Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
File: kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft (raw, json)
Hash identifier: 1NaWZt0SGwfLyXdEglQAYcU6SAHise4IYW7d1yrORX8=
Subject key identifier: FF:3F:33:2E:E3:84:15:B7:B8:4E:49:7C:07:2B:3F:A2:0F:FD:52:35
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Certificate issuer: /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial: 0198D65F56457B61E7C5BC5959A90B53E8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
Manifest number: 13EA
Signing time: Sat 23 Aug 2025 10:00:28 +0000
Manifest this update: Sat 23 Aug 2025 10:00:28 +0000
Manifest next update: Sun 24 Aug 2025 10:00:28 +0000
Files and hashes: 1: kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl (hash: soxQtNonm3VKDXkBYxrT0CVtnZWGOa1nMQ3nteSu6LQ=)
2: ygERJqcQ4QTw-4htxExNNa3ryrY.roa (hash: oHYECnW1S/Ihx44EhZXx30t95YlwKaYqRwWqZ5uqDnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:56:45:7b:61:e7:c5:bc:59:59:a9:0b:53:e8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Validity
Not Before: Aug 23 10:00:28 2025 GMT
Not After : Aug 24 10:00:28 2025 GMT
Subject: CN=ff3f332ee38415b7b84e497c072b3fa20ffd5235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:78:f0:12:83:fb:05:aa:a7:26:af:df:23:
51:57:31:00:fd:45:4c:27:bb:7c:cc:87:59:48:5e:
ea:ef:90:58:41:eb:2d:48:84:d7:c3:43:67:1c:ba:
0f:c4:b4:5b:51:74:f0:05:c3:0e:1f:08:75:13:59:
1b:a5:4c:59:2e:4c:fc:5c:eb:e3:e5:3e:04:d3:99:
c4:a7:22:45:94:3e:ab:82:d7:ac:85:e0:f6:8e:76:
0a:74:b0:e5:7f:35:3d:d9:e9:93:b9:67:5a:04:bb:
b6:06:eb:ea:6e:ab:19:22:d0:3a:42:c7:6f:9e:b0:
2c:6a:a9:6a:c5:1f:08:70:1c:65:53:40:1b:ea:4e:
81:2d:1c:66:9c:6c:ff:d8:31:57:15:a4:0c:b7:db:
92:14:f3:b3:4f:3b:f6:05:27:37:3d:b2:18:1e:54:
04:a6:18:5a:c3:be:48:23:d2:bd:13:0e:dc:85:a7:
1b:bd:55:1a:4b:88:a5:1a:52:77:04:92:b6:4b:99:
4e:2f:51:bb:fb:2b:a4:1a:46:e7:13:a4:d0:54:da:
17:5b:14:67:9a:32:fe:19:27:2c:9b:fc:99:52:31:
07:33:a5:b1:dd:f5:ac:29:b1:f8:ad:93:9f:7d:b1:
3c:5a:32:c1:cd:aa:24:49:27:a5:77:52:e7:63:d4:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3F:33:2E:E3:84:15:B7:B8:4E:49:7C:07:2B:3F:A2:0F:FD:52:35
X509v3 Authority Key Identifier:
keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:de:86:cc:87:78:9d:06:e3:ad:2e:f1:c5:72:c8:4b:75:e7:
c2:c2:ca:b4:14:35:48:e7:85:2d:ba:3f:38:78:52:a1:b4:ea:
36:2a:9f:2d:13:6c:dd:df:5d:a9:b8:e6:10:14:89:7c:43:82:
89:1d:76:28:5f:d2:f2:24:62:f9:9c:e5:3e:2b:80:1f:e6:9a:
ef:fd:91:78:f0:46:52:1f:5a:76:70:3f:93:08:40:4e:7e:64:
3d:78:57:c8:26:74:bc:0e:24:f9:17:93:77:c8:58:34:fa:39:
8f:7e:33:49:c3:4e:bd:f0:6b:30:09:47:91:0b:7d:0f:cf:90:
4a:d8:a0:5e:af:44:71:16:23:9a:c7:a2:87:c8:8c:81:6e:22:
85:02:1b:ca:9b:df:d4:29:b1:79:aa:cf:72:bd:d0:f8:ff:a4:
41:67:0e:ab:88:1b:77:49:24:d3:8b:b6:a3:e9:26:b3:76:0a:
3d:9c:46:1a:2c:6a:0d:63:95:76:b8:b8:5b:54:15:d0:e7:02:
73:4f:96:05:4a:79:91:f5:6e:4c:83:34:70:85:78:54:50:22:
d2:2f:06:e4:73:28:b3:2d:54:94:d4:a9:c3:33:30:d9:69:d7:
bb:46:9d:21:ae:84:82:77:00:83:f9:73:ec:83:78:3b:ec:af:
39:29:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:31 2025 by rpki-client