Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: zPmZyVx8+ffVzZMyCXgofci8CIVwdLsBYlR9tVJV+Ss=
Subject key identifier: B3:36:8A:08:48:53:E5:49:22:67:69:87:07:B7:88:32:30:F9:1B:42
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 019A4F6259298DDB0A10CE69A8A6FBA5F2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 1676
Signing time: Tue 04 Nov 2025 15:00:36 +0000
Manifest this update: Tue 04 Nov 2025 15:00:36 +0000
Manifest next update: Wed 05 Nov 2025 15:00:36 +0000
Files and hashes: 1: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (hash: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: QZjV2Quvi8gbG8zNNBxJNo8FXcGgo/UdkSfgDLN5l7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:59:29:8d:db:0a:10:ce:69:a8:a6:fb:a5:f2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Nov 4 15:00:36 2025 GMT
Not After : Nov 5 15:00:36 2025 GMT
Subject: CN=b3368a084853e5492267698707b7883230f91b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:05:ee:e4:84:15:6b:b5:0f:ca:66:ec:c0:
a8:f3:30:9d:97:dd:25:65:93:cf:80:e9:a3:c0:84:
ed:82:e1:1a:9d:e0:9c:79:75:18:66:4a:00:44:ae:
cf:89:96:96:d1:0f:7e:e4:3a:b3:a3:0d:a7:76:80:
7d:3d:ee:c8:1a:32:75:d9:d2:12:3c:09:52:b2:21:
8b:89:8b:fb:1a:b8:9c:98:da:29:5e:ff:34:85:a6:
38:17:8e:cf:bd:a2:58:6c:bb:37:ba:12:1d:e2:2b:
67:37:d6:36:51:b7:c6:05:35:06:db:0c:9d:62:68:
ee:1b:c2:bd:e4:87:1e:e1:76:ec:81:e7:21:7b:12:
8f:29:bd:85:b4:7c:d5:83:e7:44:8f:fc:65:bb:af:
55:57:b3:b6:39:ed:cf:44:b2:01:9b:12:ab:22:cf:
3a:d8:ef:6a:aa:86:57:8b:e0:c8:89:72:df:7b:99:
40:37:14:ac:fa:85:d1:a0:c3:a4:b3:1d:5a:07:87:
bb:c4:48:fc:3b:bb:e8:f8:2d:f3:7b:5c:15:fc:6e:
27:4f:bd:08:4a:2a:cf:e4:6f:bd:4b:70:75:9b:78:
56:a8:63:4b:fb:69:b7:24:6f:1a:52:b5:d4:45:63:
47:b8:51:5b:ad:f1:dd:1d:b7:bd:6b:cc:39:ef:29:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:8A:08:48:53:E5:49:22:67:69:87:07:B7:88:32:30:F9:1B:42
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:70:02:e5:b2:61:1c:79:02:23:e2:bc:df:b3:f2:72:3b:26:
fa:de:ad:00:b6:a4:a0:58:2d:38:66:4b:8b:13:66:dc:d4:68:
5d:f1:3c:34:c3:47:61:49:40:b2:ee:5f:d6:31:00:48:45:d9:
18:47:d3:70:85:28:0b:0f:52:2a:4b:3b:83:a3:a9:b8:e6:d4:
42:bf:76:b6:4c:86:f9:a7:93:e7:ac:48:1b:99:02:af:9d:87:
4c:92:9c:45:c1:f0:77:5a:92:dd:74:54:33:a5:40:df:4c:dc:
24:24:d6:eb:b6:f7:9f:f6:13:b2:87:07:fa:db:75:2b:dc:50:
6c:9e:98:6f:e2:3d:4b:92:c4:8a:8b:5c:63:ac:4f:f4:7e:32:
ef:00:92:a5:5b:4c:66:da:2d:1c:11:c3:36:9c:d0:6d:f0:61:
21:92:af:85:31:a3:27:45:df:bc:61:2d:de:2d:f3:1f:85:7c:
7d:09:ad:5e:0d:ad:57:bb:77:d7:55:a1:a5:b8:f8:fc:bf:27:
4e:5c:06:97:8a:ac:98:5a:29:99:1b:e6:68:16:b8:89:ee:d3:
1b:fc:d6:1e:f5:a2:be:f0:4c:07:30:27:2e:e0:96:84:05:cd:
5b:f1:d3:c3:9c:04:82:6a:e6:0c:d7:82:01:cf:9a:49:84:3d:
cf:53:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:43 2025 by rpki-client