Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier: 57ZpCC0HtsL+WYARESrBP2UCymk6BBq8LPkePRQSHE8=
Subject key identifier: DB:13:A0:4C:7F:78:89:56:B3:A2:2D:BB:2B:61:05:EC:9E:46:F5:41
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 0198D4A7B62DDC576174528B307D62A3DE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number: 101C
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: Is94Q2E0TcL99ktPLy3XOhFlG9s.roa (hash: QmvTWH4bMNqja9fgfEB+gdmLSFW4G8IyUfhDS4uj7O4=)
2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: z4qj5d5GhAYAXEotkjFqPpL15lP5TdBSJet83rIygZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b6:2d:dc:57:61:74:52:8b:30:7d:62:a3:de:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=db13a04c7f788956b3a22dbb2b6105ec9e46f541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:ac:9b:8c:6e:06:4d:28:a9:a9:32:a3:0c:
2e:c6:07:db:28:e6:05:0e:5f:0e:1d:5b:58:82:d7:
4a:2a:b4:af:7a:99:99:59:b5:79:28:06:e1:c4:01:
67:87:36:ec:67:f5:10:bc:14:3e:9d:3e:24:f9:49:
1d:08:89:56:75:be:68:4b:cf:81:33:4c:5c:df:c9:
16:c6:42:88:a1:98:f1:83:46:7c:a4:89:62:db:f6:
56:02:ff:f3:dd:08:44:2e:a6:fb:2f:74:95:7f:6f:
d0:86:6a:56:8d:c9:2b:f0:07:1e:52:75:49:45:7f:
e1:de:4c:be:39:f4:a2:98:c2:20:96:a1:c0:70:cf:
f6:58:51:46:6d:cd:a7:a5:5b:0a:5f:88:4e:48:f9:
6e:3e:b6:81:85:b0:c8:9f:d0:7b:9d:17:f0:aa:e8:
4b:93:8e:5f:86:40:bd:20:8c:9d:0c:ba:f1:a4:1c:
b0:48:49:00:c6:e9:13:39:03:e9:9c:b3:15:a4:63:
ef:09:2f:a1:b8:af:d4:d8:e7:f5:dd:de:52:68:ad:
5c:3f:40:f9:d6:c0:2e:57:08:50:87:47:62:d5:15:
71:82:6c:b8:fa:0c:c4:b0:da:5f:3f:34:46:54:a5:
e3:73:28:90:93:7a:57:3d:1c:30:4a:d3:f1:7b:35:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:13:A0:4C:7F:78:89:56:B3:A2:2D:BB:2B:61:05:EC:9E:46:F5:41
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d6:c3:b2:bc:61:36:5d:49:6f:61:4d:ee:24:2b:34:bc:a7:
01:70:73:6f:11:a4:e4:44:22:86:06:fe:5d:32:fd:a3:ec:69:
93:65:41:7d:05:5c:bc:0b:ef:fe:4f:e2:81:d6:65:26:fe:6a:
35:9e:9e:de:ef:4c:51:25:ed:86:ee:b0:ba:92:70:f6:98:74:
73:ca:82:f0:1c:a6:4d:a1:63:37:65:6c:41:24:ef:a0:59:48:
cd:d0:1a:08:2e:cb:4a:89:17:00:fa:c2:c4:f5:f7:85:3b:17:
94:7f:cd:73:5e:a2:e1:36:df:29:c0:68:39:62:e2:d6:10:4f:
96:4b:ab:97:21:45:a6:a3:48:e1:d3:ef:68:0e:c1:2f:9a:a6:
ea:34:5e:8e:a0:5c:21:77:54:0b:e0:d7:f1:c3:67:15:e7:bc:
ee:78:49:63:5c:46:20:c0:b0:89:48:23:8f:70:15:62:7a:0a:
3c:b3:8d:70:ad:dc:88:bc:1b:95:54:b2:ed:90:91:47:31:c8:
34:eb:3c:64:1d:cb:44:6c:fb:8e:cc:f3:5c:59:48:5b:8e:c0:
05:bc:7a:95:24:4d:f4:b2:8d:c6:8d:e7:47:84:20:63:67:2a:
9c:44:5e:55:be:80:ba:4f:68:f0:4e:54:5a:3b:12:2c:7b:f2:
44:66:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:07 2025 by rpki-client