Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File: kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier: OlBA8xzgbGwcn0LojRq+3Z6O5Zqu3ujQ6unB6oGh0dY=
Subject key identifier: 3E:41:35:4A:94:8D:E3:30:AF:DB:96:24:69:AB:03:90:64:14:0D:BB
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer: /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial: 019A4E18A2E8A47F2602EA6CAAE77D1E74F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number: 0759
Signing time: Tue 04 Nov 2025 09:00:28 +0000
Manifest this update: Tue 04 Nov 2025 09:00:28 +0000
Manifest next update: Wed 05 Nov 2025 09:00:28 +0000
Files and hashes: 1: NSppdy32pK0kuht35Ks5xIRdV5s.roa (hash: e3lqo49PNkPXZsVtpcSw5P8QfGbIbaYvIeXnhh1mWBY=)
2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: pp394D6dVXwTDLfQmYY2MNwK2L5AJY7HUZtdMcXAXtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a2:e8:a4:7f:26:02:ea:6c:aa:e7:7d:1e:74:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Validity
Not Before: Nov 4 09:00:28 2025 GMT
Not After : Nov 5 09:00:28 2025 GMT
Subject: CN=3e41354a948de330afdb962469ab039064140dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4f:03:33:d9:72:29:ed:96:88:5d:dc:cc:10:
f1:c7:fd:a0:1f:6c:ea:3a:07:19:37:3a:d3:9b:f2:
c7:c4:fd:76:bc:dd:bb:3b:5c:0c:86:2a:7a:77:70:
e6:aa:be:cc:c9:33:ad:27:62:1d:79:e0:5e:56:ab:
d6:21:db:10:c3:9c:05:a7:d0:8f:9e:87:69:b2:ae:
cf:60:fb:26:79:6f:2c:a4:93:43:ef:67:3f:b4:ab:
c0:4c:1f:33:02:66:55:2e:59:53:e5:f0:46:fb:20:
ea:d7:b4:38:e3:36:eb:63:d7:13:3f:10:dc:66:e9:
bc:c6:7f:c6:0c:1d:c9:ad:93:3e:8a:4d:ab:a9:a2:
5a:ce:4f:f0:ac:25:dd:7a:e2:3e:c8:a7:1d:f2:2d:
ed:1f:43:08:ac:73:3d:a0:bd:86:92:c8:66:c2:39:
9e:10:01:ae:7e:14:cb:95:33:24:72:eb:9d:d0:bf:
e4:a2:29:1c:3e:06:89:3f:5d:94:6f:80:e3:0f:d5:
f2:7e:a8:6f:2d:35:76:2b:fe:07:36:90:dd:eb:47:
92:3d:76:51:f4:72:8d:fd:b7:32:91:3d:cb:74:13:
7c:45:36:bf:75:7b:55:12:81:09:93:88:8f:f2:51:
cb:17:94:e6:e0:e2:f7:16:1e:c9:40:cd:9c:98:9b:
ba:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:41:35:4A:94:8D:E3:30:AF:DB:96:24:69:AB:03:90:64:14:0D:BB
X509v3 Authority Key Identifier:
keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ce:f4:5b:82:fa:21:9c:52:c6:7f:fc:ab:c4:e1:6e:a5:2d:
f2:9a:63:ee:b2:80:3b:ad:28:22:72:2b:b7:3d:5b:dc:b7:22:
76:5a:bb:93:55:78:5f:95:4b:7b:85:5d:73:60:4c:b5:2b:3c:
d5:e3:7b:35:cf:39:39:45:65:a6:25:a4:e1:f4:16:68:fd:02:
db:c9:13:ae:cd:a1:df:2c:c5:f1:a1:60:88:ca:5e:f6:b5:b3:
5e:91:4c:31:26:e2:d8:7f:d3:dd:c4:23:55:53:32:73:e5:c3:
05:55:4e:9d:62:8b:f2:e6:b6:ba:b9:76:c1:66:94:3b:36:8b:
15:6b:7b:85:00:35:5d:ba:d8:44:08:7a:84:3b:0c:6b:69:82:
a8:26:e7:1a:82:33:c9:0a:89:e0:f0:06:71:2f:e8:15:47:27:
42:73:5f:94:f1:48:3a:01:bb:ae:c9:85:5e:34:65:fd:36:4a:
10:36:b3:31:a2:33:1e:98:a6:fe:a5:8d:d1:89:c7:51:dd:f7:
f5:1f:a7:66:d3:51:06:ad:de:44:46:b1:5c:3c:4c:d5:be:90:
8f:ab:6c:82:ad:85:24:22:24:d8:3d:1c:5e:54:4f:36:e0:46:
e2:7d:d0:80:9c:3b:74:ce:fc:75:00:7b:1b:2e:35:ad:5d:8e:
03:ce:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:20 2025 by rpki-client