Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
File: kFLex7dhf-OchVDuIMOCIBq5ryo.mft (raw, json)
Hash identifier: yQnsV8WYblKW2aawXT9cUk0GHt6ICqIYaDwCgtSDgFY=
Subject key identifier: 7E:1A:1E:AB:0C:00:A1:CF:F1:BD:DF:31:41:A7:DE:D6:52:8D:6D:84
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial: 0199FFC7CB61F9FAD56B55A2EE797E984A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
Manifest number: 116C
Signing time: Mon 20 Oct 2025 04:01:47 +0000
Manifest this update: Mon 20 Oct 2025 04:01:47 +0000
Manifest next update: Tue 21 Oct 2025 04:01:47 +0000
Files and hashes: 1: DoqnptEmFDIWhd5INYDJmXuCj7c.roa (hash: knJh69OYwi71VIfestV+KfQIeq85PlXtAbjPJg+Zm8w=)
2: kFLex7dhf-OchVDuIMOCIBq5ryo.crl (hash: HEuAUkmDjs/JIERJsCWxW2cbr7ZcGy0tF6K6whpcqqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:cb:61:f9:fa:d5:6b:55:a2:ee:79:7e:98:4a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Validity
Not Before: Oct 20 04:01:47 2025 GMT
Not After : Oct 21 04:01:47 2025 GMT
Subject: CN=7e1a1eab0c00a1cff1bddf3141a7ded6528d6d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:92:37:45:90:7b:45:5f:57:c4:c7:48:c1:
18:09:4e:59:bc:19:e2:e9:33:b6:cf:1f:f3:4e:50:
48:50:46:bb:d5:a2:34:3d:e5:66:ea:3b:19:8c:16:
e5:db:5a:bf:af:37:5d:1e:73:80:43:22:b8:2b:be:
71:55:66:46:98:77:11:c0:53:8f:1b:6f:08:8f:07:
af:32:a5:4e:aa:7e:0b:d2:6b:e4:d6:32:44:65:e6:
6c:b4:3b:56:db:63:2f:53:b5:b1:4f:ae:6a:75:04:
83:13:22:c2:f0:d9:32:08:0b:3d:b7:63:97:3d:e2:
b6:57:44:7b:93:98:4c:15:c2:d7:1c:bc:8d:4e:24:
42:01:f1:df:d1:eb:fa:76:bd:1c:f0:7f:81:f7:08:
a0:71:aa:52:83:b7:59:05:0b:ae:90:a8:25:b8:46:
10:ed:7e:7d:c0:22:23:19:ac:1d:8d:e9:73:b8:3a:
39:f1:88:a4:18:ac:46:26:61:01:1a:8d:b6:5d:14:
83:28:26:53:97:64:cf:03:7b:0e:89:3d:0f:e7:1b:
ff:e0:e6:0b:fe:17:35:44:31:98:bd:03:65:74:7f:
94:cd:7e:dd:66:6d:91:f3:e1:b6:43:05:3c:b0:90:
62:27:ac:b5:8f:2d:c0:9a:42:ad:2f:d8:42:a6:0f:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1A:1E:AB:0C:00:A1:CF:F1:BD:DF:31:41:A7:DE:D6:52:8D:6D:84
X509v3 Authority Key Identifier:
keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fb:2f:40:93:f8:f9:3a:b5:4f:17:f7:09:fd:de:5b:9d:b1:
1b:b5:ae:c4:c2:29:d9:3a:14:76:20:2e:e6:c5:e0:6f:92:a9:
55:c6:de:20:e3:3d:b3:4a:72:ce:3c:eb:9f:87:cd:b0:da:e6:
e9:40:ed:12:b5:9e:c4:b9:92:1a:ae:91:76:49:f6:18:95:ba:
00:00:d5:b2:8a:5d:8a:6e:20:07:52:d0:41:48:c7:e1:f1:75:
e7:f1:f4:78:ec:c9:28:23:7b:a3:ca:29:87:91:dd:23:41:85:
25:d2:bf:4b:3f:e5:c6:7d:8b:c3:da:e7:2a:bd:1f:6c:f9:eb:
af:1e:8d:01:87:87:c4:95:91:d8:92:d9:87:b1:e3:5b:92:68:
d7:6e:1e:c2:6b:18:39:1d:57:49:46:0a:17:d7:71:89:d7:fc:
10:24:a3:0e:38:3b:50:c0:90:85:7d:0f:72:65:71:8f:d4:92:
3a:ca:3c:26:77:1a:f1:e5:f1:a5:4b:12:86:1c:ef:6b:61:9f:
5e:a0:89:0a:62:a4:50:ca:45:f7:d7:02:18:2d:f2:84:24:a5:
ce:a8:e6:80:8e:c3:24:83:14:ab:6c:39:cb:77:65:64:67:29:
f4:a8:82:b5:14:a3:15:ca:1d:3f:1b:34:36:3c:97:41:31:f9:
bb:fe:35:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:52 2025 by rpki-client