Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json)
Hash identifier: V9szHT56yOQ41l+BTlivyBS+11nsrlNFQdfsliYHlD4=
Subject key identifier: 88:03:67:0E:17:D2:B2:10:DA:82:A7:C3:D0:C4:0A:EA:42:8C:4B:67
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 0199FD3400D0619532E0DE1BA6D910998A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
Manifest number: 0376
Signing time: Sun 19 Oct 2025 16:01:07 +0000
Manifest this update: Sun 19 Oct 2025 16:01:07 +0000
Manifest next update: Mon 20 Oct 2025 16:01:07 +0000
Files and hashes: 1: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: oC7SfZdkOjUHfJI2kS9d25SMaUT4f0zndYAxqeHFSJs=)
2: zfxMRbf5mdjUMmv1wfh1AaOn2cM.roa (hash: jcUlXj90sAjd3pxsJhlKVr5rFOgIRX3LrqrBra0uGW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:00:d0:61:95:32:e0:de:1b:a6:d9:10:99:8a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Oct 19 16:01:07 2025 GMT
Not After : Oct 20 16:01:07 2025 GMT
Subject: CN=8803670e17d2b210da82a7c3d0c40aea428c4b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:83:c2:4f:f9:fd:e4:18:ca:de:2f:90:98:
ba:46:3f:6b:73:da:1b:1f:ef:72:5a:fc:2d:1a:e4:
f4:41:9a:b2:30:78:19:36:8c:55:e8:80:17:ec:5f:
2c:8f:73:db:ff:9e:c5:d6:ec:69:d7:45:fa:3b:46:
6e:ad:70:ab:28:83:dc:b5:c8:dd:e7:ab:30:c0:d1:
08:d6:a5:22:c1:77:2c:d5:5d:19:1d:36:6d:08:d7:
86:35:ba:21:bb:4c:0d:3f:5e:89:f7:75:9d:0d:c4:
4f:cb:d3:b6:07:93:44:d0:f8:16:6b:a6:5a:76:99:
36:08:86:7b:32:7d:38:64:fc:ea:68:88:e1:4a:d3:
d5:3d:8a:6a:20:bf:cb:5a:ac:02:c0:2d:10:3d:2e:
b5:52:0e:b4:70:8b:7d:cf:fd:e6:7b:47:ec:af:2b:
80:26:9c:ec:a8:50:2b:a5:cc:aa:f6:5a:d3:43:8e:
8d:04:1c:f5:f8:8a:a0:13:44:ac:40:55:6e:2b:14:
90:7d:b7:83:fa:c1:3c:c5:e5:84:46:67:20:53:c8:
4a:4e:46:38:e3:10:56:6d:6b:e6:80:c7:2a:80:c7:
ab:bc:1c:ad:c3:36:d7:6b:8e:74:16:b1:9b:fd:35:
e2:9e:9f:77:cc:6c:8f:ae:ef:a9:9b:3d:3a:ea:00:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:03:67:0E:17:D2:B2:10:DA:82:A7:C3:D0:C4:0A:EA:42:8C:4B:67
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:32:ce:d2:b7:f4:ec:41:7a:1c:38:71:8c:8d:84:35:ef:f6:
f8:15:e1:ee:1e:b3:c9:3f:da:e8:fa:3c:62:77:14:a2:12:c9:
b2:66:c0:8e:cd:e4:c4:06:2f:57:8b:90:93:d6:16:49:0d:a1:
dd:28:ec:37:6c:f2:b2:86:cf:71:c9:04:0b:b7:07:ba:66:93:
3c:c4:c1:70:da:7b:15:98:f7:f3:46:11:49:81:c7:41:6a:b7:
a9:af:17:8b:60:da:d8:2b:b3:ae:63:78:79:fd:f9:94:c3:58:
01:9f:7a:fd:da:a3:45:bc:b4:fc:e2:0f:05:17:93:f9:1e:91:
34:23:c5:d8:bd:45:e6:8c:fd:c0:09:3d:52:93:95:35:97:34:
a1:40:54:8c:c8:7a:78:f3:c5:27:93:07:3f:34:a6:fc:e6:bc:
a8:58:c0:1e:a8:4c:46:8c:c4:8b:17:76:e0:2b:f7:03:e1:94:
73:7a:a5:50:a3:37:25:04:07:2b:b3:fc:6a:d2:e8:a4:9e:fa:
d8:c5:da:98:b5:db:f1:86:40:b7:44:c7:86:2f:4f:f3:ff:7f:
e9:eb:f3:05:23:17:0a:5d:b4:23:93:5d:5e:ca:ed:52:93:bc:
21:df:40:81:60:d4:3c:f3:f2:bd:cb:7d:0c:45:10:b6:be:5d:
87:f9:83:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:09:16 2025 by rpki-client