Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
File: kKfL8X0LoKJqsBpkBgFBEUziudE.mft (raw, json)
Hash identifier: foW3Q2av13Y48O34gZD2Iglns/46uZt+Gk3jQcelbik=
Subject key identifier: 33:3A:D9:FC:19:EC:47:93:65:0E:4A:B0:73:B9:94:DE:4A:DD:7D:91
Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
Certificate issuer: /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Certificate serial: 0198D4A81A3A006807A377EA2F5267B59E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
Manifest number: 08D4
Signing time: Sat 23 Aug 2025 02:00:43 +0000
Manifest this update: Sat 23 Aug 2025 02:00:43 +0000
Manifest next update: Sun 24 Aug 2025 02:00:43 +0000
Files and hashes: 1: kKfL8X0LoKJqsBpkBgFBEUziudE.crl (hash: fKP/1CpdNX/i6x1ZGWwu+t3tc1cCCoKPORmpoCclEMQ=)
2: rzOwmj7yNxYTqaPlre3nKadsFUw.roa (hash: DAKc4JSGHKnobmz2nOoFMUFGL3C1Ey22s4rc8SfdlJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1a:3a:00:68:07:a3:77:ea:2f:52:67:b5:9e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Validity
Not Before: Aug 23 02:00:43 2025 GMT
Not After : Aug 24 02:00:43 2025 GMT
Subject: CN=333ad9fc19ec4793650e4ab073b994de4add7d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:30:67:76:8b:88:af:f7:2b:c6:b3:04:9a:
df:7f:4d:78:c9:38:4c:6b:55:d0:cf:7f:ad:1d:e2:
3d:12:46:97:d3:04:d9:c4:07:1b:0c:25:9f:b8:4c:
2a:ea:29:cc:8c:f7:74:e2:d5:f5:dc:50:3c:ab:ff:
73:83:42:63:b7:fe:f9:68:11:21:94:0c:15:d5:ee:
fb:a7:d8:67:f4:ee:c0:17:00:3e:bc:0c:9e:ee:11:
4e:eb:4b:32:70:f7:64:9c:69:7f:48:6a:50:3c:2b:
cf:3b:d1:6a:67:ad:21:59:28:39:70:07:11:b9:af:
f4:e4:3b:3f:fc:54:e8:f4:72:83:a9:e1:1a:0d:bc:
1f:57:91:e4:15:77:df:82:cd:a9:eb:b0:00:dd:bb:
62:0d:5b:6f:ff:18:c0:de:b9:72:b8:19:8d:82:7b:
e5:b1:84:c3:6f:f5:f8:f2:39:dc:b5:90:52:d3:33:
c3:92:82:01:0e:30:53:c4:10:2d:96:c8:b5:6b:90:
4d:b2:a7:5f:22:62:fa:80:6e:61:07:ee:b4:c0:42:
11:00:80:d5:20:ee:94:0b:3f:d1:b5:eb:0e:77:43:
85:43:95:ba:31:78:41:3f:33:2d:58:04:64:85:c9:
07:75:91:30:ce:09:75:54:98:11:50:e9:ec:fc:df:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3A:D9:FC:19:EC:47:93:65:0E:4A:B0:73:B9:94:DE:4A:DD:7D:91
X509v3 Authority Key Identifier:
keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:21:f6:7f:3a:7e:38:52:32:3b:d6:a6:45:4f:fb:df:8e:bd:
9e:27:45:10:c8:1d:d2:8f:d0:8b:d0:45:18:3f:82:95:ea:b8:
ab:3c:45:a2:c7:cf:c7:0f:32:db:23:81:33:f0:72:b9:45:a4:
2d:4b:45:a4:a4:06:5e:8e:50:d7:ac:b3:a1:0f:66:a9:8b:10:
a4:d8:32:fa:b6:c4:01:f1:06:de:fd:10:61:14:ec:41:6c:a1:
0d:34:c3:91:87:24:d3:f5:a2:a3:e7:87:fb:9f:51:4f:fe:10:
4d:f3:68:47:db:fd:86:d7:b0:56:ad:77:f7:59:55:37:b4:0e:
b9:e5:4b:0a:4c:f1:20:f7:da:2e:f9:cc:bb:f5:85:1f:3e:09:
92:b9:53:1b:db:96:a6:2a:d1:00:20:bd:09:73:b8:6c:7d:84:
ab:9d:32:59:0f:e1:e1:c6:cf:83:00:d0:b3:89:e9:93:c7:ce:
ff:a5:26:f0:02:f6:3d:49:51:42:cf:7d:83:7b:97:e7:46:1f:
53:03:5a:3e:9b:4b:6a:c6:b5:30:33:e3:46:15:26:ca:54:27:
dc:e2:dc:df:64:5e:48:5a:09:24:64:a2:f6:bb:26:c6:98:17:
8a:96:7a:a5:d0:59:56:f4:55:d9:46:45:d0:dd:f1:93:d0:c1:
02:61:76:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:33 2025 by rpki-client