Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
File: kHpcTqRTtGyByxNtkrkwmxRsPkU.mft (raw, json)
Hash identifier: ji381CPhUKygJDxYPwf9y0aHg9LNtGzgKcs9oCsZ3wU=
Subject key identifier: DD:2E:55:AF:7A:4A:EA:36:06:FB:99:B8:9B:85:FD:FE:B5:0B:A0:AC
Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
Certificate issuer: /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Certificate serial: 0198D65FB15E0C5CCCE8E26E74DF5DC64FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
Manifest number: 0955
Signing time: Sat 23 Aug 2025 10:00:51 +0000
Manifest this update: Sat 23 Aug 2025 10:00:51 +0000
Manifest next update: Sun 24 Aug 2025 10:00:51 +0000
Files and hashes: 1: kHpcTqRTtGyByxNtkrkwmxRsPkU.crl (hash: tWtxJG2YstwbdYbMWfEzvK6jeao6cUQRhKOnUUpB730=)
2: y00kCOm4x0sTFaBDOqD5L5fES6Y.roa (hash: G4M+BrvsrjKhmQGsYy0izNdpM9hsyiGzIDC7Si8ke98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b1:5e:0c:5c:cc:e8:e2:6e:74:df:5d:c6:4f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Validity
Not Before: Aug 23 10:00:51 2025 GMT
Not After : Aug 24 10:00:51 2025 GMT
Subject: CN=dd2e55af7a4aea3606fb99b89b85fdfeb50ba0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:02:c8:a4:c2:6f:11:b3:11:dc:bf:57:ee:
29:cb:ac:c3:7a:77:cd:ce:a5:9b:d0:1a:a1:88:dc:
8d:ed:9a:36:3f:82:8b:18:0a:40:3b:96:1e:8d:0d:
72:8b:92:3b:24:9c:8e:c7:ab:b3:ef:a0:a1:70:54:
e3:e2:e7:99:75:58:de:86:07:3c:62:04:6c:64:42:
44:5d:a8:1b:79:ac:1e:ac:db:d2:a6:7b:c3:2f:a8:
f4:20:a8:06:e9:c3:86:33:51:0f:a4:83:2e:d3:13:
01:a4:a4:0c:92:3d:4e:62:83:da:5e:9d:2b:15:a0:
9b:19:7c:ff:aa:78:22:02:1e:5c:00:1a:75:d0:91:
12:5c:12:bd:dc:bb:75:d2:99:09:d1:34:9d:6d:1e:
75:9a:c1:39:9b:fd:c0:c3:3b:0d:bb:55:87:45:35:
7a:23:b2:35:a9:12:07:03:a8:08:74:10:9b:93:68:
73:ff:ce:e6:3e:1b:38:88:1a:8a:f2:87:cd:59:7f:
58:48:b9:ee:f2:62:90:54:8a:59:c5:22:15:b2:af:
b6:42:99:69:14:5a:7d:a9:8f:80:42:b9:3a:f8:8b:
04:1a:ad:51:bf:ba:78:51:22:b7:6c:46:8e:65:da:
c1:b6:6c:20:da:44:80:3d:81:5f:04:a3:86:eb:a6:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2E:55:AF:7A:4A:EA:36:06:FB:99:B8:9B:85:FD:FE:B5:0B:A0:AC
X509v3 Authority Key Identifier:
keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0f:b5:6f:cf:19:53:53:07:45:ed:73:59:00:b3:41:f8:93:
14:76:b8:de:30:9d:52:26:ed:af:57:8f:f6:45:0a:28:d7:ea:
93:16:d3:aa:ec:2c:4e:3e:02:3a:38:2e:0a:98:8c:82:27:04:
5d:0a:67:7c:f9:57:0b:b1:f1:b3:4c:ba:ec:ba:d7:de:b5:be:
0b:3c:51:4c:09:46:0d:50:df:51:7b:30:1a:df:31:b8:08:df:
99:85:a9:bd:a8:96:c0:f5:a6:ff:cd:d2:5c:08:35:b9:91:c1:
0b:60:38:d9:70:82:32:cc:13:fd:02:75:ed:ef:6f:2d:2a:29:
e0:30:ba:af:fe:48:f9:0a:cd:ce:cc:66:da:9d:4f:30:72:82:
1d:7e:6e:43:84:11:7d:f1:c3:55:c4:68:ad:7a:bf:d0:d2:44:
9e:a7:e1:9c:b2:23:51:ad:15:1b:8f:eb:31:14:35:3e:72:57:
3d:cd:1c:61:8f:9e:24:42:0a:ea:c1:d4:bf:ae:37:09:c2:ca:
c6:c3:4d:ae:4a:62:5e:36:e4:87:b9:fb:c8:f5:27:7c:04:55:
1b:ac:98:c3:45:1d:ef:ba:ff:a5:d3:9c:5b:ce:e8:75:07:06:
17:2e:05:7d:4d:09:1f:59:a7:1b:2b:fb:19:63:96:1b:05:50:
7c:75:09:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:19:05 2025 by rpki-client