Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
File: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json)
Hash identifier: z5S7L4jDprrcOxZRhR1rFkF/k5YJOBdT64wrSc8wLco=
Subject key identifier: 0C:41:E4:72:CC:6B:4F:37:29:37:99:9A:BF:59:3E:08:E2:7D:25:D6
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Certificate issuer: /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial: 0198D7E1947C9085123BCA2292CAB052DA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 17:02:21 +0000
Manifest this update: Sat 23 Aug 2025 17:02:21 +0000
Manifest next update: Sun 24 Aug 2025 17:02:21 +0000
Files and hashes: 1: 1-JNlJinjq7kuel35O_T8kUcWQBw.roa (hash: 1A2mPTXvGu8ShjNKjNG8ljmXuNzR5l5s2QNyKormBf0=)
2: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: P5K4eHYlu8nSYq8gg6oxqcpTMUg8UuK0ZB5MrAG/Rrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:94:7c:90:85:12:3b:ca:22:92:ca:b0:52:da:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
Validity
Not Before: Aug 23 17:02:21 2025 GMT
Not After : Aug 24 17:02:21 2025 GMT
Subject: CN=0c41e472cc6b4f372937999abf593e08e27d25d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:85:f3:63:6b:36:8a:f6:9f:01:aa:40:a3:6a:
72:a3:7d:49:7a:63:72:94:ed:a9:8c:00:23:70:8b:
c6:a5:36:0b:f0:5d:0a:77:cc:b2:4f:f2:58:ee:b3:
34:39:71:6b:b5:7c:6c:71:d9:0d:f6:ec:25:fc:35:
b4:85:17:dd:51:0d:5f:80:d0:f5:e9:a2:2a:3a:54:
6a:96:a3:5c:46:eb:68:6b:b1:44:a6:dd:13:18:83:
6a:7a:f4:ce:1c:52:fc:4e:20:ba:09:f6:42:13:ea:
65:36:4f:d9:c0:60:5a:ee:ff:e0:4f:2b:bf:76:54:
11:77:12:e3:9b:98:e5:d2:e4:29:f3:75:e2:80:67:
a8:ce:ee:e0:66:16:69:b7:f1:e2:60:9c:60:80:4f:
06:b2:92:29:15:b6:82:b6:e3:85:e0:6f:ea:0b:59:
e6:b0:7a:b6:62:35:6a:b6:a2:8d:0f:52:97:ac:e4:
67:ff:8d:d4:7c:20:6c:fc:57:4d:30:66:68:e2:74:
e3:8d:f0:c7:98:4d:76:23:3f:d2:ba:e4:bb:17:3a:
bc:0e:7d:ec:72:a2:30:b0:d3:e9:e3:8c:85:c1:aa:
c6:61:5c:84:40:45:d8:a8:d8:db:82:cf:fb:9b:70:
63:23:38:41:b1:b6:6c:ed:84:2a:17:5f:4e:3b:e8:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:41:E4:72:CC:6B:4F:37:29:37:99:9A:BF:59:3E:08:E2:7D:25:D6
X509v3 Authority Key Identifier:
keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fa:f9:d6:eb:73:91:ae:b6:d7:e1:6b:3e:34:2c:19:d8:e8:
c7:fd:9e:bf:23:f3:c7:f3:28:20:aa:d7:3a:a6:f1:fb:64:67:
5b:1a:fa:67:25:00:53:d1:e6:78:ee:2f:19:5b:e4:45:49:09:
f6:50:14:25:67:0d:75:31:6c:62:2d:c6:91:e0:6f:15:59:cd:
9e:28:8b:c2:2f:96:36:c8:6d:1b:2e:9a:1c:f1:92:a5:8b:e4:
c7:17:d4:c1:0a:2a:06:e0:dc:51:9f:74:3b:e3:d0:7e:62:03:
0d:13:c5:ce:f3:4f:ce:10:2f:6a:9b:55:fc:f3:95:d1:a3:ce:
e1:af:19:c2:3d:3c:a9:be:3b:6d:04:84:ba:9a:f6:fa:fe:df:
68:f9:76:02:81:e1:6c:4d:de:60:eb:85:a9:89:72:64:0b:8f:
e8:f2:6a:09:a2:f8:98:f0:e1:fc:8a:42:35:2d:9b:b1:68:60:
b5:01:01:24:b0:c4:c6:57:03:7b:7f:e8:da:3e:c1:92:a7:98:
0d:c2:d7:7f:b5:6f:cb:25:84:09:93:e1:6b:2f:c2:01:9d:23:
7b:d8:04:ac:21:b5:f8:cd:1a:3d:77:2f:a2:a8:64:f5:f6:b2:
62:d0:cc:8d:47:ff:34:cc:ed:22:ad:7c:14:20:c0:c1:c9:42:
8e:a4:ac:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:50:29 2025 by rpki-client