Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: anKtwG3DdAf8VQ7pxre6L8kRXtqqXa2NKaFwtgX8NkY=
Subject key identifier: C1:62:22:AB:A5:DC:47:83:F9:F9:39:C4:83:7F:B3:AC:96:55:FA:92
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 0198D472E5D243AA7DD1CAD097059A83F502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 1340
Signing time: Sat 23 Aug 2025 01:02:36 +0000
Manifest this update: Sat 23 Aug 2025 01:02:36 +0000
Manifest next update: Sun 24 Aug 2025 01:02:36 +0000
Files and hashes: 1: kGuaXeFXRy7zk4r_fksHu1gERzY.roa (hash: eMXSEjP4L4hwARJ1cK2WpXviS5zDUtCbinSWtpWSvYQ=)
2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: enkD4PHXiTeYdNAO+ppuupnpb7BdOS2OEK8o6/ATxxo=)
3: vvhvE6BMZMFQ1G4AEbYHHR_JKn4.roa (hash: kxXe/kCsq1l7fHe6/tvS8feYMvtFQTY38JduUQRo50I=)
4: x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa (hash: mAB0u4tnNy3pI1HtMQoSvS+geYvks2ItYBoen25rRrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e5:d2:43:aa:7d:d1:ca:d0:97:05:9a:83:f5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Aug 23 01:02:36 2025 GMT
Not After : Aug 24 01:02:36 2025 GMT
Subject: CN=c16222aba5dc4783f9f939c4837fb3ac9655fa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:2a:29:94:87:49:df:67:c0:00:af:ab:f3:
69:8d:a0:5e:67:17:c6:da:d0:31:fe:79:ad:d2:16:
a9:61:ff:ba:52:06:02:ba:be:9f:80:77:ee:52:3d:
ef:9a:bb:2b:6c:6b:35:26:70:ed:bd:a8:56:7c:4c:
a5:fe:98:e4:d0:5a:cd:5e:ec:7b:21:8c:e1:79:aa:
4d:3d:3c:52:92:8e:2b:fb:c5:15:1e:a7:58:f1:89:
1d:e5:f2:e4:09:18:df:71:8f:56:1a:39:28:c3:15:
2c:4e:39:dc:db:c0:85:12:e3:dd:2e:72:00:7b:2c:
98:72:9d:2b:0b:10:0e:bd:c9:5d:e3:4f:50:c0:bd:
04:31:f0:e7:e3:0d:23:8a:2f:b8:0d:a0:5c:a2:5b:
2c:1a:f8:0a:d8:9c:1c:d7:d8:2e:ae:4a:14:db:01:
6e:52:c0:b1:84:96:83:f5:a7:a2:2e:db:15:5d:01:
60:fa:e4:60:47:04:89:35:f7:87:c3:c4:2d:46:ae:
62:c0:c8:10:77:e9:80:ef:5a:e9:3c:66:17:9b:7d:
6c:10:0a:7c:05:df:29:30:f3:2f:78:89:ee:71:e1:
f5:11:93:53:7f:39:68:2f:88:90:9d:22:d6:6f:c5:
d7:d1:dc:a1:5f:19:13:68:76:40:30:b8:9e:79:5f:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:62:22:AB:A5:DC:47:83:F9:F9:39:C4:83:7F:B3:AC:96:55:FA:92
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:af:99:db:b0:ee:50:7d:f1:29:1e:2a:26:eb:10:1c:11:e5:
89:da:d4:0a:3d:59:66:71:13:6e:20:49:e4:86:44:03:d6:fb:
08:52:29:27:04:06:51:0c:b0:dd:5b:fe:28:ff:bc:f6:ef:a4:
6a:01:dd:3b:d9:2e:70:c3:fa:43:1f:fb:52:e5:ce:94:88:42:
b3:46:c3:1b:97:e2:c0:43:9e:a3:bf:11:ae:9b:84:a1:bc:5b:
f1:30:24:0b:07:41:1f:f1:31:7c:9a:a3:8e:5a:d4:e5:f6:ff:
d2:3e:a6:0e:e5:8c:55:8d:2f:92:d6:57:4f:52:6f:c8:34:59:
b0:93:e0:ce:23:55:b0:80:29:3f:e5:38:40:a1:66:79:05:d2:
67:c4:32:4b:e5:71:e9:85:8c:ee:1c:cf:5f:42:fc:b8:0d:3e:
4e:04:c2:7b:a0:cc:f8:42:70:1f:88:a9:a0:95:c6:4f:94:0a:
4a:68:7d:3c:38:19:2f:10:11:5c:94:4a:d9:c8:70:ee:15:cc:
73:6d:b6:f2:aa:22:8e:3c:da:f5:3e:50:8b:c8:31:d6:eb:d8:
2a:b3:58:78:b6:9d:ea:21:ed:78:99:ec:f4:b4:0b:10:9c:5f:
e3:6b:fb:8b:d2:9b:86:24:83:6b:68:cc:1e:94:6a:4d:e6:69:
3d:83:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:10 2025 by rpki-client