Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: tHIRYvp6GyKPGWrLo4jTDWkeg19ch144q0comhBE9Ko=
Subject key identifier: 24:86:9E:1E:32:84:2D:79:3D:77:FE:0F:D8:B8:12:2B:B0:0F:51:DC
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 0198D4E04724E2F068F48F88B68B85A1076C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 09F5
Signing time: Sat 23 Aug 2025 03:02:04 +0000
Manifest this update: Sat 23 Aug 2025 03:02:04 +0000
Manifest next update: Sun 24 Aug 2025 03:02:04 +0000
Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: TS/+W0+D7thXKJUqrLikDR/6EWNwUzC+tud6G079Zsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:47:24:e2:f0:68:f4:8f:88:b6:8b:85:a1:07:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Aug 23 03:02:04 2025 GMT
Not After : Aug 24 03:02:04 2025 GMT
Subject: CN=24869e1e32842d793d77fe0fd8b8122bb00f51dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:c5:e2:85:49:24:b4:e9:77:5a:3c:cf:3e:
a0:bd:79:c4:09:87:83:69:81:da:ee:5b:65:67:9a:
1a:84:e6:6a:2a:20:0a:4f:73:37:35:4c:8e:d2:28:
a8:71:c5:8f:72:7c:18:5c:19:6a:59:91:26:0c:80:
15:fe:78:8a:48:d0:44:36:85:e8:5f:3d:fb:3c:d3:
8d:31:80:1c:e2:fe:00:b7:07:ca:75:bb:5f:0d:bd:
56:9b:c6:8c:61:4a:6d:8d:f1:02:49:06:44:55:ea:
f5:d5:1d:3d:cc:04:f3:59:ab:c0:69:57:ba:7e:38:
31:26:79:79:22:78:bb:57:15:bc:32:91:0d:a4:34:
a3:25:93:c7:8e:f9:18:28:04:46:9c:f9:e3:55:33:
a9:f2:33:4f:9a:34:c5:81:09:7f:2c:0e:b2:8b:39:
ff:4d:9c:aa:d2:2d:ef:bc:aa:7c:8a:84:d4:de:53:
8b:19:e4:70:a3:3b:49:fc:bc:62:a9:a0:73:50:aa:
60:49:3b:02:89:64:c0:b4:31:03:65:78:cb:3c:69:
2e:b0:69:30:32:c7:1f:8b:44:23:25:b6:14:ed:de:
05:e3:fd:88:d2:a2:3b:79:97:db:0e:08:0c:e6:5c:
f7:f8:5c:7d:e1:54:68:11:c5:ee:39:fc:a7:40:b7:
6b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:86:9E:1E:32:84:2D:79:3D:77:FE:0F:D8:B8:12:2B:B0:0F:51:DC
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5c:bc:eb:8a:57:49:68:a5:ca:fb:42:de:93:5f:08:9f:4a:
0b:3e:6a:50:37:39:f8:47:1b:ae:e0:24:23:22:23:93:16:72:
62:24:00:21:a0:71:45:91:5b:64:7f:20:2f:d4:ac:95:26:53:
2e:88:d8:de:b6:58:db:41:00:79:97:56:b8:23:80:dd:c7:9d:
d8:c7:b3:1b:c0:35:14:94:a1:c2:e2:38:fe:b7:a3:06:37:73:
73:1d:81:7f:61:b0:f1:d5:32:c9:e9:54:98:83:40:a4:e6:aa:
74:d5:a3:a1:03:b5:26:66:37:63:d5:2f:41:9d:58:a0:a6:0a:
41:ae:e2:fa:24:2d:8d:65:8a:63:3b:2a:58:c3:b8:71:11:51:
ae:40:6c:2b:54:c2:9e:87:e9:a5:ff:1e:ce:52:58:f6:84:c9:
85:7e:6d:fa:12:0f:8e:0d:82:95:90:e6:e8:26:aa:5c:97:f8:
6a:82:82:59:ed:5e:9b:52:14:b4:f6:ea:b2:dd:79:f5:eb:9e:
cd:cd:b3:f0:5d:9e:07:c1:9e:a2:7f:4a:63:d8:b4:1e:3b:82:
eb:af:52:b7:32:ce:e7:8b:75:1a:95:b8:4f:23:cc:6f:60:98:
cf:21:0f:e8:1a:97:33:dc:b3:04:39:98:ee:17:13:bc:08:8d:
2b:e7:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:15 2025 by rpki-client