Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json)
Hash identifier: YnwiDvf1WgNjlCPHw8PLD22w7rlrfxG/83hzCJVw1bA=
Subject key identifier: 78:0F:BC:73:29:D9:08:09:53:6D:7C:20:08:9D:1A:63:1D:64:DD:D3
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 019A4E86B2A2732072565B5EB19E504FE0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
Manifest number: 14B3
Signing time: Tue 04 Nov 2025 11:00:41 +0000
Manifest this update: Tue 04 Nov 2025 11:00:41 +0000
Manifest next update: Wed 05 Nov 2025 11:00:41 +0000
Files and hashes: 1: 3tngVW8LtfBpGAaHjHlOFUm8OH8.roa (hash: aEmicBF+rkX/VE/VudL8BN7DqijXENPur1ReRDbdgFc=)
2: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: qvL6hFOyVpxLJsaSME1SqFvPUZJLvTRzkqusz3Ta004=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b2:a2:73:20:72:56:5b:5e:b1:9e:50:4f:e0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Nov 4 11:00:41 2025 GMT
Not After : Nov 5 11:00:41 2025 GMT
Subject: CN=780fbc7329d90809536d7c20089d1a631d64ddd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:ec:07:50:43:10:97:c3:8d:28:83:fe:be:
c0:e6:c8:97:b0:dd:69:05:80:33:bf:ff:34:25:61:
48:38:ef:83:d8:fa:ad:40:14:d7:97:66:3b:ce:5f:
b0:c0:cc:e0:ec:94:bf:32:80:c5:ee:7f:73:8c:f7:
9c:79:be:02:f5:5f:9e:d2:4e:e6:26:ad:eb:46:20:
a0:1c:52:4b:6c:87:af:99:e5:52:83:dd:f0:ac:f3:
ee:8e:f4:9b:f5:e4:4d:33:f5:59:6a:a7:54:d4:cb:
22:b3:5d:5b:a1:41:c2:d4:cd:4c:6b:b4:a9:c1:82:
fb:38:c9:b9:5e:30:0b:ad:2a:f9:a6:94:10:17:7a:
4e:cc:bc:c5:22:a8:ca:01:cc:e3:ca:13:e4:a4:99:
bc:35:18:87:8b:7e:1c:5c:9d:7e:8d:f6:b0:f5:ca:
e5:dd:55:dd:d5:a3:ed:b6:b5:84:89:75:b8:d6:15:
a4:c7:f9:0e:fb:21:2d:3f:79:b2:f1:bc:15:4d:c9:
5c:b7:5d:de:6a:2b:e4:58:b5:b5:e4:f7:a6:ba:d8:
8d:08:09:3b:ed:6c:0a:11:d4:19:c2:16:cc:54:9e:
0e:b9:b1:9e:90:bf:f0:9f:c4:2d:e2:bb:e3:1f:89:
0f:d5:36:e1:a6:6c:9e:43:28:1d:52:76:3c:72:95:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0F:BC:73:29:D9:08:09:53:6D:7C:20:08:9D:1A:63:1D:64:DD:D3
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ad:47:20:af:f8:3f:11:8e:39:a1:e2:ce:0a:b8:42:29:48:
ca:a0:51:87:8a:75:58:0d:fe:cd:d5:0a:af:f2:92:c3:59:9a:
72:23:46:08:21:da:6a:6c:9d:4e:0f:6f:fc:f2:49:7d:80:0c:
d6:8c:ca:dd:80:76:91:70:28:84:b7:48:52:9e:a9:09:d3:97:
51:b6:1a:97:c2:bc:05:78:70:2b:76:93:7c:eb:72:41:28:a1:
52:4b:50:e0:28:6d:1f:b4:c5:76:07:da:89:cf:1e:62:11:d3:
36:fa:a6:52:c0:d9:26:35:26:2d:bc:50:23:4f:00:d8:c5:d3:
d3:f8:02:a9:4a:2b:66:c4:30:db:36:e3:32:af:ec:34:4c:3e:
c1:dd:df:3e:35:19:87:d0:94:37:2f:51:55:6f:78:b4:8d:bb:
9a:b2:6d:22:3a:d2:81:36:60:86:e6:35:a4:58:e9:25:3a:6a:
71:21:85:2e:99:0b:cb:0d:e9:7f:3e:a1:7e:dc:4f:c2:dd:b4:
ee:fa:71:64:25:a4:9b:0f:6b:61:55:42:86:00:e4:f8:b0:6a:
d6:f6:bb:02:de:3c:5d:55:1c:bb:7c:85:91:0b:50:be:54:2f:
c6:f1:0a:3a:3c:a3:06:cc:dd:b6:c4:f9:d5:a1:41:87:89:24:
49:48:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:05 2025 by rpki-client