Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json)
Hash identifier: ppMtHWuVytcNsI7IoB9pprMYG2K4JnzLsFAXr0rwMLY=
Subject key identifier: E3:02:02:D1:F5:8D:8C:C9:18:23:AB:42:85:29:3F:52:1E:00:36:F4
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial: 0199FC215ADB476682D5CD33B010435CB4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
Manifest number: 1434
Signing time: Sun 19 Oct 2025 11:01:08 +0000
Manifest this update: Sun 19 Oct 2025 11:01:08 +0000
Manifest next update: Mon 20 Oct 2025 11:01:08 +0000
Files and hashes: 1: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: 3Yqr0udCLbYd4Lk1tQhuwTBg3+pEp9BDg10Ps5mPeo4=)
2: yawZ00_1T1Sp8kgBpRr9kJDLMKE.roa (hash: a+4sT7IhaHQCrsjdIym/2JOKSsvSh3sX6W3E1vUrWYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5a:db:47:66:82:d5:cd:33:b0:10:43:5c:b4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Validity
Not Before: Oct 19 11:01:08 2025 GMT
Not After : Oct 20 11:01:08 2025 GMT
Subject: CN=e30202d1f58d8cc91823ab4285293f521e0036f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:86:3d:c0:ff:42:b8:29:5d:98:c0:26:e9:
a2:c1:2d:96:cd:68:8a:6a:82:aa:9d:7c:35:87:05:
93:82:df:51:eb:2a:86:cf:3a:54:3c:a0:0c:d6:0d:
e5:bc:bb:89:1f:d5:be:e8:0a:2e:fe:f2:e6:e9:54:
44:19:76:d1:f8:91:22:7e:64:27:bf:65:ca:df:57:
3d:8e:ac:df:2f:93:03:cf:9c:87:e2:e5:c8:cf:75:
fe:11:66:79:71:3b:e3:63:87:2b:c9:c3:8e:98:fb:
f3:11:46:fc:a3:f7:c7:31:46:c1:6c:ba:6c:6b:af:
2b:fe:d4:14:da:73:62:3f:ba:f5:fa:c5:55:60:8f:
57:6c:77:9e:20:0e:f0:09:ba:c7:e8:b8:6b:7d:91:
91:3d:81:45:41:91:a0:6f:5f:d2:f2:b5:c7:86:8c:
0b:48:55:93:58:cf:6d:8b:62:86:97:62:cf:48:46:
e1:f4:e6:a3:b3:f3:1c:da:a1:b1:d4:6f:23:34:c6:
bb:3a:ee:3a:8e:10:41:c7:51:c6:a4:62:77:46:67:
ef:3e:e9:9d:00:d7:84:5b:1c:9c:33:c5:70:4f:3a:
b9:79:a9:d3:b2:ca:d5:cd:d9:28:f1:f0:eb:9b:b2:
7c:5a:cd:14:42:26:8f:02:a3:d9:e8:dd:e5:6a:03:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:02:02:D1:F5:8D:8C:C9:18:23:AB:42:85:29:3F:52:1E:00:36:F4
X509v3 Authority Key Identifier:
keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:96:76:28:bb:e0:e9:49:87:37:51:50:e4:a8:4d:84:c0:b0:
19:2b:9b:60:14:7b:0f:f7:bd:f1:fe:ae:09:74:89:8f:56:15:
49:9c:fa:67:29:18:49:ac:77:25:96:a6:90:ef:da:fa:c7:b1:
eb:92:7a:48:8d:f9:0c:70:af:ea:2d:4e:25:fa:8d:76:d1:7c:
54:df:61:13:fe:19:fc:22:5d:38:92:94:17:c4:6d:86:53:43:
82:54:97:c5:0f:ff:2a:01:da:28:0a:5e:f8:5b:cd:ef:d2:7c:
34:d7:4c:92:95:c5:d9:1d:fd:e9:d3:08:33:86:d9:c4:d8:51:
dc:49:58:f1:47:79:90:45:e7:91:1c:74:30:17:ee:2d:69:17:
ff:d0:11:1c:3a:48:b1:77:52:5f:74:3e:e1:3b:7c:98:2e:47:
86:19:fa:27:f7:ce:a5:a3:50:76:c2:10:5d:7f:73:e7:a3:31:
88:a9:af:3f:d1:d8:fe:1c:38:5b:e6:b6:89:22:90:5b:cd:ef:
f7:65:2f:5d:90:cc:dc:2e:e0:b3:bd:a6:94:49:7d:17:b6:74:
8b:2f:41:77:ef:e1:90:93:1c:ff:c8:3f:ed:1b:50:36:5f:b3:
15:0f:43:1b:4c:8e:43:66:2a:a3:4f:99:39:19:ad:cd:2b:fb:
49:c0:fd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:10 2025 by rpki-client