Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json)
Hash identifier: PQ49grrvT/1rhhBL1tUwspoRjG79y3O4UHKe1fAQrYU=
Subject key identifier: 71:2F:F5:27:38:13:13:6A:E8:4F:A8:5F:31:EF:AD:9A:1B:26:7D:02
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial: 0198D73AF22A596517BE122ADF4C9705F884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
Manifest number: 013A
Signing time: Sat 23 Aug 2025 14:00:21 +0000
Manifest this update: Sat 23 Aug 2025 14:00:21 +0000
Manifest next update: Sun 24 Aug 2025 14:00:21 +0000
Files and hashes: 1: 1-7F7uRrzkG49KON0y5p0a13vs8Q.roa (hash: kEJxDITGpSCiq2yfNEGAfr3dH9UBq24wh61zctycgJ0=)
2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: uNrLb2EXopruHqI0c9g0AngfRuG9qcUDmeofAd07ncg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:f2:2a:59:65:17:be:12:2a:df:4c:97:05:f8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Validity
Not Before: Aug 23 14:00:21 2025 GMT
Not After : Aug 24 14:00:21 2025 GMT
Subject: CN=712ff5273813136ae84fa85f31efad9a1b267d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d8:f4:26:02:95:f4:c3:67:64:76:05:2b:56:
ce:92:98:b4:4c:b6:cf:1e:28:f9:94:5e:0c:78:94:
68:2c:06:5f:51:77:9e:66:f9:15:f5:5a:33:98:26:
97:5f:28:3b:39:a8:94:5d:fd:5a:37:42:8c:b7:2d:
43:bd:af:78:4f:f5:bc:3c:a1:84:9b:63:80:fb:a5:
a7:32:b8:eb:f6:e2:0f:13:ca:57:92:0d:10:50:94:
36:0a:91:f0:75:4b:77:29:1e:92:10:79:99:08:2e:
7c:ee:51:0f:da:a9:1c:99:1f:fa:ca:29:71:1f:e3:
0d:89:3f:a6:c4:db:49:de:85:00:06:b5:fa:bb:6a:
4c:de:fd:72:cd:6a:5a:70:7d:e4:05:04:f4:0e:98:
e8:48:ac:11:26:39:a6:13:86:4d:74:5c:02:67:6a:
6d:97:dd:eb:df:b8:60:c7:16:16:01:15:b4:c5:2b:
1f:b4:8d:55:66:84:5b:1b:77:fd:32:cc:51:33:96:
c9:74:17:2e:cc:13:5e:70:9f:4d:3e:a3:bb:85:a3:
86:fa:8d:22:87:fc:15:2f:fd:67:c3:f7:3c:e6:05:
bd:3f:f2:07:fc:07:a9:0f:7a:64:f9:1d:7a:d7:cb:
65:79:ba:12:53:a0:dc:9c:ab:7f:7c:71:c8:80:c8:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2F:F5:27:38:13:13:6A:E8:4F:A8:5F:31:EF:AD:9A:1B:26:7D:02
X509v3 Authority Key Identifier:
keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1c:5d:ba:ff:c1:af:31:8f:f0:83:6c:9c:e4:b8:66:6a:92:
b5:2b:06:31:08:70:6d:7d:a9:e0:78:15:52:08:4e:e7:07:ef:
a2:2c:4a:b1:0d:ab:9d:bf:d9:d8:8e:58:44:8e:d8:4a:47:e1:
8f:49:7c:5a:cf:19:16:c6:13:a0:66:80:d7:ef:68:f9:69:3f:
c0:09:83:ae:22:d7:08:49:08:38:38:db:e8:a7:aa:f1:81:0d:
63:80:df:da:8b:c5:71:e8:89:94:a6:99:15:34:d1:02:86:31:
2d:66:5d:e5:67:da:c0:12:6f:8d:30:3f:59:17:1e:f4:65:f7:
bb:4e:fd:9a:02:92:0f:f5:92:d6:da:75:e8:44:4d:15:f1:a9:
c9:59:14:6c:2f:16:4a:dc:f4:7b:1f:8e:76:b3:77:25:61:63:
10:b5:3a:e0:b8:3d:3c:3c:87:20:2f:63:db:77:48:89:0b:59:
b9:4b:9d:bc:16:da:3b:12:2f:3b:d7:6d:3f:a9:03:32:31:64:
b5:e0:70:0e:3e:8c:7a:1a:e1:d3:8c:f5:ec:4a:bc:84:f1:db:
64:92:3a:6f:d9:42:e9:f7:36:b4:cf:5b:27:fd:6d:58:15:12:
a3:fd:99:6e:38:e2:7e:c5:78:63:3a:db:09:62:7a:3a:79:64:
c9:e9:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:16:34 2025 by rpki-client