Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
File: kFLex7dhf-OchVDuIMOCIBq5ryo.mft (raw, json)
Hash identifier: JlqoCkSTNaW1sg8dgc2tow/jyScX5F1UDPEBJo3EgTs=
Subject key identifier: 36:AC:5B:38:25:6D:7F:27:D2:CD:EF:55:D1:C0:04:A3:B0:C7:EF:D9
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial: 0198D4732197815DA54699C0BAD50E632E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
Manifest number: 10D1
Signing time: Sat 23 Aug 2025 01:02:51 +0000
Manifest this update: Sat 23 Aug 2025 01:02:51 +0000
Manifest next update: Sun 24 Aug 2025 01:02:51 +0000
Files and hashes: 1: DoqnptEmFDIWhd5INYDJmXuCj7c.roa (hash: knJh69OYwi71VIfestV+KfQIeq85PlXtAbjPJg+Zm8w=)
2: kFLex7dhf-OchVDuIMOCIBq5ryo.crl (hash: JE4G7n1gCZC7Kbf9OziIAI4figXpyw5q31qSCz9lJkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:21:97:81:5d:a5:46:99:c0:ba:d5:0e:63:2e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Validity
Not Before: Aug 23 01:02:51 2025 GMT
Not After : Aug 24 01:02:51 2025 GMT
Subject: CN=36ac5b38256d7f27d2cdef55d1c004a3b0c7efd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:4c:a1:6d:95:38:17:74:49:96:c7:b0:29:
7a:57:45:18:35:24:86:65:58:4d:e5:df:39:25:a6:
03:c8:3d:b9:9c:b6:6d:4f:9a:3a:fb:8f:70:24:aa:
bb:d6:7d:71:21:2f:1a:96:ff:f0:28:2a:4e:80:fc:
6d:b0:59:89:75:e2:e3:b7:a2:7c:71:03:e0:96:00:
4e:09:79:87:17:6f:db:78:b2:50:c0:71:b2:c9:14:
65:85:5c:48:46:bd:21:14:85:6b:f4:7a:76:b4:79:
19:e4:28:a8:0b:98:7e:00:f0:0a:ff:03:2b:5b:0b:
8a:42:9a:0c:bd:b0:8f:b8:0a:d0:b6:80:44:10:a9:
b4:6a:d8:3e:7c:86:20:f5:c1:e3:fc:06:1d:59:29:
26:97:54:22:4c:b5:a0:55:94:e0:35:06:4a:4a:23:
64:a4:bd:29:f2:14:84:59:fc:cb:e6:88:a2:ca:e2:
eb:25:e8:ec:1e:47:c7:cb:04:26:1b:76:d8:1e:76:
08:d3:22:05:10:bc:c2:59:74:7e:ba:5a:cd:06:df:
ff:57:f1:65:2a:d8:c0:52:88:2f:4f:2a:54:30:f9:
c9:52:46:e5:db:d8:b7:91:0b:0e:15:c8:df:10:fd:
12:df:43:4c:af:30:92:e7:18:93:47:3c:54:be:66:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AC:5B:38:25:6D:7F:27:D2:CD:EF:55:D1:C0:04:A3:B0:C7:EF:D9
X509v3 Authority Key Identifier:
keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:45:c0:a5:cf:30:f5:b8:40:e6:58:09:b8:ca:c7:20:50:9c:
45:b2:f6:36:be:7d:ba:5a:b7:97:4a:34:39:51:ea:55:7b:13:
a9:31:56:53:0d:9d:4e:0f:06:90:e6:37:0a:ab:dc:ef:b6:66:
42:fb:bb:b7:11:fa:62:7e:0a:06:b7:81:dc:80:06:da:71:37:
e5:ea:23:0a:30:9f:20:9c:ff:78:0a:32:2d:9c:94:9d:ff:dc:
c5:00:43:27:03:93:d8:d9:07:9d:1b:1b:3a:0c:62:11:09:5e:
d5:4c:b5:bd:29:5f:c7:fd:52:bc:4e:26:45:19:8e:38:bf:2b:
1f:3e:bf:ee:f3:7b:4a:11:8f:63:a9:9a:f5:be:36:1e:28:6b:
d3:e7:29:24:a2:cf:4d:f6:fb:b7:79:7a:69:60:74:fa:58:ec:
57:91:29:99:a5:4a:35:41:e8:d6:9e:ac:b9:1e:52:5f:4f:c9:
d9:59:16:bf:c1:45:46:38:8f:a6:7f:3f:68:d8:f0:b2:4d:25:
c0:58:51:7d:2b:a9:5b:4f:cf:7f:0c:92:c3:46:05:af:39:99:
d1:a8:1f:e6:af:d2:c6:33:13:cf:d3:51:39:a5:d4:e2:42:cf:
d8:e9:3b:1a:ab:ef:a3:44:4c:98:bc:23:6a:b4:db:b0:69:59:
cf:bf:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:40 2025 by rpki-client