Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: MlLzEsSirrnJ304XaguD6XmKfiisxGSB2Zv34lD41vc=
Subject key identifier: B8:4A:B3:B8:C7:0D:2E:22:E5:94:62:65:F5:1B:25:68:3B:0D:F3:1A
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 0199FC583F3A2738675202B15918AED69EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 0A8E
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: PbdUjJvvRTXD7sWsAknX0L9qCw/32/kr7PIBxrhIygs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3f:3a:27:38:67:52:02:b1:59:18:ae:d6:9e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=b84ab3b8c70d2e22e5946265f51b25683b0df31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:e0:82:84:7a:1e:64:9c:aa:57:12:bc:cc:
a7:ee:02:cd:ef:92:e3:23:9e:ba:d7:c4:58:75:0f:
3f:97:9a:fe:14:5e:ac:37:bb:c4:ce:b6:44:ed:dd:
a4:42:7a:c6:a1:5a:0e:f1:c0:23:e6:d8:08:30:cb:
09:77:37:7e:fd:7f:fa:82:1c:77:2a:33:e7:66:b3:
ae:25:2e:00:88:b6:a3:bc:9b:c8:df:70:b9:e0:3e:
64:b7:ab:94:c9:65:20:b5:f1:6d:00:fa:ea:7d:e0:
e2:af:27:ed:10:f9:ef:31:89:a0:32:83:20:0b:97:
c6:34:44:fe:8a:47:35:0e:ef:40:41:3f:8a:0f:74:
2c:6a:dd:e5:3f:04:82:a0:a8:46:d7:83:4a:f9:68:
79:f2:a7:4f:38:c9:1b:ac:31:55:66:06:6e:a6:d9:
22:d4:bf:e9:a1:21:d8:14:b5:01:6e:2d:51:f6:4f:
79:18:25:d2:4d:8d:e7:b2:9a:05:47:5c:9c:f8:5c:
25:ec:d6:b5:c7:59:44:61:27:19:68:e8:8e:b5:c3:
c7:8d:8f:a4:db:78:c7:cb:b7:48:b1:e7:f0:41:77:
5e:c0:39:b2:96:a3:86:c1:af:16:f2:25:36:7f:3f:
54:a4:8a:38:44:d2:ed:85:64:1d:0e:a3:67:f0:f5:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4A:B3:B8:C7:0D:2E:22:E5:94:62:65:F5:1B:25:68:3B:0D:F3:1A
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:01:95:34:95:cc:1e:ca:37:b0:0e:ec:0e:7c:d5:0d:6f:bb:
a9:4f:db:18:e7:bd:53:ae:58:58:ea:42:3f:73:c9:0b:a7:eb:
83:7a:6b:ab:ae:d6:5f:77:ff:b8:66:2a:99:70:c2:40:cb:2e:
a9:1f:d0:41:3e:e3:88:c2:fa:6f:7b:01:e2:09:39:0b:54:4c:
f4:52:f5:49:ee:5f:82:f3:52:63:67:81:cb:99:fc:35:ec:67:
70:27:bc:16:63:f4:85:ec:bf:a5:65:78:d1:db:85:db:ec:16:
b8:9f:0b:a1:1a:72:f8:91:8a:ed:0e:f4:3a:ff:cf:21:cc:e9:
aa:7b:82:39:be:93:c9:35:6c:f6:01:66:42:46:a4:5a:08:13:
b2:50:32:eb:f7:81:e7:38:c2:25:0e:cb:12:e6:46:19:80:ea:
f4:c9:d3:2f:37:3f:aa:f0:6e:d7:04:87:e1:9f:99:89:dc:12:
b5:34:20:f4:24:8f:3c:fd:26:56:15:1a:ea:33:4e:e7:30:64:
5b:2c:48:1c:4c:9a:a3:79:80:a2:9a:ef:b2:a9:ec:eb:72:2e:
cf:2d:7e:a2:1d:10:b4:5d:d5:cb:7b:96:df:97:be:a0:66:04:
6b:55:3b:b1:ac:46:02:38:46:e5:3f:dc:24:4e:2f:92:10:5d:
9c:fc:13:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:55 2025 by rpki-client