Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
File: kKfL8X0LoKJqsBpkBgFBEUziudE.mft (raw, json)
Hash identifier: B1TOp43FiEQ1xDhCqQTDgw5DGDvgUNYSet3tQg8Cp+s=
Subject key identifier: 21:A9:67:9A:53:A6:3F:3F:34:B8:2D:30:9C:EB:E7:32:91:F3:D4:14
Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
Certificate issuer: /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Certificate serial: 0199FE0FE6DD5974737D8FEE3D8918650112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
Manifest number: 096E
Signing time: Sun 19 Oct 2025 20:01:18 +0000
Manifest this update: Sun 19 Oct 2025 20:01:18 +0000
Manifest next update: Mon 20 Oct 2025 20:01:18 +0000
Files and hashes: 1: kKfL8X0LoKJqsBpkBgFBEUziudE.crl (hash: 4ffyFGWmA/YsfZC3GhQA/mN9hyUhb9xdXzFsMmewFF0=)
2: rzOwmj7yNxYTqaPlre3nKadsFUw.roa (hash: DAKc4JSGHKnobmz2nOoFMUFGL3C1Ey22s4rc8SfdlJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e6:dd:59:74:73:7d:8f:ee:3d:89:18:65:01:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Validity
Not Before: Oct 19 20:01:18 2025 GMT
Not After : Oct 20 20:01:18 2025 GMT
Subject: CN=21a9679a53a63f3f34b82d309cebe73291f3d414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:0b:99:17:13:2e:6f:d6:9a:93:19:66:96:
94:79:24:f9:f6:b6:da:a3:3d:ab:ed:bf:9c:d5:0b:
71:5b:81:d9:12:64:7a:27:4d:da:7f:b5:44:96:64:
70:df:00:3f:be:f0:c6:b5:3d:a2:19:41:cd:ec:2a:
0f:96:3b:e7:d7:8e:03:85:58:e4:4f:0b:c7:2b:ce:
15:37:29:ac:db:62:25:c8:49:b4:ea:b5:98:a6:db:
dc:be:73:0e:6a:dd:22:e7:3b:04:a7:9b:ce:62:6d:
65:1e:05:97:33:ba:7d:3b:cf:36:4e:8a:d5:59:09:
12:33:dc:b8:bf:21:ea:65:cd:51:f4:77:d6:29:cd:
09:95:06:1d:c3:71:85:8d:1a:15:20:2e:6b:80:d9:
63:4b:37:f4:28:2a:48:52:ac:7e:4e:ff:49:cd:9e:
0a:23:51:d0:e6:8b:8f:92:a6:ff:97:94:96:e7:08:
b7:8d:69:14:b5:c6:d1:e8:33:41:12:da:90:64:3e:
4f:57:a8:78:6d:53:e0:b5:de:24:45:10:89:99:fe:
54:2a:58:fb:d0:ed:e2:eb:2a:0b:fa:82:fd:c4:92:
00:a3:c9:0e:4a:f7:9e:24:e3:3d:0b:89:6e:db:15:
f4:aa:6b:18:e7:5c:bf:c7:57:e7:e8:10:0d:b9:77:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A9:67:9A:53:A6:3F:3F:34:B8:2D:30:9C:EB:E7:32:91:F3:D4:14
X509v3 Authority Key Identifier:
keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:30:52:13:a4:e8:27:8c:09:e3:02:76:5a:b5:f8:fe:7b:89:
90:39:99:fd:38:04:52:6a:43:77:df:f3:a4:cc:0b:11:80:97:
eb:7a:64:8e:2b:ac:89:ba:fb:85:ae:a1:48:d6:eb:cd:b0:e5:
02:b1:0a:27:b1:53:9e:f6:df:dc:1b:b7:2b:2b:77:09:24:21:
04:a7:80:cd:e5:49:d7:6b:c0:5f:67:50:5f:3d:6d:0a:8e:e9:
a5:f9:4f:eb:bb:1e:6f:ee:15:12:c2:84:ae:ff:c7:03:24:08:
7b:c5:9b:61:2f:4d:10:1c:df:7e:e2:ab:53:93:b2:06:6f:e0:
09:8b:1b:a6:ae:97:a7:0d:fe:b3:e3:8a:72:9a:05:a1:08:09:
37:87:33:02:0f:aa:5b:ad:0f:b2:4d:7f:5d:88:81:73:ae:a4:
07:28:48:c0:b6:b6:b2:a4:e4:eb:ce:33:28:69:11:61:85:7a:
7b:54:99:e2:bc:88:c6:e8:0f:d7:61:61:bc:c9:40:00:bc:07:
0c:33:d5:b6:9e:0f:79:45:a8:dc:a6:a3:a9:c3:23:56:22:d7:
51:19:78:16:bb:3e:e2:4b:6c:42:22:e2:b6:7d:00:4d:41:98:
90:4f:05:ac:d1:d8:4a:f6:c4:06:05:ed:88:a6:06:17:6e:71:
46:6e:99:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:54 2025 by rpki-client