Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: 6c9HULEFoD5uGjvtgvFPAKKtx5NDR0I2bhgDtNhAPMI=
Subject key identifier: FE:2C:2F:8A:B6:F1:1A:79:FC:41:84:B1:C2:AF:02:FE:DC:FC:74:3E
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019A50072D2DF56AF9319B58FD799393963A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0F5E
Signing time: Tue 04 Nov 2025 18:00:38 +0000
Manifest this update: Tue 04 Nov 2025 18:00:38 +0000
Manifest next update: Wed 05 Nov 2025 18:00:38 +0000
Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=)
2: V7lXlsc_KCrBF5PGRWvxEoDs1jE.roa (hash: 3HSkq2ZQ4Tv+kukR6Ld2lDKWo32adQgvx+S4uGpggoY=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: 8dxaKwZDgbNlK9JK55+bRKv8zaar0FdFakwi89uJyhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:2d:2d:f5:6a:f9:31:9b:58:fd:79:93:93:96:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Nov 4 18:00:38 2025 GMT
Not After : Nov 5 18:00:38 2025 GMT
Subject: CN=fe2c2f8ab6f11a79fc4184b1c2af02fedcfc743e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:53:68:a1:8e:7a:d3:83:01:ff:1a:31:84:
ab:7a:5a:8e:ad:af:32:0e:33:2b:2d:d6:c8:6f:d7:
6b:d8:4c:0b:58:92:84:7d:49:c5:1b:a7:35:8b:db:
17:79:9c:85:78:2e:ad:67:78:4d:d7:cc:18:d0:3b:
22:15:f4:40:41:68:52:b3:79:8d:ff:8e:d5:ab:20:
20:58:ef:2c:bb:86:02:62:3a:1b:6f:10:62:2e:21:
35:db:13:78:68:3c:1b:7e:08:7e:30:61:d3:df:d3:
0d:5c:a9:4d:36:67:69:85:70:d7:c8:6d:e6:99:86:
71:72:1a:44:c8:e9:6a:74:5c:a3:65:c7:82:16:8d:
43:c5:d0:8f:c5:5d:71:52:13:b4:3a:2e:cc:3f:66:
99:e8:eb:e8:50:54:03:47:13:36:ea:8c:29:0d:12:
b9:34:43:58:7f:12:92:45:31:43:78:4a:b5:6c:9c:
b3:e0:74:75:5a:af:bc:87:3f:7f:3f:eb:27:99:f4:
ea:be:3a:ea:99:ba:1f:d1:13:74:bd:98:9e:9c:e8:
8e:66:7e:fb:75:ca:4e:72:e4:7b:ee:13:60:62:03:
d2:d3:0f:2a:ce:43:42:c7:5e:aa:7e:aa:f7:d3:10:
e9:9a:8b:a7:cb:f1:f6:1b:9d:0d:e8:0e:ad:8d:38:
b2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2C:2F:8A:B6:F1:1A:79:FC:41:84:B1:C2:AF:02:FE:DC:FC:74:3E
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c8:fd:f5:ab:16:9e:4d:e7:d7:2f:db:99:7f:88:a1:eb:02:
d9:7e:31:e9:77:60:09:00:16:37:0e:57:1b:6c:af:26:21:5c:
23:72:85:7b:2a:40:99:a1:fa:df:f3:f6:b5:dc:f8:ee:da:c2:
78:12:40:c2:c0:20:ed:64:b6:c4:37:f0:f8:25:94:1f:77:83:
fb:a9:08:fd:37:20:61:83:6d:d3:43:bb:bd:b4:3d:39:01:8d:
bd:f5:9f:e8:71:22:d6:53:e0:72:46:13:be:ef:42:bc:87:22:
29:d2:96:f0:b4:59:37:4f:69:eb:f9:f0:84:eb:6d:dd:1c:50:
4a:f4:2c:5a:d3:fd:36:e1:3a:69:ab:96:7a:e6:61:11:3b:78:
45:f4:5d:47:3e:8b:ec:47:8c:ba:7e:88:58:f6:84:9f:0c:e1:
f0:ee:89:11:27:3a:1a:cd:d0:eb:a4:90:db:a9:c0:06:0a:5d:
1c:c0:18:3d:e5:3b:a2:98:b2:d1:08:41:fa:81:40:7b:09:68:
43:cf:61:2b:5c:12:6e:b5:9d:86:f0:78:39:58:5a:4b:38:3f:
7d:6a:fe:b4:24:5c:d0:eb:94:d2:68:54:d9:bc:e7:24:78:be:
59:49:9a:62:e6:93:e7:37:92:a6:72:fb:16:c1:37:89:7d:db:
7f:16:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:55 2025 by rpki-client