Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: q7cOtRcCHfcPN77m6sClWHBY4po5BNlGgZrQ6A6emJ0=
Subject key identifier: 03:42:09:97:98:5F:22:FB:EC:81:47:29:B3:15:95:CE:26:21:B7:04
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 0199FCC67C23B4149E0461D0A5710E27BF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: UTGpFnNtbmvGmhF44AtWl7xyv6/CUAtboWImNup/qNY=)
2: v64OG16FRTD93CnYY-754YZNyZ4.roa (hash: p7D4RC+KDdym5ItTd1PLmzFnbXnv40mOj51eqApvqXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7c:23:b4:14:9e:04:61:d0:a5:71:0e:27:bf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=03420997985f22fbec814729b31595ce2621b704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:33:2a:40:e4:ad:f8:5e:1d:d4:ec:6b:c9:
a6:95:5d:f0:d0:11:c5:2a:1d:86:e5:26:38:40:e3:
a4:10:7f:ad:9f:01:6b:0d:7a:f2:95:44:8a:fe:d7:
16:41:7f:bf:4e:a2:f6:24:43:b6:b3:f4:ba:3c:9a:
01:8c:5b:fe:4a:33:ac:47:a7:ae:3a:c6:76:30:0c:
55:60:a3:b2:b6:04:ca:d0:72:0f:7f:73:a7:22:b7:
a6:1d:fb:42:1c:ad:73:4f:72:2f:48:21:46:14:48:
e6:3c:74:68:6c:6b:14:e1:59:e2:98:d9:73:e8:85:
f1:86:ab:7a:c3:8f:68:50:4c:d0:cd:90:f1:30:df:
95:86:0d:83:89:26:45:ff:83:b6:da:28:0a:f5:3c:
22:1b:78:0c:da:14:56:42:b8:b2:44:0a:94:eb:dd:
b6:44:10:9a:33:bb:a4:03:4d:6b:91:e4:cf:25:a0:
b2:01:9e:81:f0:35:74:34:e6:a5:a3:07:8f:46:cf:
c2:39:7e:ab:9f:ff:62:59:94:c3:48:b2:ae:8d:0d:
12:a2:75:98:c0:91:c6:ac:4f:1d:41:58:9d:dc:bf:
b2:6d:33:39:12:15:53:02:03:5b:09:ec:e5:62:d6:
eb:9e:02:8c:e2:cd:c2:2c:f7:d1:d0:08:99:eb:d4:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:42:09:97:98:5F:22:FB:EC:81:47:29:B3:15:95:CE:26:21:B7:04
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c9:94:db:9a:82:4d:86:9c:7c:d6:8b:cb:33:45:63:92:09:
22:eb:e2:32:eb:d2:02:ac:72:bb:84:f3:2a:dd:fc:44:6a:b8:
81:e6:8e:c8:15:3c:de:50:93:41:4a:68:58:33:6f:9e:52:d6:
07:76:0f:58:55:04:a9:b5:fa:0c:32:bf:bd:33:a3:39:c4:ae:
38:31:80:a4:9e:7f:63:fb:87:03:de:1d:51:cd:c3:ae:a3:58:
5c:70:03:3f:82:50:4d:ef:3b:4f:ea:91:a7:f9:1f:43:07:ee:
c1:e7:28:a3:a6:c5:a8:29:1d:8a:16:65:40:4a:6c:f5:4d:51:
88:cc:fb:93:fa:8f:87:cd:78:5f:fc:86:91:82:60:46:a5:71:
7f:4b:5b:c6:d4:14:ba:98:eb:60:78:db:6f:81:eb:f5:e0:b0:
c6:12:84:de:ef:bd:6c:65:b4:10:14:44:4c:71:56:8d:e5:38:
cf:af:1d:5a:74:e1:e4:1c:72:69:ee:c4:50:6f:4f:1d:34:3e:
a5:e2:6e:f0:ce:01:83:e4:30:4b:b0:07:a1:a7:03:d4:d8:cd:
0a:c9:2b:e1:68:dc:18:42:8d:44:8f:6d:1e:ea:5c:c2:64:6e:
0e:ec:30:3a:13:b2:86:d6:24:32:a2:63:9f:a3:82:b8:05:e6:
15:1f:03:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:32 2025 by rpki-client