Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
File: kmhshS82--n8i-d8QJtSJqbuVNU.mft (raw, json)
Hash identifier: Ew3Keizt5eGgSqMhyZYAZZc7I9bXn8dRkmwmn1UQJDI=
Subject key identifier: 2E:45:D9:73:47:27:E1:E3:DE:73:43:E4:18:D6:1A:90:06:61:2C:D6
Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
Certificate issuer: /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Certificate serial: 019A4DAB159A8B648C5B5A3F9D12530CED66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 07:00:48 +0000
Manifest this update: Tue 04 Nov 2025 07:00:48 +0000
Manifest next update: Wed 05 Nov 2025 07:00:48 +0000
Files and hashes: 1: IvJ7HvT-6tCK5GKbaPNyk54ml9M.roa (hash: 7zWh/VLAgd5GsVxZJpmQ4YamOZV0jGAf5fVHM29zO30=)
2: kmhshS82--n8i-d8QJtSJqbuVNU.crl (hash: EaJMrQROlTikfye43rqiMvauJr5cW14bl8LYPLA6RIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:15:9a:8b:64:8c:5b:5a:3f:9d:12:53:0c:ed:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Validity
Not Before: Nov 4 07:00:48 2025 GMT
Not After : Nov 5 07:00:48 2025 GMT
Subject: CN=2e45d9734727e1e3de7343e418d61a9006612cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:0e:4e:a0:61:03:10:e5:88:ec:0d:a2:04:
8d:7d:6a:81:08:cc:eb:6e:64:f8:0f:c1:ca:b1:a1:
7e:b9:62:6e:22:44:77:48:d6:1c:54:e6:6c:8c:48:
88:fe:53:88:bf:82:ce:9c:d0:3a:bc:68:99:45:31:
e7:b7:ca:83:f7:db:f3:40:05:44:92:eb:2a:4d:bc:
77:d1:7d:ad:11:5d:a5:07:13:54:3b:65:3d:b1:49:
c9:e2:42:b8:99:b6:ff:5c:24:49:bc:e7:7b:42:b8:
5f:17:b2:ee:61:c3:5b:09:a7:aa:82:13:25:5e:b3:
0b:8f:0a:b8:59:51:76:1b:cd:c9:f0:f1:c4:21:b9:
20:6a:8a:20:bd:60:14:ed:ec:7c:c6:df:ad:db:26:
7b:d2:7b:0a:43:51:7a:0d:bd:64:f5:f1:c0:a5:c0:
89:e0:35:5f:50:ae:97:49:e4:10:94:37:23:76:3d:
1c:82:46:3e:34:b5:83:36:f6:a6:13:53:92:89:0d:
20:3c:00:c7:9d:0d:b5:5b:90:4f:53:e8:ba:38:2f:
0c:78:eb:56:f1:d6:7a:ce:5a:7e:32:89:03:59:7a:
d0:6c:11:7e:7f:5b:17:5d:01:6f:a8:77:15:79:87:
34:8d:f9:11:7a:e8:35:d7:9e:cb:e0:94:22:ff:d0:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:D9:73:47:27:E1:E3:DE:73:43:E4:18:D6:1A:90:06:61:2C:D6
X509v3 Authority Key Identifier:
keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8b:eb:ef:29:21:3d:e1:2d:c5:dd:7a:00:01:a5:a4:aa:07:
54:ba:2c:2b:b3:09:2b:58:fa:eb:9e:1e:4e:e1:cc:bc:92:2f:
b5:d5:2c:68:a9:a0:1b:b0:82:63:7c:76:ef:42:11:8d:9e:a1:
b9:4b:50:84:a8:77:28:21:9b:d1:60:db:f4:9c:27:49:9c:c2:
3e:6c:71:5b:cf:d8:0f:17:82:54:e3:41:36:ac:3a:5a:87:c5:
d7:72:7a:57:21:36:06:b4:9e:be:c5:10:34:5e:d6:58:a7:01:
c2:bf:cd:d7:b9:f4:a0:18:a9:53:1a:58:ef:f3:4d:55:c9:97:
e8:2e:d6:fb:1a:bd:30:17:4d:5d:0b:66:b2:86:ec:b4:69:62:
d3:46:2c:48:4c:f4:5d:8c:dc:89:4e:da:5c:0f:f0:cf:d2:dd:
a5:85:3b:08:2c:99:81:f7:21:bf:2b:64:83:f2:31:90:b9:95:
f1:fb:76:1d:da:43:90:52:e6:6b:7e:e7:58:26:1c:e6:a8:11:
c7:01:ad:7d:95:ce:fe:d4:23:eb:f5:f9:42:3b:58:58:dc:c9:
02:0a:fe:02:3c:30:b3:da:60:9a:26:82:c0:12:af:10:ce:5b:
4e:f4:47:19:99:08:31:e9:07:c3:01:eb:e4:ef:07:b6:3a:c2:
93:c5:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:15 2025 by rpki-client