Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json)
Hash identifier: Zd3fR0NVDwsBY8y0lLXN5vKv/vDx1/EaWpdv5eRp6ec=
Subject key identifier: 42:5C:6D:C0:2C:FB:E1:CC:8C:FD:38:85:B9:9F:5B:7A:78:A6:8B:90
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 0198D7A96D57FEDD9883573D5FBAF850B194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
Manifest number: 02DE
Signing time: Sat 23 Aug 2025 16:01:01 +0000
Manifest this update: Sat 23 Aug 2025 16:01:01 +0000
Manifest next update: Sun 24 Aug 2025 16:01:01 +0000
Files and hashes: 1: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: 94+7hvZB8H3G8TqirmPQb65Cv6mKbEUIw2LBhi9oAJ0=)
2: zfxMRbf5mdjUMmv1wfh1AaOn2cM.roa (hash: jcUlXj90sAjd3pxsJhlKVr5rFOgIRX3LrqrBra0uGW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:6d:57:fe:dd:98:83:57:3d:5f:ba:f8:50:b1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Aug 23 16:01:01 2025 GMT
Not After : Aug 24 16:01:01 2025 GMT
Subject: CN=425c6dc02cfbe1cc8cfd3885b99f5b7a78a68b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:12:69:61:13:82:a5:2f:16:a7:ab:c3:0c:ab:
dd:f2:f8:85:3d:ce:8e:e7:39:40:88:7f:ae:17:95:
f8:e8:aa:8a:ed:e2:42:39:99:cd:66:07:dc:e9:39:
f3:90:da:7d:b1:b8:e2:d3:ae:0a:b6:d1:b3:8d:d4:
35:c0:2d:3c:1c:e1:7c:53:c4:fb:d3:1e:a2:31:0e:
bc:ee:5f:79:2b:fa:23:be:1e:34:6d:b6:40:bd:4f:
6e:08:be:1d:ea:8c:6a:6c:5d:f0:60:cf:c2:75:31:
50:bf:f7:ca:e6:d9:40:16:dc:00:de:28:ee:72:75:
8e:f0:ef:68:03:c5:d0:35:dd:2b:1e:b4:73:8b:cb:
f6:51:02:b9:11:49:f5:1e:16:da:7d:dc:bb:3e:1d:
b9:41:68:da:0c:4f:99:85:9c:b0:98:86:65:4e:e9:
5d:8f:45:ae:fe:ee:6d:da:b8:06:6f:be:c2:e5:cc:
00:35:52:ae:53:24:ee:3a:55:d7:93:6a:5a:86:1d:
04:16:20:db:a7:61:30:30:c2:67:7e:57:4e:0e:4f:
e5:1b:92:0b:0e:60:40:10:cd:42:b5:28:d7:ed:07:
2e:92:fd:b4:04:90:ed:5e:fa:56:9a:53:b3:d1:be:
bb:98:fb:b4:5b:c1:22:f7:70:ec:4f:62:5d:89:f9:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:6D:C0:2C:FB:E1:CC:8C:FD:38:85:B9:9F:5B:7A:78:A6:8B:90
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:70:2e:ca:55:d4:c4:9f:0f:be:9f:36:74:cf:de:5a:08:6b:
d9:0c:de:e5:e4:ed:63:c7:d3:3d:c6:3b:ac:28:e2:77:5c:73:
f8:b4:4d:52:17:eb:1e:b6:3b:a8:80:d9:02:b0:2d:3a:fe:ae:
16:6a:ad:4f:65:48:a6:3e:5c:f6:00:ae:66:69:80:74:08:ac:
96:c3:79:a0:12:2e:b1:c3:f0:12:c1:ce:f9:8f:27:43:cd:eb:
b7:d4:f1:14:42:33:80:04:88:46:96:6b:07:dd:f2:9f:8e:b3:
ff:fd:54:ae:20:26:74:34:ce:7c:5e:7b:59:cf:db:19:95:be:
96:40:f3:4d:ce:1a:93:d2:b6:34:70:72:d9:3a:7f:82:cb:d4:
48:18:e6:80:42:93:a9:fd:d0:33:e6:5c:de:e9:cc:30:eb:6e:
c0:3e:57:77:64:89:47:99:89:18:df:34:a8:fa:82:60:ef:f0:
c4:06:3d:8b:0d:d6:60:fd:20:36:75:41:f0:c4:b5:3c:73:dc:
f0:5c:a1:4d:fb:1a:48:d5:47:53:d0:c6:f4:98:2a:1e:1d:70:
6b:0c:cc:61:c7:de:9d:64:ee:97:3e:70:53:60:01:cc:1f:20:
08:4a:74:af:5b:c4:5f:04:f3:85:ff:96:cd:4c:13:84:e0:cf:
29:3b:a2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:30:54 2025 by rpki-client