11:57:ab:e0:ab:
a4:c7:0f:31:12:59:66:86:3c:5b:2c:be:21:0e:25:3c:ea:57:
67:1c:48:b6:37:83:7d:76:0e:a7:d2:a2:03:50:b9:a4:09:62:
dd:06:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:30 2025 by rpki-client