Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: x3nBPf2PGi5VfG+T9kMHawtpfebyhfhUUecdAG5yrwQ=
Subject key identifier: 27:51:BE:90:D2:3A:E6:AA:BC:77:C5:D1:28:E5:65:AE:30:75:B6:F8
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 019A00A32956170F6355779A0C42C07DE943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0B88
Signing time: Mon 20 Oct 2025 08:01:24 +0000
Manifest this update: Mon 20 Oct 2025 08:01:24 +0000
Manifest next update: Tue 21 Oct 2025 08:01:24 +0000
Files and hashes: 1: g5z8NV4dmlaKd11s7v3mxc0KYqU.roa (hash: bnZ9DFLSZGC/zi7MlcnpGi6LDIICQO79p3wjfCQfT+E=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: zczwb7QHYvz5f4epwBExREIzrUgBWsmig6wWIJWNI5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:29:56:17:0f:63:55:77:9a:0c:42:c0:7d:e9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Oct 20 08:01:24 2025 GMT
Not After : Oct 21 08:01:24 2025 GMT
Subject: CN=2751be90d23ae6aabc77c5d128e565ae3075b6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a9:2e:0a:03:54:c9:3e:94:73:06:79:8d:2a:
38:e4:5d:26:61:c2:7e:29:1f:bc:48:43:d9:aa:ba:
9d:36:f7:05:b1:c0:b6:d6:d5:97:aa:f9:67:d5:39:
ef:9a:c6:56:10:53:11:2f:d9:ef:01:41:97:5c:8a:
78:b9:56:39:a9:47:2e:75:d4:ed:fe:94:60:6c:3a:
ce:37:8a:08:20:6b:47:b1:cb:2e:1a:ca:21:b3:ae:
40:00:0b:e0:2e:ed:e6:37:9a:ce:c7:95:e8:09:cb:
b9:f8:97:ae:13:40:20:54:bd:af:1c:b9:95:19:ff:
29:55:83:90:7b:c1:d0:33:87:02:ba:66:6c:f2:4f:
4c:5c:fb:fa:02:c2:91:92:d2:9b:19:bb:98:f4:ac:
24:9e:e7:92:78:7e:85:18:53:51:7a:75:40:89:fd:
02:24:dc:a3:48:a0:df:ab:1b:00:3e:3a:35:e8:19:
8e:c8:a2:d1:3d:8a:bf:5f:51:a7:50:97:36:b8:45:
e0:de:32:29:1a:ce:56:78:e5:aa:d2:a1:53:ff:25:
fb:09:0b:2f:cc:8b:c2:96:da:4e:7d:c2:18:61:cb:
77:d5:40:a6:85:3e:f6:58:a4:58:9d:e8:95:48:bf:
0f:b2:4e:29:11:1a:bc:bb:7c:08:f2:06:62:71:9e:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:BE:90:D2:3A:E6:AA:BC:77:C5:D1:28:E5:65:AE:30:75:B6:F8
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:43:65:85:c7:8d:e2:fd:c8:88:cb:94:fa:10:17:38:d0:f5:
19:9f:6b:4b:4f:e3:3d:8f:2a:5e:46:5f:82:f9:19:89:e8:3c:
5b:8e:59:53:69:80:96:1c:2c:d0:f8:98:91:f2:24:0d:4d:51:
0b:80:90:33:bd:9c:bd:84:b2:aa:ef:14:37:dd:b8:ba:3c:be:
9c:bc:90:3c:1b:1b:e3:2c:f9:3b:2e:2b:03:70:4a:79:d9:22:
75:7e:f5:97:aa:26:13:5b:ad:cc:b8:19:af:be:ac:04:97:a9:
e2:a5:22:16:50:f2:ea:aa:b9:3b:5e:d2:a6:a7:ef:24:4f:44:
80:4a:6e:f7:83:ae:31:d9:76:df:42:ea:88:2d:9e:44:53:92:
6b:48:8c:4b:52:a5:ca:38:fc:ab:33:e2:44:fa:83:26:b9:ee:
b6:7c:2b:76:7e:99:2c:03:9b:66:61:26:48:d7:c8:e1:ea:60:
2c:e4:e6:f6:63:bc:db:ff:8a:e5:d2:8d:dc:8c:d7:fe:34:b5:
e9:d4:f1:2f:40:30:b1:03:33:93:1f:c8:9f:06:76:39:43:7d:
19:33:52:16:4e:67:c4:bc:6f:cd:f2:6d:11:95:18:fb:13:bc:
6a:5c:0e:40:aa:a6:92:a9:04:77:61:32:9e:bc:29:3c:95:a0:
b5:37:d6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:05 2025 by rpki-client