Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
File: kPZLEhCNmzZnea-6z0gvefjA4xo.mft (raw, json)
Hash identifier: 9t6zgK8yRcQiaSldAhevcD3NbZ7ixnq58b5pkFx10t0=
Subject key identifier: EB:B7:6D:97:9A:19:F6:FA:F3:71:D2:D8:3A:32:6A:C5:64:8A:BB:67
Authority key identifier: 90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
Certificate issuer: /CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Certificate serial: 0199FCC6BA9999834BE83931FE74536BB233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
Manifest number: 02F0
Signing time: Sun 19 Oct 2025 14:01:46 +0000
Manifest this update: Sun 19 Oct 2025 14:01:46 +0000
Manifest next update: Mon 20 Oct 2025 14:01:46 +0000
Files and hashes: 1: hnM5W0U-Qj_uQRhaO3TbcAuM76o.roa (hash: 4rFXrF5OPsxPLyOZLu+yOTZUft5NKdXEPlgvLrZwpqk=)
2: kPZLEhCNmzZnea-6z0gvefjA4xo.crl (hash: ZGTI4aYG0WCLk6Hdt8BAczGQ5thmZamtbQLjnvp/z1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ba:99:99:83:4b:e8:39:31:fe:74:53:6b:b2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Validity
Not Before: Oct 19 14:01:46 2025 GMT
Not After : Oct 20 14:01:46 2025 GMT
Subject: CN=ebb76d979a19f6faf371d2d83a326ac5648abb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:17:94:3f:9c:e4:01:64:fa:8a:b9:bf:cd:
a4:6c:d2:cc:5a:e0:06:0e:9e:71:18:13:0d:75:03:
b7:8b:93:52:6a:ac:46:64:1d:be:e6:51:df:92:a2:
0b:4d:10:33:71:ab:c1:97:9e:0d:4a:58:8d:58:c8:
f1:c9:49:17:30:4d:cf:04:b9:d9:cc:c0:b3:63:0a:
9d:c1:31:82:42:75:a9:a7:de:a0:6c:a0:26:7d:94:
82:4b:9f:df:19:32:7a:aa:89:06:73:0a:9b:96:6e:
4c:f8:13:83:2d:d9:ab:cf:5b:43:e1:5f:ec:ea:0e:
22:89:2b:1c:e7:49:06:44:f5:cd:ad:d9:d5:69:22:
36:17:ce:82:26:1a:d4:8c:ac:57:9f:a1:05:d5:8d:
20:cb:de:2e:a6:bb:09:9a:b7:14:ad:f2:41:be:37:
da:70:f1:9a:24:a3:56:63:61:a1:22:e5:86:c0:7f:
a3:8b:e0:63:0a:7a:96:dc:d9:c3:39:d7:6c:b2:7d:
78:d6:ff:93:7d:b3:bf:32:fb:0a:8b:08:2f:7b:15:
80:a9:e4:a4:83:07:67:65:e4:38:7e:81:3a:1b:fb:
8b:af:d5:5f:96:9b:15:79:f1:de:dc:91:d4:60:fe:
e6:e0:00:66:50:b9:cf:09:86:bf:06:b4:ea:a8:12:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B7:6D:97:9A:19:F6:FA:F3:71:D2:D8:3A:32:6A:C5:64:8A:BB:67
X509v3 Authority Key Identifier:
keyid:90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e9:6c:89:11:08:0e:ef:ed:2f:73:c1:84:ef:1d:a3:b5:cd:
14:9c:69:aa:9e:e2:49:74:54:1d:41:c4:fc:af:05:cc:fe:d9:
46:d7:33:47:6f:e6:b4:b1:a4:63:cf:15:81:85:29:a1:7c:d8:
87:ea:73:79:93:7c:84:5d:41:83:ed:73:5f:1c:cb:6e:47:b5:
2f:d4:96:04:91:27:8f:3b:a3:76:5b:35:42:87:ae:fd:5d:e8:
58:3b:33:59:ca:73:81:b1:ff:85:2a:36:7b:f2:3a:03:45:15:
b2:67:fc:8f:75:c0:dd:c2:4c:81:c2:8c:2b:87:e1:61:24:d2:
c5:80:a9:d7:4a:61:c9:ec:19:81:b4:2d:fc:8a:6e:e6:66:66:
d0:74:a7:36:03:cd:0d:00:b1:92:b3:c7:bb:5b:f3:ac:eb:91:
be:55:b0:2d:0e:bc:da:cf:dc:74:2e:0e:4a:34:68:43:aa:28:
1a:11:39:eb:e0:bb:2f:1e:dd:23:1d:d1:04:5b:ec:13:12:13:
5d:b9:51:20:48:ed:f8:e2:c6:cc:40:02:40:6b:04:75:7f:bb:
e6:80:fa:79:51:5e:1f:5f:85:57:3d:53:1b:e6:d0:ee:89:2c:
fa:f6:ac:ef:bd:e6:1c:f1:75:60:d6:47:de:26:5a:df:e7:36:
5b:8f:1e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:39 2025 by rpki-client