Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: VLSkSc/C6IoND+dKhCbjg9O0XI4HCLmH9YmaWCC1wEY=
Subject key identifier: A0:FA:32:3A:38:2C:BF:76:07:53:D4:5D:D4:EC:D0:16:B7:DE:BC:7E
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 0199FCFD24CBF227B4B4F5ACE5C1985E3E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 09DF
Signing time: Sun 19 Oct 2025 15:01:12 +0000
Manifest this update: Sun 19 Oct 2025 15:01:12 +0000
Manifest next update: Mon 20 Oct 2025 15:01:12 +0000
Files and hashes: 1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: DeHscFxd366YeB3Iq99RUzxxFhO0dysVJz3JZRWcw5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:24:cb:f2:27:b4:b4:f5:ac:e5:c1:98:5e:3e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: Oct 19 15:01:12 2025 GMT
Not After : Oct 20 15:01:12 2025 GMT
Subject: CN=a0fa323a382cbf760753d45dd4ecd016b7debc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:e8:8e:f7:3c:fe:f7:0d:f5:13:4d:3e:1f:
c7:d1:2f:50:44:35:b4:6d:27:d4:26:c4:94:2d:d4:
39:59:49:6b:6b:5a:0e:8b:5b:43:78:75:3d:02:7e:
f0:f5:1f:e7:74:72:e9:a4:c7:8c:c8:bb:48:e8:7b:
b1:6d:24:e9:cb:59:62:7e:b5:5d:77:d9:d0:d6:b3:
f8:31:e0:70:ab:ce:d8:2a:38:26:5e:ba:c9:94:0d:
be:5f:a4:a6:1e:a7:6f:69:3f:34:b2:ee:60:01:7c:
f9:45:c5:9d:0b:27:79:23:fb:57:22:a8:cf:d7:22:
68:cb:4b:25:f2:d0:80:46:6d:39:14:3a:7e:a9:7e:
c7:b6:46:37:95:3e:a2:d1:4d:b9:cc:60:50:65:2f:
74:af:3d:bc:5d:16:08:ee:04:f0:b6:dc:61:80:ae:
e7:48:a6:75:d8:c9:a0:a3:c3:96:17:c0:bf:34:09:
9f:70:42:09:28:78:97:50:6a:c0:66:e2:15:f4:94:
e4:af:f5:2e:3f:81:b5:ad:9b:da:a5:19:1d:b1:47:
b5:0f:38:16:b2:f6:37:a3:57:73:3e:86:4c:0c:52:
e9:dc:36:35:48:89:17:32:99:17:77:c4:55:ab:b1:
8f:73:cc:ee:df:77:92:f9:f5:e1:b0:e3:df:91:6e:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FA:32:3A:38:2C:BF:76:07:53:D4:5D:D4:EC:D0:16:B7:DE:BC:7E
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a6:51:3d:91:b5:ee:df:d7:dd:a4:ff:2f:d5:43:10:cc:af:
a6:e6:4f:57:bb:93:2d:4c:ff:d7:01:c1:79:f4:9b:7e:64:30:
2e:bd:39:e8:a9:69:da:5b:31:02:5c:5f:bb:f3:52:b0:e3:9b:
92:20:35:8c:e0:51:53:bd:26:82:48:1d:30:87:53:6a:0b:5c:
3c:dc:dd:66:65:ac:6e:72:c8:3c:af:52:00:2d:a5:fa:f0:17:
29:02:27:a6:bd:2a:03:ab:fd:81:58:8f:4a:f3:1b:3f:9c:c0:
d8:0c:2d:63:a6:ca:4b:6f:eb:12:22:e4:eb:e0:5f:03:a6:eb:
62:fd:a5:4b:6e:e7:2d:3b:e4:a3:b3:93:63:02:51:ba:d9:28:
63:3f:cf:8e:6c:45:30:47:9b:8d:8d:91:c5:e4:16:85:03:39:
9f:bf:a2:1c:24:20:1b:38:f3:56:d3:e6:2d:31:6a:76:27:f0:
79:de:d8:40:90:8f:47:c5:9d:07:d4:06:9d:13:bd:f2:2f:96:
1e:a0:03:15:c4:c5:b1:65:5c:e8:5b:a2:79:fd:24:8e:b1:c8:
cd:7f:ef:68:49:3c:f8:ef:ba:9a:ed:66:f8:79:9a:92:5e:26:
f2:53:b1:e6:b2:88:cd:02:3e:66:19:08:03:37:57:80:05:b7:
df:e6:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:37 2025 by rpki-client