Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json)
Hash identifier: h9Ji5xHP+6mRm98nkeOOla5WqYR0WgiOlOuuilAU814=
Subject key identifier: 94:9A:84:03:FA:4D:03:21:7D:C6:F0:9C:37:E8:8F:65:1D:09:D9:79
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial: 0198D4A81A36D48ABA668DA8781560A6B699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
Manifest number: 139B
Signing time: Sat 23 Aug 2025 02:00:43 +0000
Manifest this update: Sat 23 Aug 2025 02:00:43 +0000
Manifest next update: Sun 24 Aug 2025 02:00:43 +0000
Files and hashes: 1: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: XWgk6aTZrMsmzG3enYUDUc7yFZWPufxgtROVOQot0R0=)
2: yawZ00_1T1Sp8kgBpRr9kJDLMKE.roa (hash: a+4sT7IhaHQCrsjdIym/2JOKSsvSh3sX6W3E1vUrWYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1a:36:d4:8a:ba:66:8d:a8:78:15:60:a6:b6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Validity
Not Before: Aug 23 02:00:43 2025 GMT
Not After : Aug 24 02:00:43 2025 GMT
Subject: CN=949a8403fa4d03217dc6f09c37e88f651d09d979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:4b:3f:51:10:66:0b:8d:99:b0:06:14:a2:
50:4a:60:4d:4c:64:70:3f:9c:e4:d0:f9:c9:09:c9:
0f:8f:ec:ff:9a:b4:73:2b:77:ed:11:df:e9:3f:1f:
b0:17:5d:b7:73:04:d5:93:58:fd:f7:66:61:e6:c4:
80:e7:4d:a5:d9:1e:3d:48:4d:6a:c3:54:e9:be:59:
44:f1:49:19:47:e4:93:5d:44:e3:3a:e4:c7:0e:6b:
00:f1:e5:77:2d:3c:ee:fa:9e:e1:33:ee:7f:40:ca:
52:85:60:a9:b9:bc:fc:41:37:cd:83:74:b7:10:b8:
4d:34:a7:01:3e:cc:d0:a1:fb:34:5e:77:96:30:b8:
26:bf:83:56:d8:57:fd:13:04:4e:88:d9:07:de:32:
ec:94:c5:8d:c9:db:9e:fa:1b:c2:da:09:ce:12:a4:
ab:57:a7:62:84:c9:4d:11:75:d0:2d:73:91:fa:60:
c2:27:36:91:37:c7:9f:b9:5b:15:80:e4:fa:43:19:
d8:8b:8c:55:55:90:81:a7:24:f7:da:8f:b2:b2:db:
f8:46:25:24:22:a9:1b:49:0f:58:85:24:66:80:c4:
53:91:4e:5c:ad:82:ea:4f:00:c1:5b:fa:ea:24:46:
74:84:e1:41:10:77:33:34:49:e1:73:07:f4:14:af:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9A:84:03:FA:4D:03:21:7D:C6:F0:9C:37:E8:8F:65:1D:09:D9:79
X509v3 Authority Key Identifier:
keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0e:50:b1:d4:ea:8d:44:da:6b:e2:9a:89:6b:11:87:06:38:
8a:b5:52:a5:05:e7:9b:2a:a8:31:24:13:a3:36:7b:2d:24:32:
31:6b:41:bf:39:36:a8:4e:3e:4e:2c:6e:42:24:ed:82:9f:4c:
f6:a3:7c:84:03:80:84:15:9e:c4:0a:e6:4d:8d:b0:8c:19:17:
ec:7a:d7:7f:b3:10:31:14:d1:a7:3d:eb:52:7b:4e:4a:26:57:
c7:c0:78:3c:cc:fb:36:4f:8c:2d:6e:2b:7f:41:a2:6e:38:60:
1a:5b:4c:80:0f:d1:2d:12:bc:fe:bf:c5:56:79:0d:c9:e2:44:
fd:b9:18:2f:26:ef:33:9d:1f:a7:29:a3:d1:b2:c8:f2:ab:ea:
04:a4:e5:d6:28:2a:75:3a:7a:15:72:9a:da:37:45:9e:c0:eb:
64:c5:02:d6:57:f2:bc:38:06:f0:dc:05:03:2a:9f:4b:70:54:
50:dd:4f:51:f2:34:78:75:0d:58:52:7b:83:35:06:f8:b4:0f:
d6:a3:84:a7:00:f7:66:97:fb:67:9d:f6:da:75:da:07:e7:00:
17:62:d8:f2:10:fa:6e:93:ab:53:2b:43:45:66:1d:57:c5:13:
05:c8:73:20:77:55:87:58:d2:d3:9b:f5:2a:ff:e9:bf:b6:61:
38:39:c9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:18 2025 by rpki-client